140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) 16:56:33 executing program 3: getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)={'mangle\x00', 0x0, [0x200]}, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x5d) pipe2$watch_queue(&(0x7f00000007c0), 0x80) io_cancel(0x0, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000008c0)='ns/pid\x00') 16:56:33 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) 16:56:33 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, &(0x7f0000000200)={0x0, 0x0, 0x2, {0x2}}, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00220f0400001b0f6719672be475c667530dade6151b2630212387"], 0x0}, 0x0) [ 509.966683][T11683] loop0: detected capacity change from 0 to 64 [ 509.985386][T11686] loop2: detected capacity change from 0 to 64 16:56:33 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000480), 0x8) [ 510.007234][ T40] audit: type=1804 audit(1655225793.795:425): pid=11683 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/731/file0/bus" dev="loop0" ino=1048726 res=1 errno=0 16:56:33 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001c00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000004f00)=[{{&(0x7f0000001d80)=@abs, 0x6e, &(0x7f0000003280)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x1, 0x0) 16:56:33 executing program 3: syz_clone3(&(0x7f0000001180)={0x100000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 510.118905][ T40] audit: type=1804 audit(1655225793.915:426): pid=11693 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/731/file0/bus" dev="loop0" ino=1048726 res=1 errno=0 16:56:33 executing program 3: syz_clone3(&(0x7f0000001180)={0x100000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 510.171139][ T1344] ieee802154 phy1 wpan1: encryption failed: -22 [ 510.269937][ T9561] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 510.528347][ T9561] usb 6-1: Using ep0 maxpacket: 16 [ 510.658775][ T9561] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.658811][ T9561] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.658881][ T9561] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 510.658910][ T9561] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.661138][ T9561] usb 6-1: config 0 descriptor?? 16:56:34 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) 16:56:34 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) 16:56:34 executing program 3: syz_clone3(&(0x7f0000001180)={0x100000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 510.726406][T11702] loop2: detected capacity change from 0 to 64 [ 510.770009][T11706] loop0: detected capacity change from 0 to 64 [ 510.802303][ T40] audit: type=1804 audit(1655225794.595:427): pid=11706 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/732/file0/bus" dev="loop0" ino=1048730 res=1 errno=0 [ 510.885019][ T40] audit: type=1804 audit(1655225794.675:428): pid=11708 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/732/file0/bus" dev="loop0" ino=1048730 res=1 errno=0 [ 511.139896][ T9561] hid (null): report_id 0 is invalid [ 511.148591][ T9561] input: HID 0458:5019 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0458:5019.0004/input/input11 [ 511.217691][T11702] bio_check_eod: 1252 callbacks suppressed [ 511.217714][T11702] syz-executor.2: attempt to access beyond end of device [ 511.217714][T11702] loop2: rw=2049, sector=67, nr_sectors = 1 limit=64 [ 511.217998][T11702] syz-executor.2: attempt to access beyond end of device [ 511.217998][T11702] loop2: rw=2049, sector=70, nr_sectors = 1 limit=64 [ 511.218086][T11702] syz-executor.2: attempt to access beyond end of device [ 511.218086][T11702] loop2: rw=2049, sector=72, nr_sectors = 1 limit=64 [ 511.218128][T11702] syz-executor.2: attempt to access beyond end of device [ 511.218128][T11702] loop2: rw=2049, sector=74, nr_sectors = 1 limit=64 [ 511.218193][T11702] syz-executor.2: attempt to access beyond end of device [ 511.218193][T11702] loop2: rw=2049, sector=76, nr_sectors = 1 limit=64 [ 511.218357][T11702] syz-executor.2: attempt to access beyond end of device [ 511.218357][T11702] loop2: rw=2049, sector=77, nr_sectors = 1 limit=64 [ 511.218565][T11702] syz-executor.2: attempt to access beyond end of device [ 511.218565][T11702] loop2: rw=2049, sector=80, nr_sectors = 1 limit=64 [ 511.218633][T11702] syz-executor.2: attempt to access beyond end of device [ 511.218633][T11702] loop2: rw=2049, sector=82, nr_sectors = 1 limit=64 [ 511.218683][T11702] syz-executor.2: attempt to access beyond end of device [ 511.218683][T11702] loop2: rw=2049, sector=83, nr_sectors = 1 limit=64 [ 511.218733][T11702] syz-executor.2: attempt to access beyond end of device [ 511.218733][T11702] loop2: rw=2049, sector=84, nr_sectors = 1 limit=64 [ 511.225041][ T9561] input: HID 0458:5019 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0458:5019.0004/input/input12 [ 511.233859][ T9561] kye 0003:0458:5019.0004: input,hiddev0,hidraw1: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.1-1/input0 [ 511.373974][ T1960] usb 6-1: USB disconnect, device number 21 16:56:35 executing program 3: syz_clone3(&(0x7f0000001180)={0x100000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 16:56:35 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) 16:56:35 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, &(0x7f0000000200)={0x0, 0x0, 0x2, {0x2}}, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00220f0400001b0f6719672be475c667530dade6151b2630212387"], 0x0}, 0x0) 16:56:35 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) [ 511.891102][T11712] loop2: detected capacity change from 0 to 64 [ 511.908399][T11713] loop0: detected capacity change from 0 to 64 16:56:35 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @cond}}) [ 511.964800][ T40] audit: type=1804 audit(1655225795.755:429): pid=11713 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/733/file0/bus" dev="loop0" ino=1048733 res=1 errno=0 16:56:35 executing program 3: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 16:56:35 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) write$input_event(r0, 0x0, 0x0) [ 512.033122][ T40] audit: type=1804 audit(1655225795.825:430): pid=11721 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/733/file0/bus" dev="loop0" ino=1048733 res=1 errno=0 16:56:35 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x4004556a, 0x24) 16:56:35 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000026c0)=[{&(0x7f00000002c0)="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", 0xf7f, 0x81}], 0x0, 0x0) [ 512.140187][T11729] loop3: detected capacity change from 0 to 8 [ 512.144732][ T4116] Dev loop3: unable to read RDB block 8 [ 512.144785][ T4116] loop3: unable to read partition table [ 512.144935][ T4116] loop3: partition table beyond EOD, truncated [ 512.238024][ T9561] usb 6-1: new high-speed USB device number 22 using dummy_hcd 16:56:36 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) [ 512.310173][T10170] buffer_io_error: 1204 callbacks suppressed [ 512.310188][T10170] Buffer I/O error on dev loop2, logical block 66, lost async page write [ 512.310212][T10170] Buffer I/O error on dev loop2, logical block 69, lost async page write [ 512.310229][T10170] Buffer I/O error on dev loop2, logical block 70, lost async page write [ 512.310247][T10170] Buffer I/O error on dev loop2, logical block 88, lost async page write [ 512.310264][T10170] Buffer I/O error on dev loop2, logical block 90, lost async page write [ 512.310281][T10170] Buffer I/O error on dev loop2, logical block 92, lost async page write [ 512.310298][T10170] Buffer I/O error on dev loop2, logical block 94, lost async page write [ 512.310315][T10170] Buffer I/O error on dev loop2, logical block 98, lost async page write [ 512.310351][T10170] Buffer I/O error on dev loop2, logical block 103, lost async page write [ 512.310370][T10170] Buffer I/O error on dev loop2, logical block 104, lost async page write [ 512.350017][T11731] loop2: detected capacity change from 0 to 64 [ 512.487901][ T9561] usb 6-1: Using ep0 maxpacket: 16 [ 512.628277][ T9561] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.628313][ T9561] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 512.628342][ T9561] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 512.628365][ T9561] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.630369][ T9561] usb 6-1: config 0 descriptor?? [ 513.099870][ T9561] hid (null): report_id 0 is invalid [ 513.105542][ T9561] input: HID 0458:5019 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0458:5019.0005/input/input15 [ 513.107335][ T9561] input: HID 0458:5019 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0458:5019.0005/input/input16 [ 513.180353][ T9561] kye 0003:0458:5019.0005: input,hiddev0,hidraw1: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.1-1/input0 [ 513.301534][ T9561] usb 6-1: USB disconnect, device number 22 16:56:37 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, &(0x7f0000000200)={0x0, 0x0, 0x2, {0x2}}, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00220f0400001b0f6719672be475c667530dade6151b2630212387"], 0x0}, 0x0) 16:56:37 executing program 3: syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f00000005c0)={[{@umask}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}]}) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000540)='./file0\x00', 0x0, 0x0) syz_clone(0x41009000, &(0x7f00000001c0)="266f4b5dec4b5a4309983905485287723b0686fa4cf347b10d456a05764fb8d59c2f14db9bda333d16c2896db035a2ab8d76d7839feb14dade91f51dbe04a8bd142914612bab557f99f1319fe7d8b8f2f51fbbe8", 0x54, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="9ea9dd61569d4092cb96a7336f7383126282b8fa644cf332fee4ba2ab73c5a7a018c2a38d6eec12065739bf19c290203fd7b2a37ae50ba4998ae537c469b2070e190ddd5dd03894efb983a04080ef7a0d471676c65f9b205e24227201de34fc54a59b8f9f0d556151c8be079ce7781893cc72de824d7ec9dd77c6304f3996cdfb142528cb752ca3c125911e4785b2b544b72186a88b184fd522d46beff79be8266df4689ccb51bf3c631e5561db67a20086e85fb4f45b9b5a1be7f9c385a26047e") lstat(&(0x7f00000003c0)='\x00', &(0x7f0000000400)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat(r1, &(0x7f0000000540)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) 16:56:37 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x1ffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) 16:56:37 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) [ 513.829418][T11737] loop0: detected capacity change from 0 to 64 [ 513.832667][T11738] loop2: detected capacity change from 0 to 64 [ 513.841764][ T40] audit: type=1804 audit(1655225797.635:431): pid=11737 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/734/file0/bus" dev="loop0" ino=1048737 res=1 errno=0 [ 513.908808][ T40] audit: type=1804 audit(1655225797.705:432): pid=11741 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/734/file0/bus" dev="loop0" ino=1048737 res=1 errno=0 16:56:37 executing program 3: syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f00000005c0)={[{@umask}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}]}) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000540)='./file0\x00', 0x0, 0x0) syz_clone(0x41009000, &(0x7f00000001c0)="266f4b5dec4b5a4309983905485287723b0686fa4cf347b10d456a05764fb8d59c2f14db9bda333d16c2896db035a2ab8d76d7839feb14dade91f51dbe04a8bd142914612bab557f99f1319fe7d8b8f2f51fbbe8", 0x54, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="9ea9dd61569d4092cb96a7336f7383126282b8fa644cf332fee4ba2ab73c5a7a018c2a38d6eec12065739bf19c290203fd7b2a37ae50ba4998ae537c469b2070e190ddd5dd03894efb983a04080ef7a0d471676c65f9b205e24227201de34fc54a59b8f9f0d556151c8be079ce7781893cc72de824d7ec9dd77c6304f3996cdfb142528cb752ca3c125911e4785b2b544b72186a88b184fd522d46beff79be8266df4689ccb51bf3c631e5561db67a20086e85fb4f45b9b5a1be7f9c385a26047e") lstat(&(0x7f00000003c0)='\x00', &(0x7f0000000400)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat(r1, &(0x7f0000000540)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) [ 514.148097][ T41] usb 6-1: new high-speed USB device number 23 using dummy_hcd 16:56:38 executing program 3: syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f00000005c0)={[{@umask}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}]}) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000540)='./file0\x00', 0x0, 0x0) syz_clone(0x41009000, &(0x7f00000001c0)="266f4b5dec4b5a4309983905485287723b0686fa4cf347b10d456a05764fb8d59c2f14db9bda333d16c2896db035a2ab8d76d7839feb14dade91f51dbe04a8bd142914612bab557f99f1319fe7d8b8f2f51fbbe8", 0x54, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="9ea9dd61569d4092cb96a7336f7383126282b8fa644cf332fee4ba2ab73c5a7a018c2a38d6eec12065739bf19c290203fd7b2a37ae50ba4998ae537c469b2070e190ddd5dd03894efb983a04080ef7a0d471676c65f9b205e24227201de34fc54a59b8f9f0d556151c8be079ce7781893cc72de824d7ec9dd77c6304f3996cdfb142528cb752ca3c125911e4785b2b544b72186a88b184fd522d46beff79be8266df4689ccb51bf3c631e5561db67a20086e85fb4f45b9b5a1be7f9c385a26047e") lstat(&(0x7f00000003c0)='\x00', &(0x7f0000000400)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat(r1, &(0x7f0000000540)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) 16:56:38 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) 16:56:38 executing program 3: syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f00000005c0)={[{@umask}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}]}) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000540)='./file0\x00', 0x0, 0x0) syz_clone(0x41009000, &(0x7f00000001c0)="266f4b5dec4b5a4309983905485287723b0686fa4cf347b10d456a05764fb8d59c2f14db9bda333d16c2896db035a2ab8d76d7839feb14dade91f51dbe04a8bd142914612bab557f99f1319fe7d8b8f2f51fbbe8", 0x54, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="9ea9dd61569d4092cb96a7336f7383126282b8fa644cf332fee4ba2ab73c5a7a018c2a38d6eec12065739bf19c290203fd7b2a37ae50ba4998ae537c469b2070e190ddd5dd03894efb983a04080ef7a0d471676c65f9b205e24227201de34fc54a59b8f9f0d556151c8be079ce7781893cc72de824d7ec9dd77c6304f3996cdfb142528cb752ca3c125911e4785b2b544b72186a88b184fd522d46beff79be8266df4689ccb51bf3c631e5561db67a20086e85fb4f45b9b5a1be7f9c385a26047e") lstat(&(0x7f00000003c0)='\x00', &(0x7f0000000400)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat(r1, &(0x7f0000000540)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) [ 514.378059][T11754] loop2: detected capacity change from 0 to 64 [ 514.408669][ T41] usb 6-1: Using ep0 maxpacket: 16 [ 514.558224][ T41] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.558265][ T41] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 514.558447][ T41] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 514.558469][ T41] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.560950][ T41] usb 6-1: config 0 descriptor?? [ 515.075422][ T41] hid (null): report_id 0 is invalid [ 515.087650][ T41] input: HID 0458:5019 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0458:5019.0006/input/input17 [ 515.165046][ T41] input: HID 0458:5019 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0458:5019.0006/input/input18 [ 515.244076][ T41] kye 0003:0458:5019.0006: input,hiddev0,hidraw1: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.1-1/input0 [ 515.276973][ T41] usb 6-1: USB disconnect, device number 23 16:56:39 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x1ffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) 16:56:39 executing program 3: syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f00000005c0)={[{@umask}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}]}) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000540)='./file0\x00', 0x0, 0x0) syz_clone(0x41009000, &(0x7f00000001c0)="266f4b5dec4b5a4309983905485287723b0686fa4cf347b10d456a05764fb8d59c2f14db9bda333d16c2896db035a2ab8d76d7839feb14dade91f51dbe04a8bd142914612bab557f99f1319fe7d8b8f2f51fbbe8", 0x54, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="9ea9dd61569d4092cb96a7336f7383126282b8fa644cf332fee4ba2ab73c5a7a018c2a38d6eec12065739bf19c290203fd7b2a37ae50ba4998ae537c469b2070e190ddd5dd03894efb983a04080ef7a0d471676c65f9b205e24227201de34fc54a59b8f9f0d556151c8be079ce7781893cc72de824d7ec9dd77c6304f3996cdfb142528cb752ca3c125911e4785b2b544b72186a88b184fd522d46beff79be8266df4689ccb51bf3c631e5561db67a20086e85fb4f45b9b5a1be7f9c385a26047e") lstat(&(0x7f00000003c0)='\x00', &(0x7f0000000400)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat(r1, &(0x7f0000000540)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) 16:56:39 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) [ 515.816548][T11764] loop2: detected capacity change from 0 to 64 [ 515.829082][T11763] loop0: detected capacity change from 0 to 64 16:56:39 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) 16:56:39 executing program 1: getgroups(0x2, &(0x7f0000002100)=[0x0, 0x0]) [ 515.872782][ T40] audit: type=1804 audit(1655225799.665:433): pid=11764 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir3074280079/syzkaller.qGS2Hp/809/file0/bus" dev="loop2" ino=1048745 res=1 errno=0 [ 515.872835][ T40] audit: type=1804 audit(1655225799.665:434): pid=11763 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/735/file0/bus" dev="loop0" ino=1048743 res=1 errno=0 16:56:39 executing program 1: bpf$BPF_BTF_LOAD(0x23, &(0x7f0000007200)={0x0, &(0x7f0000007180)=""/68, 0x0, 0x44}, 0x20) [ 515.939387][ T40] audit: type=1804 audit(1655225799.735:435): pid=11770 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/735/file0/bus" dev="loop0" ino=1048743 res=1 errno=0 [ 515.940379][ T40] audit: type=1804 audit(1655225799.735:436): pid=11771 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir3074280079/syzkaller.qGS2Hp/809/file0/bus" dev="loop2" ino=1048745 res=1 errno=0 16:56:39 executing program 1: syz_mount_image$squashfs(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, 0x4, &(0x7f00000018c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0xc2, &(0x7f0000001ac0)={[{'syzkaller\x00'}, {'\x00'}, {'syzkaller\x00'}], [{@fowner_gt}]}) [ 516.012801][T11776] ======================================================= [ 516.012801][T11776] WARNING: The mand mount option has been deprecated and [ 516.012801][T11776] and is ignored by this kernel. Remove the mand [ 516.012801][T11776] option from the mount to silence this warning. [ 516.012801][T11776] ======================================================= [ 516.012950][T11776] squashfs: Unknown parameter 'syzkaller' 16:56:39 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) [ 516.386414][T11763] bio_check_eod: 902 callbacks suppressed [ 516.386483][T11763] syz-executor.0: attempt to access beyond end of device [ 516.386483][T11763] loop0: rw=2049, sector=136, nr_sectors = 121 limit=64 16:56:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@dev={0xfe, 0x80, '\x00', 0x20}}, 0x14) 16:56:40 executing program 3: syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f00000005c0)={[{@umask}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}]}) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000540)='./file0\x00', 0x0, 0x0) syz_clone(0x41009000, &(0x7f00000001c0)="266f4b5dec4b5a4309983905485287723b0686fa4cf347b10d456a05764fb8d59c2f14db9bda333d16c2896db035a2ab8d76d7839feb14dade91f51dbe04a8bd142914612bab557f99f1319fe7d8b8f2f51fbbe8", 0x54, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="9ea9dd61569d4092cb96a7336f7383126282b8fa644cf332fee4ba2ab73c5a7a018c2a38d6eec12065739bf19c290203fd7b2a37ae50ba4998ae537c469b2070e190ddd5dd03894efb983a04080ef7a0d471676c65f9b205e24227201de34fc54a59b8f9f0d556151c8be079ce7781893cc72de824d7ec9dd77c6304f3996cdfb142528cb752ca3c125911e4785b2b544b72186a88b184fd522d46beff79be8266df4689ccb51bf3c631e5561db67a20086e85fb4f45b9b5a1be7f9c385a26047e") lstat(&(0x7f00000003c0)='\x00', &(0x7f0000000400)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat(r1, &(0x7f0000000540)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) [ 516.465892][T11764] syz-executor.2: attempt to access beyond end of device [ 516.465892][T11764] loop2: rw=2049, sector=136, nr_sectors = 121 limit=64 16:56:40 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) 16:56:40 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x4008556c, 0x0) 16:56:40 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x1ffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) [ 516.507352][T11785] loop0: detected capacity change from 0 to 64 16:56:40 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000280)={'syz0\x00'}, 0x45c) [ 516.534636][T11789] loop2: detected capacity change from 0 to 64 16:56:40 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$UI_SET_MSCBIT(r0, 0xc0189436, 0x0) [ 516.559579][ T40] audit: type=1804 audit(1655225800.355:437): pid=11789 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir3074280079/syzkaller.qGS2Hp/810/file0/bus" dev="loop2" ino=1048747 res=1 errno=0 [ 516.570490][ T40] audit: type=1804 audit(1655225800.365:438): pid=11785 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/736/file0/bus" dev="loop0" ino=1048746 res=1 errno=0 16:56:40 executing program 1: syz_clone3(&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1}, 0x58) syz_clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 516.628280][ T40] audit: type=1804 audit(1655225800.425:439): pid=11795 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/736/file0/bus" dev="loop0" ino=1048746 res=1 errno=0 [ 516.668619][ T40] audit: type=1804 audit(1655225800.455:440): pid=11798 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir3074280079/syzkaller.qGS2Hp/810/file0/bus" dev="loop2" ino=1048747 res=1 errno=0 16:56:40 executing program 1: syz_open_dev$dri(&(0x7f0000000740), 0xa99, 0x600000) 16:56:40 executing program 3: syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f00000005c0)={[{@umask}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}]}) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000540)='./file0\x00', 0x0, 0x0) syz_clone(0x41009000, &(0x7f00000001c0)="266f4b5dec4b5a4309983905485287723b0686fa4cf347b10d456a05764fb8d59c2f14db9bda333d16c2896db035a2ab8d76d7839feb14dade91f51dbe04a8bd142914612bab557f99f1319fe7d8b8f2f51fbbe8", 0x54, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="9ea9dd61569d4092cb96a7336f7383126282b8fa644cf332fee4ba2ab73c5a7a018c2a38d6eec12065739bf19c290203fd7b2a37ae50ba4998ae537c469b2070e190ddd5dd03894efb983a04080ef7a0d471676c65f9b205e24227201de34fc54a59b8f9f0d556151c8be079ce7781893cc72de824d7ec9dd77c6304f3996cdfb142528cb752ca3c125911e4785b2b544b72186a88b184fd522d46beff79be8266df4689ccb51bf3c631e5561db67a20086e85fb4f45b9b5a1be7f9c385a26047e") lstat(&(0x7f00000003c0)='\x00', &(0x7f0000000400)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat(r1, &(0x7f0000000540)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) [ 517.148997][T11785] syz-executor.0: attempt to access beyond end of device [ 517.148997][T11785] loop0: rw=2049, sector=136, nr_sectors = 121 limit=64 [ 517.237898][T11789] syz-executor.2: attempt to access beyond end of device 16:56:41 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) 16:56:41 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$input_event(r0, &(0x7f0000000240), 0x45c) 16:56:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) 16:56:41 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) [ 517.237898][T11789] loop2: rw=2049, sector=136, nr_sectors = 121 limit=64 [ 517.277181][T11811] loop0: detected capacity change from 0 to 64 16:56:41 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000040)='syz1\x00') 16:56:41 executing program 3: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x72d, "ceb30246818af4ce2b91c03d556d2271e7660327d8aea0e62d1d816356648e00"}) [ 517.334106][T11814] loop2: detected capacity change from 0 to 64 16:56:41 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000004680), 0x601, 0x0) 16:56:41 executing program 3: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x72d, "ceb30246818af4ce2b91c03d556d2271e7660327d8aea0e62d1d816356648e00"}) [ 517.884083][T11814] syz-executor.2: attempt to access beyond end of device [ 517.884083][T11814] loop2: rw=2049, sector=136, nr_sectors = 121 limit=64 16:56:41 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x1ffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) 16:56:41 executing program 3: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x72d, "ceb30246818af4ce2b91c03d556d2271e7660327d8aea0e62d1d816356648e00"}) 16:56:41 executing program 1: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x72d, "ceb30246818af4ce2b91c03d556d2271e7660327d8aea0e62d1d816356648e00"}) [ 517.906100][T11811] syz-executor.0: attempt to access beyond end of device [ 517.906100][T11811] loop0: rw=2049, sector=136, nr_sectors = 121 limit=64 16:56:41 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) 16:56:41 executing program 1: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x72d, "ceb30246818af4ce2b91c03d556d2271e7660327d8aea0e62d1d816356648e00"}) 16:56:41 executing program 3: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x72d, "ceb30246818af4ce2b91c03d556d2271e7660327d8aea0e62d1d816356648e00"}) [ 517.983429][T11831] loop0: detected capacity change from 0 to 64 16:56:41 executing program 1: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x72d, "ceb30246818af4ce2b91c03d556d2271e7660327d8aea0e62d1d816356648e00"}) [ 518.031238][T11838] loop2: detected capacity change from 0 to 64 16:56:41 executing program 3: r0 = fsopen(&(0x7f00000002c0)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, 0x0, 0x0, 0xffffffffffffffff) [ 518.622634][T11838] syz-executor.2: attempt to access beyond end of device [ 518.622634][T11838] loop2: rw=2049, sector=136, nr_sectors = 121 limit=64 16:56:42 executing program 1: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) 16:56:42 executing program 3: clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000280), &(0x7f00000002c0)={0x80000001, 0x2}, 0x0, &(0x7f0000000380)={0x0, r0+10000000}, &(0x7f0000000400)={&(0x7f00000003c0)={[0x8]}, 0x8}) 16:56:42 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x1ffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) [ 518.659203][T11831] syz-executor.0: attempt to access beyond end of device [ 518.659203][T11831] loop0: rw=2049, sector=136, nr_sectors = 121 limit=64 16:56:42 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) 16:56:42 executing program 3: r0 = syz_clone(0xc1040000, 0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000100)) syz_clone3(&(0x7f0000000440)={0x10800000, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340), {}, 0x0, 0x0, &(0x7f00000003c0)=""/19, &(0x7f0000000400)=[0x0, 0x0, r0], 0x3}, 0x58) syz_clone3(0x0, 0x0) getpgrp(r0) 16:56:42 executing program 1: linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000002a80), &(0x7f0000002ac0)='./file0\x00', 0x80, 0x1, &(0x7f0000002d40)=[{0x0}], 0x6, &(0x7f0000002dc0)={[], [{@subj_role={'subj_role', 0x3d, '\',[%@.!'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\xee'}}]}) syz_mount_image$nfs(&(0x7f0000002e40), &(0x7f0000002e80)='./file0\x00', 0x0, 0x2, &(0x7f0000003100)=[{&(0x7f0000002f00)}, {0x0, 0x0, 0x100000000}], 0x20, &(0x7f0000003180)={[{'\xee'}, {'/$'}, {'blkio.throttle.io_serviced\x00'}, {}], [{@fsname}, {@measure}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@pcr={'pcr', 0x3d, 0x1f}}, {@seclabel}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x6, 0x4, &(0x7f00000032c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xee}, [@jmp]}, &(0x7f0000003340)='syzkaller\x00', 0xfffffff8, 0x1d, &(0x7f0000003380)=""/29, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000033c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000003400)={0x5, 0xf, 0x2, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000003440)=[0xffffffffffffffff]}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000036c0)={&(0x7f00000035c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003680)={&(0x7f0000003600)=@delqdisc={0x34, 0x25, 0x0, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xf, 0xf}, {0xf, 0xfff1}, {0xd, 0x8}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffffb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x964166d4}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x2003, 0xffffffffffffffff, 0x0) [ 518.717306][T11851] loop2: detected capacity change from 0 to 64 [ 518.760597][T11854] UDF-fs: bad mount option "subj_role='" or missing value [ 518.764075][T11856] loop0: detected capacity change from 0 to 64 16:56:42 executing program 1: socket$inet(0x2, 0x3, 0x2) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request={0x16}}}}}, 0x0) 16:56:42 executing program 3: openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) syz_mount_image$udf(&(0x7f0000002a80), &(0x7f0000002ac0)='./file0\x00', 0x80, 0x4, &(0x7f0000002d40)=[{&(0x7f0000002b00)="f85cdac309bbd7ef1069e60f32a97a67e1ea1d45c74b868bd70657613a016748fcdcfa73ba441af923dd1669c419c61ae9e753520f3f8b4a0d0daa94d73e82f03288b29fdf0666c20197da11b105724462e8a0dd7fbe77e9398c55772d7364d50ca8b48392fb1dcfdd04a9", 0x6b}, {&(0x7f0000002b80)="32d3083666d0a9b8d0fde21f1a8775c40f1e98158ce6e21604e91b", 0x1b, 0x6}, {&(0x7f0000002bc0)="8d82ae75d94933e37c409810695fdf1364f846ee5c24a09274ae6192f7458423a22bf7dfcc1218d168660d46a9b09f8916d1b87f6678cbec5615e762f52a903fce45cdab3385", 0x46}, {&(0x7f0000002c40)="3eae044f1eb0a4b2db8ebaedb442fb165d1a73b5f752a909197563bf880d247247249148798be188581e47da70c1439e9dd03ac005589c5ffd557a4425d301ae57f7db594bdc94bfeb156b88ffcaf7091c0942fd0798fb46be8b5041ac194bda200e7146554778aa2507f499b4f32cd9f3f2b1cbc4d4", 0x76, 0x380c}], 0x6, &(0x7f0000002dc0)={[{@unhide}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@subj_role={'subj_role', 0x3d, '\',[%@.!'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\xee'}}]}) syz_mount_image$nfs(&(0x7f0000002e40), &(0x7f0000002e80)='./file0\x00', 0xffff, 0x2, &(0x7f0000003100)=[{&(0x7f0000002ec0), 0x0, 0x8}, {&(0x7f0000003000)}], 0x0, &(0x7f0000003180)={[{'smackfsfloor'}, {}, {'\xee'}, {'/$'}, {'blkio.throttle.io_serviced\x00'}, {}, {':,^$'}], [{@fsname}, {@measure}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@pcr={'pcr', 0x3d, 0x1f}}, {@seclabel}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}]}) 16:56:42 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x24) [ 518.925230][T11864] loop3: detected capacity change from 0 to 56 16:56:42 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) [ 518.950951][T11864] UDF-fs: bad mount option "defcontext=root" or missing value [ 519.013314][T11864] loop3: detected capacity change from 0 to 127 [ 519.013618][T11864] nfs: Unknown parameter 'smackfsfloor' [ 519.337016][T11851] syz-executor.2: attempt to access beyond end of device [ 519.337016][T11851] loop2: rw=2049, sector=136, nr_sectors = 121 limit=64 16:56:43 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x1ffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) [ 519.397330][T11856] syz-executor.0: attempt to access beyond end of device [ 519.397330][T11856] loop0: rw=2049, sector=136, nr_sectors = 121 limit=64 16:56:43 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) 16:56:43 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000024c0), 0x0, 0x0) setns(r0, 0x0) 16:56:43 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000000)=@raw=[@alu={0x7, 0x0, 0x0, 0x2, 0x6, 0x100, 0x1}, @map_idx_val], &(0x7f0000000040)='GPL\x00', 0x2, 0xf6, &(0x7f0000000080)=""/246, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x3}, 0x8, 0x10, 0x0}, 0x80) [ 519.426222][T11873] loop2: detected capacity change from 0 to 64 16:56:43 executing program 1: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000002340), 0xc0842, 0x0) 16:56:43 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x4004556d, 0x24) [ 519.455380][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 519.455412][ T40] audit: type=1804 audit(1655225803.245:453): pid=11873 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir3074280079/syzkaller.qGS2Hp/814/file0/bus" dev="loop2" ino=1048760 res=1 errno=0 [ 519.471037][T11877] loop0: detected capacity change from 0 to 64 16:56:43 executing program 3: syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x101081) 16:56:43 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x1, &(0x7f0000000000)=@raw=[@alu], &(0x7f0000000040)='GPL\x00', 0x0, 0xf6, &(0x7f0000000080)=""/246, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 519.512335][ T40] audit: type=1804 audit(1655225803.305:454): pid=11881 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir3074280079/syzkaller.qGS2Hp/814/file0/bus" dev="loop2" ino=1048760 res=1 errno=0 [ 519.575482][ T40] audit: type=1804 audit(1655225803.365:455): pid=11886 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/740/file0/bus" dev="loop0" ino=1048762 res=1 errno=0 [ 519.934539][T11877] buffer_io_error: 606 callbacks suppressed 16:56:43 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) [ 519.934562][T11877] Buffer I/O error on dev loop0, logical block 64, lost async page write [ 519.934603][T11877] Buffer I/O error on dev loop0, logical block 66, lost async page write [ 519.934639][T11877] Buffer I/O error on dev loop0, logical block 68, lost async page write [ 519.934675][T11877] Buffer I/O error on dev loop0, logical block 70, lost async page write [ 519.934709][T11877] Buffer I/O error on dev loop0, logical block 72, lost async page write [ 519.934742][T11877] Buffer I/O error on dev loop0, logical block 74, lost async page write [ 519.934776][T11877] Buffer I/O error on dev loop0, logical block 75, lost async page write 16:56:43 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) 16:56:43 executing program 3: bpf$BPF_BTF_LOAD(0x16, &(0x7f0000007200)={0x0, &(0x7f0000007180)=""/68, 0x0, 0x44}, 0x20) 16:56:43 executing program 1: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x12d02, 0x0) [ 519.934810][T11877] Buffer I/O error on dev loop0, logical block 76, lost async page write [ 519.934873][T11877] Buffer I/O error on dev loop0, logical block 78, lost async page write 16:56:43 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x0, {0x0, 0x80}}) 16:56:43 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000024c0), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) [ 519.934907][T11877] Buffer I/O error on dev loop0, logical block 79, lost async page write [ 520.038944][T11893] loop2: detected capacity change from 0 to 64 [ 520.068627][ T40] audit: type=1804 audit(1655225803.865:456): pid=11893 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir3074280079/syzkaller.qGS2Hp/815/file0/bus" dev="loop2" ino=1048764 res=1 errno=0 [ 520.086241][T11899] loop0: detected capacity change from 0 to 64 16:56:43 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc}, 0x48) 16:56:43 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000007200)={0x0, &(0x7f0000007180)=""/68, 0x0, 0x44}, 0x20) [ 520.128792][ T40] audit: type=1804 audit(1655225803.925:457): pid=11900 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir3074280079/syzkaller.qGS2Hp/815/file0/bus" dev="loop2" ino=1048764 res=1 errno=0 [ 520.181775][ T40] audit: type=1804 audit(1655225803.975:458): pid=11905 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/741/file0/bus" dev="loop0" ino=1048766 res=1 errno=0 16:56:44 executing program 1: capget(0x0, &(0x7f0000000080)) 16:56:44 executing program 3: setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x278) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x18, 0xa01, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) r1 = socket(0x10, 0x0, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f000000000000f10febca0546", @ANYRES32=r3, @ANYBLOB="0000f2ffffffffff000000000a0001006e6574656d00000010010200ca000000"], 0x140}}, 0x894) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000200)="81a1d96e8db0b35814581f58f2dd19ce58d4ca724203b10524b260517e745df24782b41b0c9ec8d1fd49ad5bfb79ec99cdb853f377667efc74d76be657a0776aef2839705a70c79a6aa02d66a95f91c403fb5d3ac93931be32af00597041334165f29888f460b48fff3908a58e05ef78222355501d663b7df0b946ce8c78899575f936c68ba0682a3214c8ed923aead9d10abb", 0x93}, {&(0x7f0000000340)="e6ffaa77bc7cfc8ebbc4a9257403475c7f85ab0737417c9d7b6671cc1cca6684efdcdea7d3d907e05e8e6dcbea3391bf521d07835f1608fffefa4ccd2d604b601f2ce586984ba19acd59b76499e2b30423fa855a075f654138d748aa366f6233b2bf296d5f52e466ed32d764b72942e974d7255b777efee52b91fc148e62514511341246336ba4c9b3e29e712d8e7c5dcf49c1e9743a0c46745aad8b2704817c2774b37f041fe543c6fba70a0f6293309df484018e39900478ca087dbce54db1eb9f1addc96e45b0ae1376b1d2a48f7fcc2f35f68540fb5f1ae8fe001554a878a14cacc5d52011cf", 0xe8}, {&(0x7f0000000940)="b42b783373187f88c023b0d6442571ea0b46e0865e5c635b7d05bf89440a2f43c10485c22f03cc2bf0b4e7d47ef52c6f3f430cfce3cef9f978957dd73d1a84d00e989670dad3cdfc247cf72899cacd974a5c4792e7dcb22bcb171f26b0a85932b4860411018805272daa36ae2588a11fbb35b9133ccc9c014b6e560f978ce231b546a542eb424f2f56687e35b5303e4ea68ac2c5bd0ce9d587ec7075958def37bbc21e6bc33e0c94a78732c9162fc54221555f8599a2e216a60bfd1669c4ffa21578e9", 0xc3}, {&(0x7f0000000a40)="c69cd72686c0bfb154ac5b6224bbb38890d29ecfe70d5a76bbceb982e198ad026a1478d010f0f9ccbbb23f83d0ed3ddac7a8229052f84f52914e7cfd8a2b135ff9ec242fc5484a408ff58b4e951960dac1de1a8526ac347eeeaa1cca788f86b8cda48ebf6ab122ccfe90f75104becbd492d21a69d70a2acf1292aabd", 0x7c}], 0x4, &(0x7f0000000440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @broadcast, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0x50}, 0xc004) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000300)=[@window, @timestamp, @timestamp, @timestamp, @window, @mss, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x18, 0xa01, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/4096, 0x1000}], 0x2}, 0x2020) sendto$inet(0xffffffffffffffff, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) sendmsg$nl_route(r2, &(0x7f0000000c00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000b00)=@ipv4_newnexthop={0xd8, 0x68, 0x400, 0x70bd27, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x8}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}, @NHA_GROUP={0x24, 0x2, [{0x2, 0xb5}, {0x0, 0xfb}, {0x1, 0x4}, {0xffffffff, 0x27}]}, @NHA_ENCAP_TYPE={0x6}, @NHA_ENCAP={0x80, 0x8, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0x7c, 0x1, {0x4, 0x78, 0x1, 0x9, 0x74, [@local, @private1, @private0, @mcast2, @remote, @loopback, @remote]}}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x240048c5}, 0x8084) 16:56:44 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) 16:56:44 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) [ 520.611775][T11910] loop0: detected capacity change from 0 to 64 16:56:44 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045564, 0x24) 16:56:44 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000024c0), 0x0, 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) 16:56:44 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000dc0), &(0x7f00000012c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x80000, &(0x7f00000003c0)) [ 520.650817][T11915] loop2: detected capacity change from 0 to 64 16:56:44 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001c00)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = gettid() sendmsg$unix(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r1}}}], 0x20}, 0x0) [ 520.679126][ T40] audit: type=1804 audit(1655225804.475:459): pid=11915 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir3074280079/syzkaller.qGS2Hp/816/file0/bus" dev="loop2" ino=1048770 res=1 errno=0 16:56:44 executing program 1: socket$inet6(0xa, 0x5, 0xffff) [ 520.701551][ T40] audit: type=1804 audit(1655225804.495:460): pid=11921 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/742/file0/bus" dev="loop0" ino=1048768 res=1 errno=0 16:56:44 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) [ 520.755151][ T40] audit: type=1804 audit(1655225804.545:461): pid=11923 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir3074280079/syzkaller.qGS2Hp/816/file0/bus" dev="loop2" ino=1048770 res=1 errno=0 16:56:44 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x0, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) [ 521.153257][T11929] loop0: detected capacity change from 0 to 64 16:56:45 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) 16:56:45 executing program 3: openat$ptp0(0xffffffffffffff9c, &(0x7f0000004640), 0x0, 0x0) 16:56:45 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) 16:56:45 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x0) [ 521.236347][ T40] audit: type=1804 audit(1655225805.025:462): pid=11934 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/743/file0/bus" dev="loop0" ino=1048772 res=1 errno=0 16:56:45 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x1, &(0x7f0000000000)=@raw=[@ldst], &(0x7f0000000040)='syzkaller\x00', 0x6, 0xd5, &(0x7f0000000080)=""/213, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:56:45 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x0) 16:56:45 executing program 3: syz_clone(0xc0aa1400, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x40080) [ 521.325331][T11940] loop2: detected capacity change from 0 to 64 [ 521.649404][T11929] bio_check_eod: 577 callbacks suppressed [ 521.649426][T11929] syz-executor.0: attempt to access beyond end of device [ 521.649426][T11929] loop0: rw=2049, sector=70, nr_sectors = 1 limit=64 [ 521.649488][T11929] syz-executor.0: attempt to access beyond end of device [ 521.649488][T11929] loop0: rw=2049, sector=87, nr_sectors = 1 limit=64 16:56:45 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x0, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) [ 521.649559][T11929] syz-executor.0: attempt to access beyond end of device [ 521.649559][T11929] loop0: rw=2049, sector=92, nr_sectors = 1 limit=64 [ 521.649587][T11929] syz-executor.0: attempt to access beyond end of device [ 521.649587][T11929] loop0: rw=2049, sector=93, nr_sectors = 1 limit=64 [ 521.649612][T11929] syz-executor.0: attempt to access beyond end of device [ 521.649612][T11929] loop0: rw=2049, sector=94, nr_sectors = 1 limit=64 [ 521.649733][T11929] syz-executor.0: attempt to access beyond end of device [ 521.649733][T11929] loop0: rw=2049, sector=95, nr_sectors = 1 limit=64 [ 521.649760][T11929] syz-executor.0: attempt to access beyond end of device [ 521.649760][T11929] loop0: rw=2049, sector=103, nr_sectors = 1 limit=64 [ 521.649961][T11929] syz-executor.0: attempt to access beyond end of device [ 521.649961][T11929] loop0: rw=2049, sector=107, nr_sectors = 1 limit=64 [ 521.649988][T11929] syz-executor.0: attempt to access beyond end of device [ 521.649988][T11929] loop0: rw=2049, sector=108, nr_sectors = 1 limit=64 [ 521.650014][T11929] syz-executor.0: attempt to access beyond end of device [ 521.650014][T11929] loop0: rw=2049, sector=109, nr_sectors = 1 limit=64 [ 521.753299][T11948] loop0: detected capacity change from 0 to 64 16:56:45 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x0) 16:56:45 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) 16:56:45 executing program 3: syz_usb_connect(0x4, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090244000101000000090400000302060000052406000005240000000d240f0100000000000000000009058103ff03000000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_disconnect(r0) 16:56:45 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x0) [ 522.038075][T11955] loop2: detected capacity change from 0 to 64 16:56:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, r1, 0x209, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x72}}]}, 0x3c}}, 0x0) 16:56:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, r1, 0x209, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x72}}]}, 0x3c}}, 0x0) 16:56:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, r1, 0x209, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x72}}]}, 0x3c}}, 0x0) [ 522.258037][ T9923] usb 8-1: new high-speed USB device number 12 using dummy_hcd 16:56:46 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x0, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) 16:56:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, r1, 0x209, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x72}}]}, 0x3c}}, 0x0) [ 522.331972][T11968] loop0: detected capacity change from 0 to 64 [ 522.498156][ T9923] usb 8-1: Using ep0 maxpacket: 16 16:56:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, r1, 0x209, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x72}}]}, 0x3c}}, 0x0) [ 522.618490][ T9923] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.618562][ T9923] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 522.698305][ T9923] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 522.698342][ T9923] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 522.698395][ T9923] usb 8-1: SerialNumber: syz [ 522.718695][T11953] raw-gadget gadget.3: fail, usb_ep_enable returned -22 [ 522.945792][T11953] raw-gadget gadget.3: fail, usb_ep_enable returned -22 [ 523.418461][ T9923] cdc_ether: probe of 8-1:1.0 failed with error -71 [ 523.422782][ T9923] usb 8-1: USB disconnect, device number 12 16:56:47 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) 16:56:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, r1, 0x209, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x72}}]}, 0x3c}}, 0x0) 16:56:47 executing program 3: syz_usb_connect(0x4, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090244000101000000090400000302060000052406000005240000000d240f0100000000000000000009058103ff03000000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_disconnect(r0) 16:56:47 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) [ 524.103238][T11976] loop0: detected capacity change from 0 to 64 [ 524.103825][T11977] loop2: detected capacity change from 0 to 64 16:56:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, r1, 0x209, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x72}}]}, 0x3c}}, 0x0) 16:56:47 executing program 1: pipe2$watch_queue(0x0, 0x80) syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) 16:56:48 executing program 1: syz_open_dev$sndpcmp(&(0x7f0000003000), 0x0, 0x0) 16:56:48 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r0, 0x0, 0x0}, 0x20) [ 524.378124][T11840] usb 8-1: new high-speed USB device number 13 using dummy_hcd 16:56:48 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r0, 0x0, 0x0}, 0x20) 16:56:48 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) [ 524.556552][T11993] loop0: detected capacity change from 0 to 64 [ 524.616749][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 524.616768][ T40] audit: type=1804 audit(1655225808.405:471): pid=11994 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/747/file0/bus" dev="loop0" ino=1048786 res=1 errno=0 [ 524.618408][ T40] audit: type=1804 audit(1655225808.415:472): pid=11994 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/747/file0/bus" dev="loop0" ino=1048786 res=1 errno=0 [ 524.619859][T11840] usb 8-1: Using ep0 maxpacket: 16 [ 524.758042][T11840] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.758066][T11840] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 524.856398][T11840] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 524.856432][T11840] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 524.856460][T11840] usb 8-1: SerialNumber: syz [ 524.888995][T11979] raw-gadget gadget.3: fail, usb_ep_enable returned -22 [ 525.126686][T11979] raw-gadget gadget.3: fail, usb_ep_enable returned -22 [ 525.588749][T11840] cdc_ether: probe of 8-1:1.0 failed with error -71 [ 525.599507][T11840] usb 8-1: USB disconnect, device number 13 16:56:50 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) 16:56:50 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r0, 0x0, 0x0}, 0x20) 16:56:50 executing program 3: syz_usb_connect(0x4, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090244000101000000090400000302060000052406000005240000000d240f0100000000000000000009058103ff03000000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_disconnect(r0) 16:56:50 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) [ 526.274902][T11998] loop2: detected capacity change from 0 to 64 16:56:50 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r0, 0x0, 0x0}, 0x20) [ 526.282410][T12000] loop0: detected capacity change from 0 to 64 16:56:50 executing program 1: openat$sw_sync(0xffffffffffffff9c, &(0x7f00000010c0), 0x103000, 0x0) [ 526.349708][ T40] audit: type=1804 audit(1655225810.145:473): pid=12005 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/748/file0/bus" dev="loop0" ino=1048788 res=1 errno=0 16:56:50 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000007200)={0x0, &(0x7f0000000080)=""/89, 0x1f, 0x3a3b4b76e9dcda03}, 0xfffffe82) [ 526.350314][ T40] audit: type=1804 audit(1655225810.145:474): pid=12005 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/748/file0/bus" dev="loop0" ino=1048788 res=1 errno=0 16:56:50 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x401c5820, 0x0) [ 526.351248][ T40] audit: type=1804 audit(1655225810.145:475): pid=12006 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir3074280079/syzkaller.qGS2Hp/820/file0/bus" dev="loop2" ino=1048790 res=1 errno=0 [ 526.567968][T10560] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 526.638511][T12000] buffer_io_error: 1867 callbacks suppressed [ 526.638526][T12000] Buffer I/O error on dev loop0, logical block 64, lost async page write [ 526.638551][T12000] Buffer I/O error on dev loop0, logical block 65, lost async page write [ 526.638572][T12000] Buffer I/O error on dev loop0, logical block 66, lost async page write [ 526.638591][T12000] Buffer I/O error on dev loop0, logical block 67, lost async page write [ 526.638611][T12000] Buffer I/O error on dev loop0, logical block 68, lost async page write [ 526.638630][T12000] Buffer I/O error on dev loop0, logical block 69, lost async page write [ 526.638650][T12000] Buffer I/O error on dev loop0, logical block 70, lost async page write [ 526.638670][T12000] Buffer I/O error on dev loop0, logical block 72, lost async page write [ 526.638707][T12000] Buffer I/O error on dev loop0, logical block 73, lost async page write [ 526.638727][T12000] Buffer I/O error on dev loop0, logical block 75, lost async page write [ 526.662279][ T1091] bio_check_eod: 1401 callbacks suppressed [ 526.662292][ T1091] kworker/u17:8: attempt to access beyond end of device 16:56:50 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x0, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) 16:56:50 executing program 1: fanotify_mark(0xffffffffffffffff, 0x175, 0x0, 0xffffffffffffff9c, 0x0) [ 526.662292][ T1091] loop0: rw=1, sector=71, nr_sectors = 1 limit=64 [ 526.662321][ T1091] kworker/u17:8: attempt to access beyond end of device [ 526.662321][ T1091] loop0: rw=1, sector=74, nr_sectors = 1 limit=64 [ 526.662503][ T1091] kworker/u17:8: attempt to access beyond end of device [ 526.662503][ T1091] loop0: rw=1, sector=78, nr_sectors = 1 limit=64 [ 526.662527][ T1091] kworker/u17:8: attempt to access beyond end of device [ 526.662527][ T1091] loop0: rw=1, sector=80, nr_sectors = 1 limit=64 [ 526.662549][ T1091] kworker/u17:8: attempt to access beyond end of device [ 526.662549][ T1091] loop0: rw=1, sector=82, nr_sectors = 1 limit=64 [ 526.662706][ T1091] kworker/u17:8: attempt to access beyond end of device [ 526.662706][ T1091] loop0: rw=1, sector=83, nr_sectors = 1 limit=64 [ 526.662743][ T1091] kworker/u17:8: attempt to access beyond end of device [ 526.662743][ T1091] loop0: rw=1, sector=91, nr_sectors = 1 limit=64 [ 526.662765][ T1091] kworker/u17:8: attempt to access beyond end of device [ 526.662765][ T1091] loop0: rw=1, sector=94, nr_sectors = 1 limit=64 [ 526.662951][ T1091] kworker/u17:8: attempt to access beyond end of device [ 526.662951][ T1091] loop0: rw=1, sector=96, nr_sectors = 1 limit=64 [ 526.662975][ T1091] kworker/u17:8: attempt to access beyond end of device [ 526.662975][ T1091] loop0: rw=1, sector=101, nr_sectors = 1 limit=64 [ 526.791945][T12016] loop2: detected capacity change from 0 to 64 [ 526.840137][T10560] usb 8-1: Using ep0 maxpacket: 16 [ 526.879357][ T40] audit: type=1804 audit(1655225810.675:476): pid=12017 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir3074280079/syzkaller.qGS2Hp/821/file0/bus" dev="loop2" ino=1048792 res=1 errno=0 [ 526.988237][T10560] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.988287][T10560] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 527.081194][T10560] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 527.081224][T10560] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 527.081246][T10560] usb 8-1: SerialNumber: syz [ 527.098549][T12002] raw-gadget gadget.3: fail, usb_ep_enable returned -22 [ 527.324183][T12002] raw-gadget gadget.3: fail, usb_ep_enable returned -22 [ 527.809037][T10560] cdc_ether: probe of 8-1:1.0 failed with error -71 [ 527.820474][T10560] usb 8-1: USB disconnect, device number 14 16:56:52 executing program 3: syz_usb_connect(0x4, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090244000101000000090400000302060000052406000005240000000d240f0100000000000000000009058103ff03000000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_disconnect(r0) 16:56:52 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, 0x0, 0x0) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) 16:56:52 executing program 1: add_key(&(0x7f0000001b40)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) 16:56:52 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x0, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) [ 528.484274][T12021] loop0: detected capacity change from 0 to 64 [ 528.492806][T12023] loop2: detected capacity change from 0 to 64 16:56:52 executing program 1: add_key(&(0x7f0000001b40)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) 16:56:52 executing program 1: add_key(&(0x7f0000001b40)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) 16:56:52 executing program 1: add_key(&(0x7f0000001b40)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) [ 528.577213][ T40] audit: type=1804 audit(1655225812.365:477): pid=12031 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/749/file0/bus" dev="loop0" ino=1048796 res=1 errno=0 [ 528.583705][ T40] audit: type=1804 audit(1655225812.375:478): pid=12029 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir3074280079/syzkaller.qGS2Hp/822/file0/bus" dev="loop2" ino=1048794 res=1 errno=0 [ 528.583803][ T40] audit: type=1804 audit(1655225812.375:479): pid=12031 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/749/file0/bus" dev="loop0" ino=1048796 res=1 errno=0 16:56:52 executing program 1: openat$zero(0xffffffffffffff9c, &(0x7f00000024c0), 0x40, 0x0) [ 528.798120][T10560] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 529.050073][T10560] usb 8-1: Using ep0 maxpacket: 16 [ 529.178112][T10560] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.178150][T10560] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 529.269561][T10560] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 529.269593][T10560] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 529.269615][T10560] usb 8-1: SerialNumber: syz [ 529.288909][T12025] raw-gadget gadget.3: fail, usb_ep_enable returned -22 [ 529.519829][T12025] raw-gadget gadget.3: fail, usb_ep_enable returned -22 [ 529.998248][T10560] cdc_ether: probe of 8-1:1.0 failed with error -71 [ 530.003708][T10560] usb 8-1: USB disconnect, device number 15 16:56:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, r1, 0x209, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x72}}]}, 0x3c}}, 0x0) 16:56:54 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, 0x0, 0x0) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) 16:56:54 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x0, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) [ 530.695892][T12038] loop0: detected capacity change from 0 to 64 [ 530.701988][T12040] loop2: detected capacity change from 0 to 64 16:56:54 executing program 3: r0 = syz_clone(0xc1040000, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000440)={0x10800000, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340), {0x7}, &(0x7f0000000380)=""/57, 0x39, &(0x7f00000003c0)=""/19, &(0x7f0000000400)=[0x0, r0, r0, r0, r0, r0, r0], 0x7}, 0x58) 16:56:54 executing program 1: syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) prctl$PR_GET_TSC(0x19, &(0x7f00000004c0)) 16:56:54 executing program 1: syz_mount_image$squashfs(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0xc2, &(0x7f0000001ac0)) [ 530.774654][ T40] audit: type=1804 audit(1655225814.565:480): pid=12046 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir3074280079/syzkaller.qGS2Hp/823/file0/bus" dev="loop2" ino=1048799 res=1 errno=0 16:56:54 executing program 1: bpf$BPF_BTF_LOAD(0x11, 0x0, 0x0) [ 530.778617][ T40] audit: type=1804 audit(1655225814.575:481): pid=12047 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/750/file0/bus" dev="loop0" ino=1048798 res=1 errno=0 [ 530.787563][ T40] audit: type=1804 audit(1655225814.575:482): pid=12047 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/750/file0/bus" dev="loop0" ino=1048798 res=1 errno=0 16:56:54 executing program 1: pipe2$watch_queue(0x0, 0x80) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000008c0)='ns/pid\x00') 16:56:54 executing program 3: r0 = syz_clone(0xc1040000, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000440)={0x10800000, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340), {0x7}, &(0x7f0000000380)=""/57, 0x39, &(0x7f00000003c0)=""/19, &(0x7f0000000400)=[0x0, r0, r0, r0, r0, r0, r0], 0x7}, 0x58) 16:56:54 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, 0x0, 0x0) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) 16:56:54 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000007180)=""/62, 0x0, 0x91, 0x1}, 0x7f) 16:56:54 executing program 3: r0 = syz_clone(0xc1040000, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000440)={0x10800000, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340), {0x7}, &(0x7f0000000380)=""/57, 0x39, &(0x7f00000003c0)=""/19, &(0x7f0000000400)=[0x0, r0, r0, r0, r0, r0, r0], 0x7}, 0x58) 16:56:54 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) [ 531.173912][T12064] loop2: detected capacity change from 0 to 64 16:56:54 executing program 1: clock_settime(0x0, &(0x7f0000000440)) [ 531.236487][T12070] loop0: detected capacity change from 0 to 64 16:56:55 executing program 1: linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000002a80), &(0x7f0000002ac0)='./file0\x00', 0x0, 0x0, &(0x7f0000002d40), 0x0, &(0x7f0000002dc0)={[], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@subj_role={'subj_role', 0x3d, '\',[%@.!'}}]}) syz_mount_image$nfs(0x0, 0x0, 0xffff, 0x0, &(0x7f0000003100), 0x20, 0x0) [ 531.249020][ T40] audit: type=1804 audit(1655225815.050:483): pid=12071 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir3074280079/syzkaller.qGS2Hp/824/file0/bus" dev="loop2" ino=1048802 res=1 errno=0 [ 531.253805][ T40] audit: type=1804 audit(1655225815.050:484): pid=12071 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir3074280079/syzkaller.qGS2Hp/824/file0/bus" dev="loop2" ino=1048802 res=1 errno=0 [ 531.289334][T12073] UDF-fs: bad mount option "defcontext=root" or missing value [ 531.349422][ T40] audit: type=1804 audit(1655225815.150:485): pid=12075 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/751/file0/bus" dev="loop0" ino=1048804 res=1 errno=0 [ 531.351023][ T40] audit: type=1804 audit(1655225815.150:486): pid=12075 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/751/file0/bus" dev="loop0" ino=1048804 res=1 errno=0 16:56:55 executing program 3: r0 = syz_clone(0xc1040000, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000440)={0x10800000, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340), {0x7}, &(0x7f0000000380)=""/57, 0x39, &(0x7f00000003c0)=""/19, &(0x7f0000000400)=[0x0, r0, r0, r0, r0, r0, r0], 0x7}, 0x58) [ 531.368195][T12073] loop1: detected capacity change from 0 to 127 16:56:55 executing program 1: syz_clone3(&(0x7f0000000200)={0x200280000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 531.467936][ T4116] blk_print_req_error: 4 callbacks suppressed [ 531.467951][ T4116] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 531.718108][T12064] bio_check_eod: 1222 callbacks suppressed [ 531.718130][T12064] syz-executor.2: attempt to access beyond end of device [ 531.718130][T12064] loop2: rw=2049, sector=66, nr_sectors = 1 limit=64 [ 531.718244][T12064] buffer_io_error: 1325 callbacks suppressed [ 531.718259][T12064] Buffer I/O error on dev loop2, logical block 66, lost async page write [ 531.718297][T12064] syz-executor.2: attempt to access beyond end of device [ 531.718297][T12064] loop2: rw=2049, sector=68, nr_sectors = 1 limit=64 [ 531.718322][T12064] Buffer I/O error on dev loop2, logical block 68, lost async page write 16:56:55 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200), 0x0) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) 16:56:55 executing program 1: semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000000)={{0x3, 0x0, 0xffffffffffffffff, 0xee00, 0xee00}}) 16:56:55 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000008c0)='ns/pid\x00') 16:56:55 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) [ 531.718388][T12064] syz-executor.2: attempt to access beyond end of device [ 531.718388][T12064] loop2: rw=2049, sector=71, nr_sectors = 1 limit=64 [ 531.718411][T12064] Buffer I/O error on dev loop2, logical block 71, lost async page write 16:56:55 executing program 1: syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0xa0240) [ 531.718442][T12064] syz-executor.2: attempt to access beyond end of device [ 531.718442][T12064] loop2: rw=2049, sector=72, nr_sectors = 1 limit=64 16:56:55 executing program 3: syz_emit_ethernet(0x7a, &(0x7f0000000080)={@local, @dev, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "11d268", 0x44, 0x2f, 0x0, @local, @local}}}}, 0x0) [ 531.718466][T12064] Buffer I/O error on dev loop2, logical block 72, lost async page write [ 531.718497][T12064] syz-executor.2: attempt to access beyond end of device [ 531.718497][T12064] loop2: rw=2049, sector=75, nr_sectors = 1 limit=64 [ 531.718521][T12064] Buffer I/O error on dev loop2, logical block 75, lost async page write [ 531.718551][T12064] syz-executor.2: attempt to access beyond end of device [ 531.718551][T12064] loop2: rw=2049, sector=83, nr_sectors = 1 limit=64 [ 531.718574][T12064] Buffer I/O error on dev loop2, logical block 83, lost async page write [ 531.718645][T12064] syz-executor.2: attempt to access beyond end of device [ 531.718645][T12064] loop2: rw=2049, sector=85, nr_sectors = 1 limit=64 [ 531.718673][T12064] Buffer I/O error on dev loop2, logical block 85, lost async page write [ 531.718706][T12064] syz-executor.2: attempt to access beyond end of device [ 531.718706][T12064] loop2: rw=2049, sector=87, nr_sectors = 1 limit=64 [ 531.718731][T12064] Buffer I/O error on dev loop2, logical block 87, lost async page write 16:56:55 executing program 3: syz_open_dev$sndctrl(&(0x7f0000000780), 0x0, 0x0) [ 531.718793][T12064] syz-executor.2: attempt to access beyond end of device [ 531.718793][T12064] loop2: rw=2049, sector=88, nr_sectors = 1 limit=64 [ 531.718826][T12064] Buffer I/O error on dev loop2, logical block 88, lost async page write [ 531.718857][T12064] syz-executor.2: attempt to access beyond end of device [ 531.718857][T12064] loop2: rw=2049, sector=89, nr_sectors = 1 limit=64 [ 531.718878][T12064] Buffer I/O error on dev loop2, logical block 89, lost async page write [ 531.869316][T12088] loop2: detected capacity change from 0 to 64 16:56:55 executing program 1: openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) [ 531.912679][T12093] loop0: detected capacity change from 0 to 64 [ 531.973527][ T40] audit: type=1804 audit(1655225815.760:487): pid=12096 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir3074280079/syzkaller.qGS2Hp/825/file0/bus" dev="loop2" ino=1048806 res=1 errno=0 [ 531.976826][ T40] audit: type=1804 audit(1655225815.770:488): pid=12096 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir3074280079/syzkaller.qGS2Hp/825/file0/bus" dev="loop2" ino=1048806 res=1 errno=0 [ 531.996367][ T40] audit: type=1804 audit(1655225815.770:489): pid=12099 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/752/file0/bus" dev="loop0" ino=1048808 res=1 errno=0 16:56:56 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200), 0x0) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) 16:56:56 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x19, 0x1, &(0x7f0000000000)=@raw=[@ldst], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:56:56 executing program 3: gettid() r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x500, 0x0, 0x0) 16:56:56 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) 16:56:56 executing program 1: syz_open_dev$sndpcmc(&(0x7f00000000c0), 0xffffffffffff7fff, 0x0) 16:56:56 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x86c26, 0x0) syz_mount_image$udf(&(0x7f0000002a80), &(0x7f0000002ac0)='./file0\x00', 0x80, 0x3, &(0x7f0000002d40)=[{0x0}, {&(0x7f0000002b80)="32d3083666d0a9b8d0fde2", 0xb, 0x6}, {0x0}], 0x0, &(0x7f0000002dc0)={[{@unhide}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@subj_role={'subj_role', 0x3d, '\',[%@.!'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\xee'}}]}) syz_mount_image$nfs(&(0x7f0000002e40), &(0x7f0000002e80)='./file0\x00', 0x0, 0x0, &(0x7f0000003100), 0x20, &(0x7f0000003180)={[{'smackfsfloor'}, {}, {}, {':,^$'}], [{@fsname}, {@pcr}, {@seclabel}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}]}) [ 532.381297][T12108] loop0: detected capacity change from 0 to 64 [ 532.413924][T12113] loop2: detected capacity change from 0 to 64 [ 532.425683][T12114] UDF-fs: bad mount option "defcontext=root" or missing value 16:56:56 executing program 3: gettid() r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x500, 0x0, 0x0) 16:56:56 executing program 1: syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x1, &(0x7f00000026c0)=[{0x0, 0x0, 0x8000000000000001}], 0x0, &(0x7f00000027c0)) [ 532.556631][T12122] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 16:56:56 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200), 0x0) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) 16:56:56 executing program 1: fanotify_mark(0xffffffffffffffff, 0x1, 0x40000000, 0xffffffffffffffff, 0x0) 16:56:56 executing program 3: gettid() r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x500, 0x0, 0x0) 16:56:56 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, 0x0, 0x0) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) [ 532.855885][T12128] loop2: detected capacity change from 0 to 64 16:56:56 executing program 1: bpf$BPF_BTF_LOAD(0x1d, &(0x7f0000007200)={0x0, &(0x7f0000007180)=""/68, 0x0, 0x44}, 0x20) [ 532.906461][T12131] loop0: detected capacity change from 0 to 64 16:56:56 executing program 1: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x42801) 16:56:56 executing program 1: pselect6(0x40, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100), 0x8}) 16:56:56 executing program 3: gettid() r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x500, 0x0, 0x0) 16:56:57 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, 0x0, 0x0) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) 16:56:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, r1, 0x209, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WIPHY={0x8}]}, 0x3c}}, 0x0) 16:56:57 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(0xffffffffffffffff, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) 16:56:57 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) [ 533.343944][T12144] loop2: detected capacity change from 0 to 64 16:56:57 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001c00)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000021, 0x0) [ 533.381914][T12148] loop0: detected capacity change from 0 to 64 16:56:57 executing program 3: syz_clone3(&(0x7f0000000280)={0x45039000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 16:56:57 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000240)={0x2000200, 0x0, &(0x7f0000000040), &(0x7f0000000080), {0x3e}, &(0x7f00000000c0)=""/144, 0x90, &(0x7f0000000180)=""/95, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r0}}, 0x58) 16:56:57 executing program 3: bpf$ITER_CREATE(0x21, &(0x7f00000006c0), 0x8) 16:56:57 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, 0x0, 0x0) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) 16:56:57 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(0xffffffffffffffff, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) 16:56:57 executing program 3: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_ROPEN(r0, &(0x7f0000000080)={0x18}, 0x18) write$P9_RLERROR(r0, &(0x7f0000000100)={0xb, 0x7, 0x0, {0x2, '@('}}, 0xb) [ 533.891029][T12160] loop0: detected capacity change from 0 to 64 [ 533.893428][T12162] loop2: detected capacity change from 0 to 64 16:56:57 executing program 1: syz_clone3(&(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001140)=[0xffffffffffffffff], 0x1}, 0x58) 16:56:57 executing program 3: syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff) 16:56:57 executing program 3: syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff) 16:56:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000007240)=@gcm_128={{}, "30c4858a6a134d3e", "6065329429a93341c411e45e2512b63c", "6fefd960", "1c2d377e9d78880b"}, 0x28) 16:56:57 executing program 1: pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() syz_clone3(&(0x7f0000000240)={0x2000200, &(0x7f0000000000), 0x0, &(0x7f0000000080), {0x3e}, &(0x7f00000000c0)=""/144, 0x90, 0x0, &(0x7f0000000200)=[r0, r0, 0x0, 0x0, r0, r0], 0x6}, 0x58) 16:56:58 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200), 0x0) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) 16:56:58 executing program 3: syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff) 16:56:58 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/block/loop0', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/i2c', 0x2c340, 0x0) 16:56:58 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(0xffffffffffffffff, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) 16:56:58 executing program 1: openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000240)) gettid() ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x2}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x500, 0x0, 0x0) 16:56:58 executing program 3: syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff) [ 534.378626][T12182] loop0: detected capacity change from 0 to 64 16:56:58 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0) [ 534.436556][T12188] loop2: detected capacity change from 0 to 64 16:56:58 executing program 3: linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000002a80), &(0x7f0000002ac0)='./file0\x00', 0x80, 0x0, &(0x7f0000002d40), 0x0, &(0x7f0000002dc0)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000003240)='./cgroup.net/syz1\x00', 0x200002, 0x0) [ 534.501208][T12193] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 534.501236][T12193] UDF-fs: Scanning with blocksize 512 failed [ 534.503633][T12193] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 534.503671][T12193] UDF-fs: Scanning with blocksize 1024 failed [ 534.504949][T12193] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 534.504960][T12193] UDF-fs: Scanning with blocksize 2048 failed [ 534.505601][T12193] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 534.505612][T12193] UDF-fs: Scanning with blocksize 4096 failed 16:56:58 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200), 0x0) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) 16:56:58 executing program 3: syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) 16:56:58 executing program 1: openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000240)) gettid() ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x2}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x500, 0x0, 0x0) 16:56:58 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, 0xffffffffffffffff, 0x0, 0x1ffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) 16:56:58 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x64, 0x0, &(0x7f0000000280)=[@acquire, @request_death, @acquire={0x40046305, 0x3}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000340)="ae"}) [ 534.910597][T12200] loop0: detected capacity change from 0 to 64 [ 534.933274][T12202] loop2: detected capacity change from 0 to 64 16:56:58 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0xc0aa1400, 0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000100)="220eca84295b938ed2ba66cca3b0092264118cb9b98fef9fc9") sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004845}, 0x40080) 16:56:58 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, 0x0) 16:56:58 executing program 3: syz_open_dev$vcsu(&(0x7f00000000c0), 0x0, 0x599000) 16:56:59 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14}, 0xfef0}}, 0x0) 16:56:59 executing program 1: openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000240)) gettid() ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x2}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x500, 0x0, 0x0) 16:56:59 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200), 0x0) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) [ 535.470410][T12219] loop2: detected capacity change from 0 to 64 16:56:59 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x4004556e, 0x24) 16:56:59 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, 0xffffffffffffffff, 0x0, 0x1ffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) 16:56:59 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x88) 16:56:59 executing program 3: syz_open_dev$loop(&(0x7f0000000080), 0xce, 0x0) [ 535.558182][T12225] loop0: detected capacity change from 0 to 64 16:56:59 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000740), 0xffffffffffffffff) pipe2$watch_queue(0x0, 0x80) io_cancel(0x0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x0}, 0x0) fanotify_init(0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000008c0)='ns/pid\x00') 16:56:59 executing program 1: openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000240)) gettid() ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x2}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x500, 0x0, 0x0) 16:56:59 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pidfd_send_signal(r0, 0x0, 0x0, 0x0) 16:56:59 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(0xffffffffffffffff, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) 16:56:59 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x1, &(0x7f0000000000)=@raw=[@ldst], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2}, 0x80) [ 535.994710][T12239] loop2: detected capacity change from 0 to 64 [ 536.076516][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 536.076536][ T40] audit: type=1804 audit(1655225819.870:519): pid=12240 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir3074280079/syzkaller.qGS2Hp/833/file0/bus" dev="loop2" ino=1048838 res=1 errno=0 16:56:59 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, 0xffffffffffffffff, 0x0, 0x1ffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) 16:56:59 executing program 1: syz_clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 16:56:59 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r0) fcntl$setstatus(r0, 0x4, 0x2c00) openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x500, 0x0, 0x0) [ 536.083555][ T40] audit: type=1804 audit(1655225819.880:520): pid=12240 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir3074280079/syzkaller.qGS2Hp/833/file0/bus" dev="loop2" ino=1048838 res=1 errno=0 16:56:59 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{}, {0x16}]}) [ 536.175305][T12249] loop0: detected capacity change from 0 to 64 [ 536.175874][ T40] audit: type=1326 audit(1655225819.970:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12247 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fea549 code=0x0 16:57:00 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{}, {0x16}]}) 16:57:00 executing program 3: syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000027c0)) [ 536.275524][ T40] audit: type=1326 audit(1655225820.070:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12250 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fea549 code=0x0 [ 536.288256][ T40] audit: type=1804 audit(1655225820.080:523): pid=12252 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/760/file0/bus" dev="loop0" ino=1048840 res=1 errno=0 [ 536.290860][ T40] audit: type=1804 audit(1655225820.080:524): pid=12252 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/760/file0/bus" dev="loop0" ino=1048840 res=1 errno=0 16:57:00 executing program 3: syz_clone3(&(0x7f00000002c0)={0x1001000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 16:57:00 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{}, {0x16}]}) [ 536.502087][ T40] audit: type=1326 audit(1655225820.300:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12257 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fea549 code=0x0 16:57:00 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) 16:57:00 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(0xffffffffffffffff, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) 16:57:00 executing program 3: syz_mount_image$udf(&(0x7f0000002a80), &(0x7f0000002ac0)='./file0\x00', 0x0, 0x0, &(0x7f0000002d40), 0x0, &(0x7f0000002dc0)) 16:57:00 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{}, {0x16}]}) [ 536.627953][ T40] audit: type=1326 audit(1655225820.420:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12262 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fea549 code=0x0 [ 536.631802][T12265] loop2: detected capacity change from 0 to 64 [ 536.636273][T12263] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 536.636295][T12263] UDF-fs: Scanning with blocksize 512 failed [ 536.637571][T12263] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 536.637588][T12263] UDF-fs: Scanning with blocksize 1024 failed 16:57:00 executing program 3: bpf$BPF_BTF_LOAD(0xd, 0x0, 0x0) 16:57:00 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) getsockname$inet(r0, 0x0, 0x0) [ 536.638830][T12263] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 536.638867][T12263] UDF-fs: Scanning with blocksize 2048 failed [ 536.641723][T12263] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 536.641751][T12263] UDF-fs: Scanning with blocksize 4096 failed 16:57:00 executing program 1: r0 = gettid() syz_clone3(&(0x7f0000000280)={0x81400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[r0], 0x1}, 0x58) [ 536.670016][T12267] loop0: detected capacity change from 0 to 64 [ 536.720907][ T40] audit: type=1804 audit(1655225820.520:527): pid=12270 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir3074280079/syzkaller.qGS2Hp/834/file0/bus" dev="loop2" ino=1048842 res=1 errno=0 [ 536.729629][ T40] audit: type=1804 audit(1655225820.530:528): pid=12270 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir3074280079/syzkaller.qGS2Hp/834/file0/bus" dev="loop2" ino=1048842 res=1 errno=0 16:57:00 executing program 3: memfd_create(&(0x7f0000000080)='syz1\x00', 0x6) [ 536.989276][T12265] bio_check_eod: 3674 callbacks suppressed [ 536.989292][T12265] syz-executor.2: attempt to access beyond end of device [ 536.989292][T12265] loop2: rw=2049, sector=64, nr_sectors = 1 limit=64 [ 536.989309][T12265] buffer_io_error: 3659 callbacks suppressed [ 536.989316][T12265] Buffer I/O error on dev loop2, logical block 64, lost async page write [ 536.989337][T12265] syz-executor.2: attempt to access beyond end of device [ 536.989337][T12265] loop2: rw=2049, sector=66, nr_sectors = 1 limit=64 [ 536.989352][T12265] Buffer I/O error on dev loop2, logical block 66, lost async page write [ 536.989371][T12265] syz-executor.2: attempt to access beyond end of device [ 536.989371][T12265] loop2: rw=2049, sector=68, nr_sectors = 1 limit=64 [ 536.989385][T12265] Buffer I/O error on dev loop2, logical block 68, lost async page write [ 536.989404][T12265] syz-executor.2: attempt to access beyond end of device 16:57:00 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) 16:57:00 executing program 1: syz_mount_image$squashfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0xb997e2f48cb9f2b8, &(0x7f0000001ac0)) 16:57:00 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x802, 0x0) write$input_event(r0, &(0x7f0000000300)={{0x77359400}}, 0x18) 16:57:00 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(0xffffffffffffffff, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) [ 536.989404][T12265] loop2: rw=2049, sector=70, nr_sectors = 1 limit=64 [ 536.989419][T12265] Buffer I/O error on dev loop2, logical block 70, lost async page write [ 536.989437][T12265] syz-executor.2: attempt to access beyond end of device 16:57:00 executing program 3: ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000740), 0xffffffffffffffff) pipe2$watch_queue(0x0, 0x80) io_cancel(0x0, 0x0, 0x0) fanotify_init(0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000008c0)='ns/pid\x00') [ 536.989437][T12265] loop2: rw=2049, sector=72, nr_sectors = 1 limit=64 [ 536.989451][T12265] Buffer I/O error on dev loop2, logical block 72, lost async page write [ 536.989630][T12265] syz-executor.2: attempt to access beyond end of device [ 536.989630][T12265] loop2: rw=2049, sector=74, nr_sectors = 1 limit=64 16:57:00 executing program 1: syz_clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/144, 0x90, 0x0, 0x0}, 0x58) [ 536.989647][T12265] Buffer I/O error on dev loop2, logical block 74, lost async page write [ 536.989673][T12265] syz-executor.2: attempt to access beyond end of device [ 536.989673][T12265] loop2: rw=2049, sector=77, nr_sectors = 1 limit=64 [ 536.989702][T12265] Buffer I/O error on dev loop2, logical block 77, lost async page write 16:57:00 executing program 1: getitimer(0x2, &(0x7f0000001340)) [ 536.989721][T12265] syz-executor.2: attempt to access beyond end of device [ 536.989721][T12265] loop2: rw=2049, sector=79, nr_sectors = 1 limit=64 16:57:00 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40049409, 0x24) [ 536.989735][T12265] Buffer I/O error on dev loop2, logical block 79, lost async page write [ 536.989754][T12265] syz-executor.2: attempt to access beyond end of device [ 536.989754][T12265] loop2: rw=2049, sector=80, nr_sectors = 1 limit=64 [ 536.989769][T12265] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 536.989787][T12265] syz-executor.2: attempt to access beyond end of device [ 536.989787][T12265] loop2: rw=2049, sector=82, nr_sectors = 1 limit=64 [ 536.989802][T12265] Buffer I/O error on dev loop2, logical block 82, lost async page write [ 537.085336][T12282] loop2: detected capacity change from 0 to 64 [ 537.131073][T12285] loop0: detected capacity change from 0 to 64 16:57:01 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) 16:57:01 executing program 1: syz_mount_image$udf(&(0x7f0000002a80), &(0x7f0000002ac0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002dc0)) 16:57:01 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40049409, 0x24) 16:57:01 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, 0xffffffffffffffff, 0x0, 0x1ffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) 16:57:01 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40049409, 0x24) 16:57:01 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001c00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, 0x0, 0x0) [ 537.614692][T12302] loop0: detected capacity change from 0 to 64 16:57:01 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 537.646125][T12308] loop2: detected capacity change from 0 to 64 16:57:01 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40049409, 0x24) 16:57:01 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, 0x0, 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) 16:57:01 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000002240), 0x0, 0x0) 16:57:01 executing program 3: bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x10) [ 538.024681][T12320] loop0: detected capacity change from 0 to 64 16:57:01 executing program 1: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x751382, 0x0) 16:57:01 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, 0xffffffffffffffff, 0x0, 0x1ffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) 16:57:01 executing program 3: syz_mount_image$nfs(&(0x7f0000002e40), &(0x7f0000002e80)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000003180)={[], [{@seclabel}]}) [ 538.074170][T12323] nfs: Unknown parameter 'seclabel' 16:57:01 executing program 1: syz_clone3(&(0x7f00000001c0)={0x200000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 16:57:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) [ 538.124980][T12331] loop2: detected capacity change from 0 to 64 16:57:02 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x24}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) 16:57:02 executing program 1: syz_clone(0xa3901a00, 0x0, 0x0, 0x0, 0x0, 0x0) getpgid(0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 16:57:02 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, 0x0, 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) 16:57:02 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, 0xffffffffffffffff, 0x0, 0x1ffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) 16:57:02 executing program 3: syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/ipc\x00') [ 538.892271][T12340] loop2: detected capacity change from 0 to 64 16:57:02 executing program 1: openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) getresuid(&(0x7f0000000380), 0x0, 0x0) 16:57:02 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0x34}]}) 16:57:02 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000240)={@dev, 0x0, 0x0, 0x0, 0xc, 0x2}, 0x20) [ 538.941039][T12347] loop0: detected capacity change from 0 to 64 16:57:02 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 538.961077][T12350] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable 16:57:02 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000000)) 16:57:03 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, 0x0, 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) 16:57:03 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa0940, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0x40106614, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) 16:57:03 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x48) 16:57:03 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) 16:57:03 executing program 1: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x40800, 0x0) 16:57:03 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)) [ 539.809000][T12364] loop2: detected capacity change from 0 to 64 16:57:03 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000007200)={0x0, &(0x7f0000000000)=""/54, 0xffffffffffffff1f, 0x36}, 0x20) [ 539.865415][T12370] loop0: detected capacity change from 0 to 64 16:57:03 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone(0x41009000, &(0x7f00000001c0)="266f4b5dec4b5a4309983905485287723b0686fa4cf347b10d456a05764fb8d59c2f14db9bda333d16c2896db035a2ab8d76d7839feb14dade91f51dbe04a8bd142914612bab557f99f1319fe7d8b8f2f51fbbe84e3ae8ccddd72273bc17c43d51dbfe5ac08cb0cef4684e5093636b64", 0x70, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="9ea9dd61569d4092cb96a7336f7383126282b8fa644cf332fee4ba2ab73c5a7a018c2a38d6eec12065739bf19c290203fd7b2a37ae50ba4998ae537c469b2070e190ddd5dd03894efb983a04080ef7a0d471676c65f9b205e24227201de34fc54a59b8f9f0d556151c8be079ce7781893cc72de824d7ec9dd77c6304f3996cdfb142528cb752ca3c125911e4785b2b544b72186a88b184fd522d46beff79be8266df4689ccb51bf3c631e5561db67a20086e85fb4f45b9b5a1be7f9c385a26047e") r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000540)='./file0\x00', 0x0, 0x0) 16:57:04 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x0, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) 16:57:04 executing program 1: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) 16:57:04 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone(0x41009000, &(0x7f00000001c0)="266f4b5dec4b5a4309983905485287723b0686fa4cf347b10d456a05764fb8d59c2f14db9bda333d16c2896db035a2ab8d76d7839feb14dade91f51dbe04a8bd142914612bab557f99f1319fe7d8b8f2f51fbbe84e3ae8ccddd72273bc17c43d51dbfe5ac08cb0cef4684e5093636b64", 0x70, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="9ea9dd61569d4092cb96a7336f7383126282b8fa644cf332fee4ba2ab73c5a7a018c2a38d6eec12065739bf19c290203fd7b2a37ae50ba4998ae537c469b2070e190ddd5dd03894efb983a04080ef7a0d471676c65f9b205e24227201de34fc54a59b8f9f0d556151c8be079ce7781893cc72de824d7ec9dd77c6304f3996cdfb142528cb752ca3c125911e4785b2b544b72186a88b184fd522d46beff79be8266df4689ccb51bf3c631e5561db67a20086e85fb4f45b9b5a1be7f9c385a26047e") r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000540)='./file0\x00', 0x0, 0x0) 16:57:04 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) [ 540.734073][T12382] loop2: detected capacity change from 0 to 64 16:57:04 executing program 1: io_cancel(0x0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 16:57:04 executing program 1: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001480), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f00000014c0)) [ 540.800778][T12389] loop0: detected capacity change from 0 to 64 16:57:04 executing program 1: bpf$BPF_BTF_LOAD(0x1e, &(0x7f0000007200)={0x0, &(0x7f0000007180)=""/68, 0x0, 0x44}, 0x20) 16:57:04 executing program 1: getresgid(&(0x7f0000003340), &(0x7f0000003380), &(0x7f00000033c0)) 16:57:05 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x0, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) 16:57:05 executing program 1: r0 = getpgrp(0x0) pidfd_open(r0, 0x0) 16:57:05 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone(0x41009000, &(0x7f00000001c0)="266f4b5dec4b5a4309983905485287723b0686fa4cf347b10d456a05764fb8d59c2f14db9bda333d16c2896db035a2ab8d76d7839feb14dade91f51dbe04a8bd142914612bab557f99f1319fe7d8b8f2f51fbbe84e3ae8ccddd72273bc17c43d51dbfe5ac08cb0cef4684e5093636b64", 0x70, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="9ea9dd61569d4092cb96a7336f7383126282b8fa644cf332fee4ba2ab73c5a7a018c2a38d6eec12065739bf19c290203fd7b2a37ae50ba4998ae537c469b2070e190ddd5dd03894efb983a04080ef7a0d471676c65f9b205e24227201de34fc54a59b8f9f0d556151c8be079ce7781893cc72de824d7ec9dd77c6304f3996cdfb142528cb752ca3c125911e4785b2b544b72186a88b184fd522d46beff79be8266df4689ccb51bf3c631e5561db67a20086e85fb4f45b9b5a1be7f9c385a26047e") r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000540)='./file0\x00', 0x0, 0x0) 16:57:05 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) 16:57:05 executing program 1: bpf$BPF_BTF_LOAD(0xd, &(0x7f0000007200)={0x0, &(0x7f0000007180)=""/68, 0x0, 0x44}, 0x20) [ 541.582473][T12405] loop2: detected capacity change from 0 to 64 [ 541.601035][T12408] loop0: detected capacity change from 0 to 64 16:57:05 executing program 1: syz_clone3(&(0x7f0000001180)={0x100000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001140)=[0xffffffffffffffff], 0x1}, 0x58) 16:57:05 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$input_event(r0, &(0x7f0000000240), 0xffffffffffffff11) [ 541.676029][ T40] kauditd_printk_skb: 23 callbacks suppressed 16:57:05 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone(0x41009000, &(0x7f00000001c0)="266f4b5dec4b5a4309983905485287723b0686fa4cf347b10d456a05764fb8d59c2f14db9bda333d16c2896db035a2ab8d76d7839feb14dade91f51dbe04a8bd142914612bab557f99f1319fe7d8b8f2f51fbbe84e3ae8ccddd72273bc17c43d51dbfe5ac08cb0cef4684e5093636b64", 0x70, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="9ea9dd61569d4092cb96a7336f7383126282b8fa644cf332fee4ba2ab73c5a7a018c2a38d6eec12065739bf19c290203fd7b2a37ae50ba4998ae537c469b2070e190ddd5dd03894efb983a04080ef7a0d471676c65f9b205e24227201de34fc54a59b8f9f0d556151c8be079ce7781893cc72de824d7ec9dd77c6304f3996cdfb142528cb752ca3c125911e4785b2b544b72186a88b184fd522d46beff79be8266df4689ccb51bf3c631e5561db67a20086e85fb4f45b9b5a1be7f9c385a26047e") r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000540)='./file0\x00', 0x0, 0x0) [ 541.676046][ T40] audit: type=1804 audit(1655225825.470:552): pid=12414 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir3074280079/syzkaller.qGS2Hp/841/file0/bus" dev="loop2" ino=1048870 res=1 errno=0 [ 541.687363][ T40] audit: type=1804 audit(1655225825.480:553): pid=12415 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/768/file0/bus" dev="loop0" ino=1048872 res=1 errno=0 [ 541.710437][ T40] audit: type=1804 audit(1655225825.510:554): pid=12414 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir3074280079/syzkaller.qGS2Hp/841/file0/bus" dev="loop2" ino=1048870 res=1 errno=0 [ 541.758279][ T40] audit: type=1804 audit(1655225825.560:555): pid=12420 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/768/file0/bus" dev="loop0" ino=1048872 res=1 errno=0 [ 542.005820][T12405] bio_check_eod: 1910 callbacks suppressed [ 542.005841][T12405] syz-executor.2: attempt to access beyond end of device [ 542.005841][T12405] loop2: rw=2049, sector=65, nr_sectors = 1 limit=64 [ 542.005869][T12405] buffer_io_error: 1910 callbacks suppressed [ 542.005879][T12405] Buffer I/O error on dev loop2, logical block 65, lost async page write [ 542.005944][T12405] syz-executor.2: attempt to access beyond end of device [ 542.005944][T12405] loop2: rw=2049, sector=67, nr_sectors = 8 limit=64 [ 542.006017][T12405] syz-executor.2: attempt to access beyond end of device [ 542.006017][T12405] loop2: rw=2049, sector=75, nr_sectors = 1 limit=64 [ 542.006032][T12405] Buffer I/O error on dev loop2, logical block 75, lost async page write [ 542.006052][T12405] syz-executor.2: attempt to access beyond end of device [ 542.006052][T12405] loop2: rw=2049, sector=77, nr_sectors = 1 limit=64 [ 542.006066][T12405] Buffer I/O error on dev loop2, logical block 77, lost async page write [ 542.006084][T12405] syz-executor.2: attempt to access beyond end of device [ 542.006084][T12405] loop2: rw=2049, sector=79, nr_sectors = 1 limit=64 [ 542.006099][T12405] Buffer I/O error on dev loop2, logical block 79, lost async page write [ 542.006117][T12405] syz-executor.2: attempt to access beyond end of device [ 542.006117][T12405] loop2: rw=2049, sector=81, nr_sectors = 1 limit=64 16:57:05 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x0, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) 16:57:05 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2c00) openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000240)=0x3) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x2}) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x500, 0x0, 0x0) [ 542.006131][T12405] Buffer I/O error on dev loop2, logical block 81, lost async page write 16:57:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x13, &(0x7f00000001c0)=0x1000000, 0x4) 16:57:05 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, 0x0, 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) [ 542.006149][T12405] syz-executor.2: attempt to access beyond end of device [ 542.006149][T12405] loop2: rw=2049, sector=84, nr_sectors = 1 limit=64 [ 542.006164][T12405] Buffer I/O error on dev loop2, logical block 84, lost async page write 16:57:05 executing program 3: syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) syz_open_dev$sndpcmp(&(0x7f0000003000), 0x0, 0x101002) [ 542.006182][T12405] syz-executor.2: attempt to access beyond end of device [ 542.006182][T12405] loop2: rw=2049, sector=86, nr_sectors = 1 limit=64 [ 542.006196][T12405] Buffer I/O error on dev loop2, logical block 86, lost async page write [ 542.006214][T12405] syz-executor.2: attempt to access beyond end of device [ 542.006214][T12405] loop2: rw=2049, sector=88, nr_sectors = 1 limit=64 [ 542.006229][T12405] Buffer I/O error on dev loop2, logical block 88, lost async page write 16:57:05 executing program 3: syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) syz_open_dev$sndpcmp(&(0x7f0000003000), 0x0, 0x101002) [ 542.006272][T12405] syz-executor.2: attempt to access beyond end of device [ 542.006272][T12405] loop2: rw=2049, sector=90, nr_sectors = 1 limit=64 [ 542.006287][T12405] Buffer I/O error on dev loop2, logical block 90, lost async page write [ 542.006325][T12405] Buffer I/O error on dev loop2, logical block 92, lost async page write 16:57:06 executing program 3: syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) syz_open_dev$sndpcmp(&(0x7f0000003000), 0x0, 0x101002) [ 542.136205][T12428] loop2: detected capacity change from 0 to 64 [ 542.216863][T12434] loop0: detected capacity change from 0 to 64 16:57:06 executing program 3: syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) syz_open_dev$sndpcmp(&(0x7f0000003000), 0x0, 0x101002) [ 542.264319][ T40] audit: type=1804 audit(1655225826.060:556): pid=12438 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir3074280079/syzkaller.qGS2Hp/842/file0/bus" dev="loop2" ino=1048874 res=1 errno=0 [ 542.301353][ T40] audit: type=1804 audit(1655225826.100:557): pid=12440 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/769/file0/bus" dev="loop0" ino=1048876 res=1 errno=0 [ 542.358731][ T40] audit: type=1804 audit(1655225826.160:558): pid=12442 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/769/file0/bus" dev="loop0" ino=1048876 res=1 errno=0 16:57:06 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) 16:57:06 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 16:57:06 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2c00) openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000240)=0x3) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x2}) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x500, 0x0, 0x0) 16:57:06 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, 0x0, 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) 16:57:06 executing program 3: syz_mount_image$udf(&(0x7f0000002a80), &(0x7f0000002ac0)='./file0\x00', 0x0, 0x2, &(0x7f0000002d40)=[{0x0}, {0x0}], 0x6, &(0x7f0000002dc0)={[], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@subj_role={'subj_role', 0x3d, '\',[%@.!'}}]}) syz_mount_image$nfs(0x0, 0x0, 0xffff, 0x0, &(0x7f0000003100), 0x0, 0x0) [ 543.079850][T12449] loop2: detected capacity change from 0 to 64 [ 543.101593][T12451] loop0: detected capacity change from 0 to 64 [ 543.110861][T12453] UDF-fs: bad mount option "defcontext=root" or missing value [ 543.164949][ T40] audit: type=1804 audit(1655225826.960:559): pid=12455 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir3074280079/syzkaller.qGS2Hp/843/file0/bus" dev="loop2" ino=1048878 res=1 errno=0 16:57:07 executing program 3: bpf$BPF_BTF_LOAD(0x6, &(0x7f0000007200)={0x0, &(0x7f0000007180)=""/68, 0x0, 0x44}, 0x20) [ 543.165586][ T40] audit: type=1804 audit(1655225826.960:560): pid=12454 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/770/file0/bus" dev="loop0" ino=1048879 res=1 errno=0 [ 543.170115][T12453] loop3: detected capacity change from 0 to 127 16:57:07 executing program 3: syz_mount_image$udf(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f00000037c0)="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", 0x1000}], 0x0, 0x0) [ 543.231791][ T40] audit: type=1804 audit(1655225827.030:561): pid=12459 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/770/file0/bus" dev="loop0" ino=1048879 res=1 errno=0 16:57:07 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2c00) openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000240)=0x3) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x2}) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x500, 0x0, 0x0) 16:57:07 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) 16:57:07 executing program 3: syz_open_dev$loop(&(0x7f00000014c0), 0x0, 0x80001) 16:57:07 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2c00) openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000240)=0x3) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x2}) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x500, 0x0, 0x0) 16:57:07 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, 0x0, 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) [ 543.969288][T12466] loop2: detected capacity change from 0 to 64 16:57:07 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000240)={@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x20) [ 544.011529][T12471] loop0: detected capacity change from 0 to 64 16:57:07 executing program 3: bpf$BPF_BTF_LOAD(0x6, 0x0, 0x0) 16:57:07 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x4, &(0x7f0000000040)=@framed={{}, [@alu={0x7, 0x0, 0x8}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:57:07 executing program 3: syz_mount_image$udf(&(0x7f0000002a80), &(0x7f0000002ac0)='./file0\x00', 0x0, 0x0, &(0x7f0000002d40), 0x0, &(0x7f0000002dc0)) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) [ 544.190245][T12483] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 544.190260][T12483] UDF-fs: Scanning with blocksize 512 failed [ 544.190994][T12483] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 544.191006][T12483] UDF-fs: Scanning with blocksize 1024 failed [ 544.191443][T12483] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 544.191453][T12483] UDF-fs: Scanning with blocksize 2048 failed [ 544.192025][T12483] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 544.192039][T12483] UDF-fs: Scanning with blocksize 4096 failed 16:57:08 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) 16:57:08 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x5, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x30, 0x30, 0x61]}}, &(0x7f00000002c0)=""/4096, 0x31, 0x1000, 0x1}, 0x20) 16:57:08 executing program 1: getitimer(0x0, &(0x7f0000001340)) 16:57:08 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x0, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) [ 544.871504][T12488] loop2: detected capacity change from 0 to 64 16:57:08 executing program 3: syz_emit_ethernet(0x99, &(0x7f00000000c0)=ANY=[], 0x0) 16:57:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x1, 0x0, @pic={0x0, 0x4b}}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000200)={0x0, 0x101}) 16:57:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000080), 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@getroute={0x0, 0x1a, 0x0, 0x0, 0x0, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x0) [ 544.917502][T12494] loop0: detected capacity change from 0 to 64 16:57:08 executing program 3: bpf$PROG_LOAD_XDP(0x1e, 0x0, 0x0) 16:57:09 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, 0x0, 0x0, 0x8000000, 0x0, 0x0) 16:57:09 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, 0x0) 16:57:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x1, 0x0, @pic={0x0, 0x4b}}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000200)={0x0, 0x101}) [ 545.309587][T12513] loop0: detected capacity change from 0 to 64 16:57:09 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x8, 0xa, &(0x7f0000000340)=ANY=[@ANYBLOB="18490000fe"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:57:09 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x0, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) 16:57:09 executing program 1: bpf$PROG_LOAD(0x5, 0xffffffffffffffff, 0x0) 16:57:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@ipv4_newnexthop={0x1c, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) 16:57:09 executing program 3: syz_io_uring_setup(0x9, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fef000/0x11000)=nil, 0x0, 0x0) [ 545.769786][T12526] loop2: detected capacity change from 0 to 64 16:57:09 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, 0x0, 0x0, 0x8000000, 0x0, 0x0) 16:57:09 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) write$tun(r0, 0x0, 0x0) 16:57:09 executing program 1: syz_emit_ethernet(0x22, &(0x7f0000000000)={@remote, @broadcast, @val={@void}, {@can={0x8848, {{}, 0x0, 0x0, 0x0, 0x0, "37d7a9ce94369144"}}}}, 0x0) [ 546.193087][T12534] loop0: detected capacity change from 0 to 64 16:57:10 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x6, 0x0, 0x0) 16:57:10 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x0, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) 16:57:10 executing program 1: r0 = io_uring_setup(0x9f9, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000004, 0x12, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x13, r0, 0x0) 16:57:10 executing program 3: bpf$PROG_LOAD_XDP(0x1a, &(0x7f0000000640)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:57:10 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}, 0x0) [ 546.675476][T12544] loop2: detected capacity change from 0 to 64 [ 546.751487][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 546.751500][ T40] audit: type=1804 audit(1655225830.550:575): pid=12547 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir3074280079/syzkaller.qGS2Hp/847/file0/bus" dev="loop2" ino=1048896 res=1 errno=0 [ 546.807576][ T40] audit: type=1804 audit(1655225830.600:576): pid=12548 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir3074280079/syzkaller.qGS2Hp/847/file0/bus" dev="loop2" ino=1048896 res=1 errno=0 16:57:10 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, 0x0, 0x0, 0x8000000, 0x0, 0x0) 16:57:10 executing program 3: r0 = io_uring_setup(0x9f9, &(0x7f0000000000)={0x0, 0xda20}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000004, 0x12, r0, 0x0) 16:57:10 executing program 3: syz_emit_ethernet(0x2e, &(0x7f0000000000)={@random="ef2f75143c1f", @dev, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, {[@generic={0x0, 0x4, "f43e"}]}}, {0x0, 0x0, 0x8}}}}}, 0x0) [ 547.084384][T12552] loop0: detected capacity change from 0 to 64 16:57:10 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a57080200000100000101f9", 0x22, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) [ 547.156192][T12556] loop3: detected capacity change from 0 to 184 [ 547.162407][ T40] audit: type=1804 audit(1655225830.960:577): pid=12557 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/775/file0/bus" dev="loop0" ino=1048898 res=1 errno=0 [ 547.217284][ T40] audit: type=1804 audit(1655225831.010:578): pid=12558 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/775/file0/bus" dev="loop0" ino=1048898 res=1 errno=0 16:57:11 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) 16:57:11 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a57080200000100000101f9", 0x22, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) 16:57:11 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x12, 0x0, 0x0, 0x2}, 0x48) [ 547.548092][T12560] loop3: detected capacity change from 0 to 184 16:57:11 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x1600bd7f, 0x0, 0x7000000) [ 547.609790][T12566] loop2: detected capacity change from 0 to 64 [ 547.713526][ T40] audit: type=1804 audit(1655225831.510:579): pid=12567 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir3074280079/syzkaller.qGS2Hp/848/file0/bus" dev="loop2" ino=1048900 res=1 errno=0 [ 547.770441][ T40] audit: type=1804 audit(1655225831.570:580): pid=12568 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir3074280079/syzkaller.qGS2Hp/848/file0/bus" dev="loop2" ino=1048900 res=1 errno=0 16:57:11 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a57080200000100000101f9", 0x22, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) 16:57:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) 16:57:11 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100), 0x0, 0x8000000, 0x0, 0x0) 16:57:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@ipv4_newnexthop={0x18}, 0x18}}, 0x0) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="3d5e4e9d4e7e5fffc5ec2f4817d823a337b6a5f5fe2d6d02b6a26e129c3cdf79bb5f3aa327f14d514ff057683c1c5fcda82583078e72927617af7070", 0x7ffff000}, {&(0x7f0000000040)="47167e4e93775e57dae83d6ea618d77a627fa349e29a63c21bd9a7f5aa555107b269ad0be5c350271b505b", 0x2b}, {&(0x7f0000000600)="cfda75bca00e748d382eeb1058bb80911320d925b9b3a63496d1cb271e14bb39a17788b34c768fff3907f0006a9e6cd733ccf385012c102905f981c2833c5a6acdc262e40862b1c8cd2279caafc413208f551907363701d8d515b8372b818f64627575aa476aeb18dbbd9350b7b550849b20178b116cb1169b50f336fc30df712db7aa6b25a8527d61d48ad9577d7952788e33e7111fba8c3bb809f167e5d778a55894dc12b02ecdda6f85ba1b5e3ac23df74de5feacd241647e4181c42cc616e8a10f961edbbb4c3afdb4c46cb02f01cae0fe36359400868f42686b544b35b0bfc10895eda45debbdec17565ba6df170d19316a654b9ff4f3e33980f74ccb281dd14e663c9eff99d6288a336e24664589ddbeca7000b620ea40d531f7b5f6cf8cb172a5a6ee2a48ae99c1c31ac0d0678a7feb35e3167e8c3b29341f3060e04ab1d444a997d2b5e5d25635662e4955b53c635086cc83eba32c9f492c8cea9e810fb90b1fc2f7a76bc870e1206e0294038cc14a7f612db7f2dfdf637264ff726b87715c2a45a56ffd1842c21cee5175584103f10fb7b0770ea2e806a3b6932195df1231da1227bcf1594fb7075faae8d15ac57e31d833feb326e81fac9e1882296f4da993aacb3d667bed10d8317b1646f84c36619babc12a71f5495b981949ea80948d93d1ad8ffe88ab491897d3de4728fbff66e48af3db4bbdb10486a3beb73ab151e80f5b49cd62f699dcee09e80808978daea1e0c6f1e727787a8bd76182a45785e34d788e28b3605785a26736e1fad4c8f1f33a66899f8882fe32c0d8a8e1ecfe8e7fc5b1e14e5702db15dbb63152643df1b47c96060deea6909909b0248fb11ff194411023d117b0a1e70c7bb2a1e8dfc5d3692c3e3d9397ff34293c367b147497f5f12df0fad0e0cd11d1d6a5377bf75e5756cf74f79a04465948bc421ba4e7fa71687845301cb2b668cab4b0eaf91a6712140092061186e288ef0f4b46cf6fc69cc44bd971ba39d762ef9c1e4987d9baff5be2d8b76f240d0910ec43fea2b85b09ed2922fffbcfa0d9126bc278b47c9eb28b3acbb7919db1fd6e4c83a0bcd811171258ce4bd077cd62c065fbaf88964f95e29dae4ca3775e08b420d1aa172dab8a5d2c00ef9cebe42bbbd82b62a38dba774dff1e6a1ccbabd0d718f5a2036ab59650252375b7dfdda511d7e6c2135764da1fb9a4c488d7fa28e103d402a0cb7a90b4166c2f972115b4004e39014d7b90f24a61fb63a749a757dedc0763148d85b4fdb1dbd8fe57b1bf0590c6b5664a58ae737d69192ef0102df11b88797c248e300d3ca2cb2c01328faefef8a56c2ab47d5c0ba5e579493ea0074bc36af619dd5fba80c902e732f4e41df39b0c914ed1f353b62bb9d42d9ed7d45a248fa6b21e606f59fb1a7a8c125f7e692e46f0b26f0c81fccb0a059f8534faa84ad4aa8e8fc66f7c931b6e98fd5be640a6491eedb04415c57fb76a7d16e5e5ead549581b411bd249199c5c7ca8d91efb191ee078c8574b879df638f784fe74a559c0ef365e68074c87cab434637faf1f40f0a2694e40892c70e027bc658163c9129713fb67bf23ec1c9a5e64c60410e90b6b8f4f6c5a56a5fd93a712adec1682f3908731c9098072155bbb2dec0f8dbfd7dc2c0681bf1a8751635afd897298ae72b3b3f5c91d5f55ccc01c0a05ece4226eecb76dd80bc613499071bd9b3c3fd28eaac55ebff58e7fddbd951b304b1bb9edac49bbec468bf8be5d9ae7661e21536fb0812844c32144b0fc99a13e6fad7a929f860409752fe350951fc0e55b1bc084d22eea23d784c72ce8bdbc0750e8ab9343ee11a1a3c70182a5a25021ed6b318675b9e4897490ef373af042df058203335c22131b9dfdab0188c06985b9c661f9bcd63b82b6806d8699c5d9d09769361e0d3c8ee8eaa3d30319676532d2cc33c0fcc9b480609858774158f41f26e65f789a2e63914a5dd238c012bc6c7b25e29323993bd9c9865694997f8c3d68c541e4961d41a917089fdd312767fec4278262da46e19cd1e53dfc084338a29b4a7e70860a17cfe8d7031954981732e7efb8250fb831fd8d223242e0b187729b8a78d4dc265650095789e385063d730e28231d023acf6fe9f766d0bdb54ca76cafe709d5fad9d6b8408a5ddfecaacf2f8b36f30ec3153416b1d1ae7c97514f935a1466f0fde26780e32aaca631fc5d0e9bac15895ccb715b2490046ad797353ee0063e17c48bd8dd2bbca80b678f19b45fa693da0e41738af6f8c57b15d3c80422f4a8e96e464703b24c788c384b0dcb3fb40ac89ccb55586636ef71b264c01812727ddeea79f89626170fe1be6ed90410bba8d0b66f7f6394766e943cbb968a763e00739b61932551234ccc91048ab20d1f01d4cd7caab0638f6991668ae7aee468730444952225fd561e23c4a8b906645d16848172d7f3d5f39e77b85f1b43d0fb24b45e248c54331fc6eaf35e74881d7e095b0df05fd17c6ce59eb3f24c00ce00004908bb8f897048ca2bba3fbf401a219abdcbc4f7350d0c4b7ae9f296b352f923ab7c9c20fb2afa622039328d8f66e8bf2b4fbcd8f600c1e742c2624879c889585f444811fc54e2ee9f523eb556924fb6c040094ef921dcb842aca5fec72ef1451ade18b6a26e478ee43bfa2fe4c4a7c6d6d4921ecccadf353649409bf676d3f8f9da3e6f1d5ae9db91c2d3512c4a98e836c373ee89855d5100249e735b084318cbe3d10d7c0e95ff2efec2755cec6ffad7af1d181393d8bd11a6629bf4e82b2d3e63b6674d8467a9d0f6985cb3e1a4643cb8c5f5ba7e74987618e3cea065dcf744e812bc34c60db4b13424da4025641ebdf038ee12aac7b9467630c739c90215279db60767705a9e0c06b1b6748330db462ba48d75c76d510e645dda09be8ba7a5d49badce392760e4911cd9866c7708dbdd7a29422e6ddb13a7accd18083bc4e6829fc6307fe347ed7f3571709ce58b922fb3320963259fa3ecf9aa653e9b25b19916c18e837fbba4ec7cd589fd22ff082f132e67741cc425368b8e89f92b98c3b93c1202f677856733a64f36a28c5c55c54b9a94ad5e54b229f812323289b0adc29b511a462d68b98f3d53d2029b1e270d575b0375d4101402c6c797509459691df721ca600c65f55cb32ddba8f3f4ca09b90ecd8473d95b35b7b16e265f834fb6b15b1cd28d5656e4f2e8de5c0eadadb4677650ab34a2f06dcbaf507f25d8ba1f835e3f36f6944b4a01e3d559cbd7e2a348676bf7daec0496ed5f9adcf7351fdb4dca8acce59116b61d643e66d4102917ac8f82c2d89f1843ad5faa81912c660069ce5c62f557ce721b34eb961197d2d6e170439c6582fae0cb353f709c2f934dbe3da3522e515ae2ab39c586d959f076914ccf9bcff9a596832f278221ce7ca44f0f5962d63dfe57c31bf571b857e780923213c3deb948c97b1f17bffaeba09ed648ef779bfea6f1df4fa481e949f0b6109572f6fe6f155e8d0582c447b6fd3fc4faca4b03b94c0f31ab8c3f176b2dfb3cc3ecaa9543ae35f7a9a4aea0edce0879d668b75f059b2e86e3fc070f9646c2a53be07a248e7af5584df02274da917fc1e385e6aa63a0b3e2279bc079fd88d83897f118f3083aade6f5cb0186093a990b95ecd2a0aae29df2a1413f4134eee4d10848ff645ca9f985beca1b5e19f83cd3e055907689d33d1ded850f9f4f1d9fee7b78241c3bceff3a55fdedab383589dd48e19d3b7189ab9740b9704be35a37da340411a43cb5b7bcb4f8512e7e2d8b235f86f6fbb38bc270099c9f8afcabf6ce923dc63deae5aa25dc2330369ed98646c2b2f60bcc387d3becbcfd4b8c1a54d0e0ac14163eea9f9b448d40a79be306779f19f1b2a35c91331703a5c350e5116e2b6ee70f29efd89dbba4b7d7db25690e3eba6330fc7655842e4b300af5b21aa20d84c70b122f9441b91685b7bc58e214c0810ee3dd1db8482b508c419ce7e8dbc55959f6be66677a7a783019e31a7ff903f7fe7de965eedac29dbff55013f4a7d81a60abfbe09a4e60c7a0c290eba040eddad556ba419be1641ad8c90ccd5fb2248b8a3267f69fec6e6cabe75a6ea0fd2eb26fb86786d0e20faec8c48edc7df04840bb893f07760b321cb0a66bbfa8016500eaa2baf3d31bfb1bcd615896da1aa6225e9514f638221a8a2dccf1fd14c42af4331d0c5d01de107235c70974baf7895e177905ac04b37a5d592cdedad9917433db66712195d961cb679997117453463ae8eb583adfc15b9a24733ff53520c78e45240d81b3f3922d5c0ebe5bb79b2102991d78c6f2759cee461cab93896392841fc6b2030ee3e63a00cfa773697886b6807ef83babbecaef98423edbabe2a5105d1243ce971206b9909c47df5743e6ad8c412c1e5c987e703eacc4588cca10907a65472a677e4a68d637095390dc2068fe64d0af99e9d2878fb35a8b8e43370a36eed31bd8c7882ee6a87032a638ef46a678f3146dc5ae1035d1ff27e713dd1be1666cdcf9174c715ee5955091b0496564464cb47991e51779e6599469bb703699e769521326a7292a7cea91eb903d4e106fec0c9756dcfe1e6efd925203d9279a8802b044456ceba93d8716b50e9685d7181b28dd4ad1b2f9e5c72335d4d93d369c761aaae85efb25211f36c3c75e8dcb3009b8a68f16c363fbe845a2794e180d6555f501de319939d3370064690fa79b5eb0519f527127e19bb3aeeb0891776924da8a6fc3c170b3e8284f49d7518c2086021c6b52b6be906bc1b0ed96fd49dd89b781a38be3af7b335edffb9a4ed79c8c94dc6b2094d01f938feb67505e2f4bdc8289f8c4395ec82b9a4267539d9101f5543a95533fb948cac3ef2baa2fedc48fdde2ef2f636e0685e4f4cfc02d3dc7dc46062b5adfed34eed035907f8b1fbb1f87e795ddacbee086b4b9478e47fa6900de083f8193531184eb8a8f1a43ad0778f6bcefa705a4c3ad4b7a839b4495b0d99079bb76611d9214fc2f181b0e8128920bef44d9669e14517ba23edbf737d34a92ae3cc5738cc8161e34faeebc91abd88e0a96b7014c8b6c70a33d2cd8659213115aa97c3c8bc518ae1192d89deb0d0d80462b011dd8c179ad280232437a62c15eba4ccb5de6e3f3de5d70106596b02e07b50ffe7f13cd4fc7784c0f999666554faaf73f7a2acb27c7e7428d1f6e9e4e90a3bf", 0xe5a}], 0x3}, 0x0) [ 547.953804][T12572] loop3: detected capacity change from 0 to 184 [ 548.021647][T12576] loop0: detected capacity change from 0 to 64 [ 548.105140][ T40] audit: type=1804 audit(1655225831.900:581): pid=12577 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/776/file0/bus" dev="loop0" ino=1048902 res=1 errno=0 [ 548.166923][ T40] audit: type=1804 audit(1655225831.960:582): pid=12578 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/776/file0/bus" dev="loop0" ino=1048902 res=1 errno=0 16:57:12 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a57080200000100000101f9", 0x22, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) 16:57:12 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x33, 0x0, 0x7000000) 16:57:12 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) [ 548.465632][T12581] loop3: detected capacity change from 0 to 184 16:57:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000480), r0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6d8f0000000800000000050000000808"], 0x2c}}, 0x0) 16:57:12 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a57080200000100000101f9", 0x22, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) getdents(0xffffffffffffffff, &(0x7f0000000040)=""/70, 0x46) [ 548.547057][T12585] loop2: detected capacity change from 0 to 64 16:57:12 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x40086602, &(0x7f00000002c0)={'tunl0\x00', 0x0}) [ 548.594377][T12588] loop3: detected capacity change from 0 to 184 [ 548.616604][ T40] audit: type=1804 audit(1655225832.410:583): pid=12591 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir3074280079/syzkaller.qGS2Hp/849/file0/bus" dev="loop2" ino=1048904 res=1 errno=0 [ 548.673077][ T40] audit: type=1804 audit(1655225832.470:584): pid=12592 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir3074280079/syzkaller.qGS2Hp/849/file0/bus" dev="loop2" ino=1048904 res=1 errno=0 16:57:12 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xf4240, &(0x7f0000000140)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0xc, &(0x7f00000002c0)=""/12, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:57:12 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a57080200000100000101f9", 0x22, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) getdents(0xffffffffffffffff, &(0x7f0000000040)=""/70, 0x46) 16:57:12 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100), 0x0, 0x8000000, 0x0, 0x0) [ 548.880105][T12594] loop3: detected capacity change from 0 to 184 16:57:12 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a57080200000100000101f9", 0x22, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) getdents(0xffffffffffffffff, &(0x7f0000000040)=""/70, 0x46) [ 548.934821][T12598] loop0: detected capacity change from 0 to 64 [ 548.996171][T12600] loop3: detected capacity change from 0 to 184 16:57:13 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x8000000, 0x0, 0x0) 16:57:13 executing program 3: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) 16:57:13 executing program 3: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) [ 549.454560][T12606] loop2: detected capacity change from 0 to 64 16:57:13 executing program 3: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) 16:57:13 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xf4240, &(0x7f0000000140)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0xc, &(0x7f00000002c0)=""/12, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:57:13 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a57080200000100000101f9", 0x22, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) 16:57:13 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100), 0x0, 0x8000000, 0x0, 0x0) [ 549.854426][T12615] loop3: detected capacity change from 0 to 184 [ 549.859355][T12616] loop0: detected capacity change from 0 to 64 16:57:13 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a57080200000100000101f9", 0x22, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) [ 549.991555][T12621] loop3: detected capacity change from 0 to 184 [ 550.045882][ T4116] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 16:57:14 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a57080200000100000101f9", 0x22, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) 16:57:14 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, 0x0, 0x0, 0x8000000, 0x0, 0x0) [ 550.327289][T12624] loop3: detected capacity change from 0 to 184 16:57:14 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a57080200000100000101f9", 0x22, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) [ 550.379521][T12626] loop2: detected capacity change from 0 to 64 [ 550.418777][ T4116] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 550.444894][T12628] loop3: detected capacity change from 0 to 184 16:57:14 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a57080200000100000101f9", 0x22, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) [ 550.525015][T12632] loop3: detected capacity change from 0 to 184 16:57:14 executing program 1: sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, 0x0, 0xff600000) 16:57:14 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a57080200000100000101f9", 0x22, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) 16:57:14 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{0x0}], 0x1, 0x8000000, 0x0, 0x0) [ 550.794016][T12635] loop0: detected capacity change from 0 to 64 [ 550.804201][T12636] loop3: detected capacity change from 0 to 184 16:57:14 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x4a, 0x0, 0x7000000) 16:57:14 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) 16:57:15 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, 0x0, 0x0, 0x8000000, 0x0, 0x0) 16:57:15 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x80, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 16:57:15 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) 16:57:15 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x74) getsockopt$sock_timeval(r0, 0x1, 0x1, 0x0, &(0x7f0000000040)) 16:57:15 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) [ 551.276165][T12652] loop2: detected capacity change from 0 to 64 16:57:15 executing program 1: r0 = io_uring_setup(0x9f9, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 16:57:15 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) 16:57:15 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{0x0}], 0x1, 0x8000000, 0x0, 0x0) [ 551.664032][T12659] loop3: detected capacity change from 0 to 136 [ 551.690089][T12659] isofs_fill_super: get root inode failed [ 551.697537][T12662] loop0: detected capacity change from 0 to 64 [ 551.774052][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 551.774064][ T40] audit: type=1804 audit(1655225835.570:597): pid=12663 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/780/file0/bus" dev="loop0" ino=1048918 res=1 errno=0 [ 551.830124][ T40] audit: type=1804 audit(1655225835.630:598): pid=12664 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/780/file0/bus" dev="loop0" ino=1048918 res=1 errno=0 16:57:15 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x19, 0x1, &(0x7f0000000000)=@raw=[@func], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 16:57:15 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) 16:57:15 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, 0x0, 0x0, 0x8000000, 0x0, 0x0) 16:57:15 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x2f, 0x0, 0x0) [ 552.132364][T12668] loop3: detected capacity change from 0 to 136 [ 552.139345][T12668] isofs_fill_super: get root inode failed 16:57:15 executing program 1: r0 = epoll_create1(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) [ 552.179300][T12672] loop2: detected capacity change from 0 to 64 16:57:16 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind(r0, 0x0, 0x0) 16:57:16 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) [ 552.255041][ T40] audit: type=1804 audit(1655225836.050:599): pid=12677 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir3074280079/syzkaller.qGS2Hp/853/file0/bus" dev="loop2" ino=1048920 res=1 errno=0 [ 552.274484][T12679] loop3: detected capacity change from 0 to 136 [ 552.290614][T12679] isofs_fill_super: get root inode failed [ 552.335883][ T40] audit: type=1804 audit(1655225836.130:600): pid=12680 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir3074280079/syzkaller.qGS2Hp/853/file0/bus" dev="loop2" ino=1048920 res=1 errno=0 16:57:16 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{0x0}], 0x1, 0x8000000, 0x0, 0x0) 16:57:16 executing program 1: mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x8031, 0xffffffffffffffff, 0x8000000) 16:57:16 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {0x0, 0x0, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) [ 552.555496][T12683] loop3: detected capacity change from 0 to 184 [ 552.575647][T12683] isofs_fill_super: get root inode failed [ 552.588076][T12686] loop0: detected capacity change from 0 to 64 [ 552.669228][ T40] audit: type=1804 audit(1655225836.470:601): pid=12687 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/781/file0/bus" dev="loop0" ino=1048922 res=1 errno=0 [ 552.725751][ T40] audit: type=1804 audit(1655225836.520:602): pid=12688 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/781/file0/bus" dev="loop0" ino=1048922 res=1 errno=0 16:57:16 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100), 0x0, 0x8000000, 0x0, 0x0) 16:57:16 executing program 1: rt_tgsigqueueinfo(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x8}) 16:57:16 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {0x0, 0x0, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) [ 553.035293][T12691] loop3: detected capacity change from 0 to 184 [ 553.042351][T12691] isofs_fill_super: get root inode failed [ 553.063760][T12694] loop2: detected capacity change from 0 to 64 16:57:16 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x38, 0x0, 0x0) 16:57:16 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, 0x80) [ 553.132917][ T40] audit: type=1804 audit(1655225836.930:603): pid=12697 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir3074280079/syzkaller.qGS2Hp/854/file0/bus" dev="loop2" ino=1048924 res=1 errno=0 [ 553.215624][ T40] audit: type=1804 audit(1655225837.010:604): pid=12700 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir3074280079/syzkaller.qGS2Hp/854/file0/bus" dev="loop2" ino=1048924 res=1 errno=0 16:57:17 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{}], 0x1, 0x8000000, 0x0, 0x0) 16:57:17 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {0x0, 0x0, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) 16:57:17 executing program 1: bpf$PROG_LOAD_XDP(0x15, &(0x7f0000000640)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 553.447910][T12703] loop3: detected capacity change from 0 to 184 [ 553.454523][T12703] isofs_fill_super: get root inode failed [ 553.476493][T12706] loop0: detected capacity change from 0 to 64 [ 553.549790][ T40] audit: type=1804 audit(1655225837.350:605): pid=12707 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/782/file0/bus" dev="loop0" ino=1048926 res=1 errno=0 [ 553.604107][ T40] audit: type=1804 audit(1655225837.400:606): pid=12708 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/782/file0/bus" dev="loop0" ino=1048926 res=1 errno=0 16:57:17 executing program 1: bpf$PROG_LOAD_XDP(0x1c, &(0x7f0000000640)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:57:17 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100), 0x0, 0x8000000, 0x0, 0x0) 16:57:17 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100), 0x0, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) [ 553.925475][T12712] loop3: detected capacity change from 0 to 184 16:57:17 executing program 1: syz_emit_ethernet(0x22, &(0x7f0000000000)={@remote, @broadcast, @val={@void}, {@can={0x8035, {{}, 0x0, 0x0, 0x0, 0x0, "37d7a9ce94369144"}}}}, 0x0) [ 553.953080][T12712] isofs_fill_super: get root inode failed [ 553.960883][T12714] loop2: detected capacity change from 0 to 64 16:57:17 executing program 1: r0 = io_uring_setup(0x9f9, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1ffff000, 0x0, 0x12, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) 16:57:18 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{}], 0x1, 0x8000000, 0x0, 0x0) 16:57:18 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100), 0x0, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) 16:57:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000440)={0xfffffffffffffffe, 0x0, 0x0, 0x300}, 0x0) [ 554.340615][T12722] loop3: detected capacity change from 0 to 184 16:57:18 executing program 1: socketpair(0x26, 0x5, 0xffffffff, &(0x7f0000000040)) [ 554.371937][T12726] loop0: detected capacity change from 0 to 64 [ 554.372817][T12722] isofs_fill_super: get root inode failed [ 554.562643][T12714] bio_check_eod: 186 callbacks suppressed [ 554.562668][T12714] syz-executor.2: attempt to access beyond end of device [ 554.562668][T12714] loop2: rw=2049, sector=64, nr_sectors = 1 limit=64 [ 554.562697][T12714] buffer_io_error: 182 callbacks suppressed [ 554.562707][T12714] Buffer I/O error on dev loop2, logical block 64, lost async page write [ 554.563138][T12714] syz-executor.2: attempt to access beyond end of device [ 554.563138][T12714] loop2: rw=2049, sector=65, nr_sectors = 192 limit=64 16:57:18 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100), 0x0, 0x8000000, 0x0, 0x0) 16:57:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000440)={0xfffffffffffffffe, 0x0, &(0x7f0000000400)={0x0}, 0x300}, 0x0) 16:57:18 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100), 0x0, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) 16:57:18 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='timers\x00') preadv(r0, &(0x7f0000001540)=[{&(0x7f0000000080)=""/191, 0xbf}], 0x1, 0x300, 0x0) [ 554.831864][T12734] loop3: detected capacity change from 0 to 184 [ 554.841687][T12734] isofs_fill_super: get root inode failed [ 554.858530][T12736] loop2: detected capacity change from 0 to 64 16:57:19 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='timers\x00') preadv(r0, &(0x7f0000001540)=[{&(0x7f0000000080)=""/191, 0xbf}], 0x1, 0x300, 0x0) 16:57:19 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{}], 0x1, 0x8000000, 0x0, 0x0) 16:57:19 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008", 0x11, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) 16:57:19 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='timers\x00') preadv(r0, &(0x7f0000001540)=[{&(0x7f0000000080)=""/191, 0xbf}], 0x1, 0x300, 0x0) [ 555.230823][T12744] loop3: detected capacity change from 0 to 184 [ 555.242374][T12744] isofs_fill_super: root inode is not a directory. Corrupted media? [ 555.275763][T12748] loop0: detected capacity change from 0 to 64 16:57:19 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='timers\x00') preadv(r0, &(0x7f0000001540)=[{&(0x7f0000000080)=""/191, 0xbf}], 0x1, 0x300, 0x0) 16:57:19 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{0x0}], 0x1, 0x8000000, 0x0, 0x0) 16:57:19 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008", 0x11, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) [ 555.711638][T12753] loop3: detected capacity change from 0 to 184 [ 555.718371][T12753] isofs_fill_super: root inode is not a directory. Corrupted media? 16:57:19 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000001540)=[{&(0x7f0000000080)=""/191, 0xbf}], 0x1, 0x300, 0x0) 16:57:19 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000001540)=[{&(0x7f0000000080)=""/191, 0xbf}], 0x1, 0x300, 0x0) [ 555.757051][T12758] loop2: detected capacity change from 0 to 64 16:57:19 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008", 0x11, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) 16:57:19 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000001540)=[{&(0x7f0000000080)=""/191, 0xbf}], 0x1, 0x300, 0x0) 16:57:19 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x0, 0x0, 0x0) 16:57:19 executing program 1: r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000001540)=[{&(0x7f0000000080)=""/191, 0xbf}], 0x1, 0x300, 0x0) [ 556.131204][T12766] loop3: detected capacity change from 0 to 184 [ 556.137390][T12766] isofs_fill_super: root inode is not a directory. Corrupted media? [ 556.162925][T12770] loop0: detected capacity change from 0 to 64 16:57:20 executing program 1: r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000001540)=[{&(0x7f0000000080)=""/191, 0xbf}], 0x1, 0x300, 0x0) 16:57:20 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) 16:57:20 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{0x0}], 0x1, 0x8000000, 0x0, 0x0) [ 556.614056][T12776] loop3: detected capacity change from 0 to 184 16:57:20 executing program 1: r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000001540)=[{&(0x7f0000000080)=""/191, 0xbf}], 0x1, 0x300, 0x0) [ 556.645181][T12778] loop2: detected capacity change from 0 to 64 16:57:20 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="880017000000000000170008000000000800", 0x12, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) 16:57:20 executing program 1: syz_open_procfs(0x0, &(0x7f0000000040)='timers\x00') preadv(0xffffffffffffffff, &(0x7f0000001540)=[{&(0x7f0000000080)=""/191, 0xbf}], 0x1, 0x300, 0x0) [ 556.684378][T12782] loop3: detected capacity change from 0 to 184 [ 556.695890][T12782] isofs_fill_super: root inode is not a directory. Corrupted media? [ 556.780914][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 556.780938][ T40] audit: type=1804 audit(1655225840.580:620): pid=12786 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir3074280079/syzkaller.qGS2Hp/858/file0/bus" dev="loop2" ino=1048940 res=1 errno=0 16:57:20 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x0, 0x0, 0x0) 16:57:20 executing program 1: syz_open_procfs(0x0, &(0x7f0000000040)='timers\x00') preadv(0xffffffffffffffff, &(0x7f0000001540)=[{&(0x7f0000000080)=""/191, 0xbf}], 0x1, 0x300, 0x0) 16:57:20 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="880017000000000000170008000000000800", 0x12, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) [ 557.038149][T12790] loop3: detected capacity change from 0 to 184 16:57:20 executing program 1: syz_open_procfs(0x0, &(0x7f0000000040)='timers\x00') preadv(0xffffffffffffffff, &(0x7f0000001540)=[{&(0x7f0000000080)=""/191, 0xbf}], 0x1, 0x300, 0x0) [ 557.042624][T12790] isofs_fill_super: root inode is not a directory. Corrupted media? [ 557.044949][T12792] loop0: detected capacity change from 0 to 64 [ 557.141049][ T40] audit: type=1804 audit(1655225840.940:621): pid=12795 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/786/file0/bus" dev="loop0" ino=1048942 res=1 errno=0 [ 557.204909][ T40] audit: type=1804 audit(1655225841.000:622): pid=12796 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/786/file0/bus" dev="loop0" ino=1048942 res=1 errno=0 16:57:21 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{0x0}], 0x1, 0x8000000, 0x0, 0x0) 16:57:21 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='timers\x00') preadv(r0, 0x0, 0x0, 0x300, 0x0) 16:57:21 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="880017000000000000170008000000000800", 0x12, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) 16:57:21 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='timers\x00') preadv(r0, 0x0, 0x0, 0x300, 0x0) [ 557.501467][T12800] loop3: detected capacity change from 0 to 184 [ 557.520840][T12800] isofs_fill_super: root inode is not a directory. Corrupted media? [ 557.550670][T12804] loop2: detected capacity change from 0 to 64 [ 557.663322][ T40] audit: type=1804 audit(1655225841.460:623): pid=12805 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir3074280079/syzkaller.qGS2Hp/859/file0/bus" dev="loop2" ino=1048944 res=1 errno=0 [ 557.721124][ T40] audit: type=1804 audit(1655225841.520:624): pid=12806 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir3074280079/syzkaller.qGS2Hp/859/file0/bus" dev="loop2" ino=1048944 res=1 errno=0 16:57:21 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x0, 0x0, 0x0) 16:57:21 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b", 0x16, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) 16:57:21 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='timers\x00') preadv(r0, 0x0, 0x0, 0x300, 0x0) [ 557.912835][T12809] loop3: detected capacity change from 0 to 184 [ 557.922294][T12809] isofs_fill_super: root inode is not a directory. Corrupted media? [ 557.943014][T12811] loop0: detected capacity change from 0 to 64 16:57:21 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='timers\x00') preadv(r0, &(0x7f0000001540), 0x0, 0x300, 0x0) [ 558.022913][ T40] audit: type=1804 audit(1655225841.820:625): pid=12815 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/787/file0/bus" dev="loop0" ino=1048946 res=1 errno=0 [ 558.082612][ T40] audit: type=1804 audit(1655225841.880:626): pid=12816 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/787/file0/bus" dev="loop0" ino=1048946 res=1 errno=0 16:57:22 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{}], 0x1, 0x8000000, 0x0, 0x0) 16:57:22 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='timers\x00') preadv(r0, &(0x7f0000001540), 0x0, 0x300, 0x0) 16:57:22 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b", 0x16, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) 16:57:22 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='timers\x00') preadv(r0, &(0x7f0000001540), 0x0, 0x300, 0x0) [ 558.410313][T12820] loop3: detected capacity change from 0 to 184 [ 558.419128][T12820] isofs_fill_super: root inode is not a directory. Corrupted media? [ 558.459231][T12824] loop2: detected capacity change from 0 to 64 [ 558.531313][ T40] audit: type=1804 audit(1655225842.330:627): pid=12825 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir3074280079/syzkaller.qGS2Hp/860/file0/bus" dev="loop2" ino=1048948 res=1 errno=0 [ 558.600913][ T40] audit: type=1804 audit(1655225842.400:628): pid=12826 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir3074280079/syzkaller.qGS2Hp/860/file0/bus" dev="loop2" ino=1048948 res=1 errno=0 16:57:22 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='timers\x00') preadv(r0, &(0x7f0000001540)=[{0x0}], 0x1, 0x300, 0x0) 16:57:22 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b", 0x16, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) 16:57:22 executing program 0: syz_emit_ethernet(0x1a6, &(0x7f0000000840)={@dev, @empty, @val={@void}, {@ipv4={0x800, @tcp={{0x60, 0x4, 0x0, 0x0, 0x194, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private, {[@noop, @timestamp_addr={0x44, 0x4c, 0x0, 0x1, 0x0, [{}, {@private}, {@empty}, {@dev}, {@multicast2}, {@broadcast}, {@dev}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private}]}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@dev}]}, @ssrr={0x89, 0x23, 0x0, [@multicast2, @multicast1, @rand_addr, @dev, @empty, @rand_addr, @dev, @multicast2]}, @timestamp_addr={0x44, 0x24, 0x0, 0x1, 0x0, [{@broadcast}, {@broadcast}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}, @ssrr={0x89, 0x7, 0x0, [@empty]}, @ra={0x94, 0x4}, @lsrr={0x83, 0xb, 0x0, [@local, @loopback]}, @cipso={0x86, 0x48, 0x0, [{0x0, 0x4, '5A'}, {0x0, 0x5, "109d6e"}, {0x0, 0x12, "a9777a327518c3f87c66f44b8cdbe038"}, {0x0, 0x7, "1b1ef77fae"}, {0x0, 0x4, '$T'}, {0x0, 0xa, "9fc2a8809b053313"}, {0x0, 0x12, "b28696edc08347e0e874eb0f40ce0599"}]}, @cipso={0x86, 0x6b, 0x0, [{0x0, 0x2}, {0x0, 0xb, "3fc1fdee2a7ec4e2a6"}, {0x0, 0xd, "d1118f0bd0e94beaab6b14"}, {0x0, 0xa, "a3208ae5cf8ebbdc"}, {0x0, 0xe, "78f2e95a8e28e67b00465c5a"}, {0x0, 0x12, "85cf554b20e92db3e1fa6cddd9802ea1"}, {0x0, 0xb, "a58e53456f95a8cf9a"}, {0x0, 0xe, "03876837a2ec620b98b506ce"}, {0x0, 0x8, "e7010e3027e9"}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 558.797724][T12830] loop3: detected capacity change from 0 to 184 16:57:22 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='timers\x00') preadv(r0, &(0x7f0000001540)=[{0x0}], 0x1, 0x300, 0x0) [ 558.800908][T12830] isofs_fill_super: root inode is not a directory. Corrupted media? 16:57:23 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{}], 0x1, 0x8000000, 0x0, 0x0) 16:57:23 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x74) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @multicast1}}}}) 16:57:23 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='timers\x00') preadv(r0, &(0x7f0000001540)=[{0x0}], 0x1, 0x300, 0x0) 16:57:23 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a57", 0x18, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) 16:57:23 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='timers\x00') preadv(r0, &(0x7f0000001540)=[{&(0x7f0000000080)=""/191, 0xbf}], 0x1, 0x0, 0x0) [ 559.318325][T12839] loop3: detected capacity change from 0 to 184 [ 559.325930][T12839] isofs_fill_super: root inode is not a directory. Corrupted media? 16:57:23 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000080)=@framed={{}, [@func, @map_fd, @exit, @call, @map_fd, @cb_func]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:57:23 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='timers\x00') preadv(r0, &(0x7f0000001540)=[{&(0x7f0000000080)=""/191, 0xbf}], 0x1, 0x0, 0x0) [ 559.362633][T12845] loop2: detected capacity change from 0 to 64 16:57:23 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='timers\x00') preadv(r0, &(0x7f0000001540)=[{&(0x7f0000000080)=""/191, 0xbf}], 0x1, 0x0, 0x0) [ 559.436880][ T40] audit: type=1804 audit(1655225843.230:629): pid=12851 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir3074280079/syzkaller.qGS2Hp/861/file0/bus" dev="loop2" ino=1048950 res=1 errno=0 [ 560.050381][T12851] syz-executor.2: attempt to access beyond end of device [ 560.050381][T12851] loop2: rw=2049, sector=257, nr_sectors = 1 limit=64 [ 560.050451][T12851] Buffer I/O error on dev loop2, logical block 257, lost async page write 16:57:23 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{}], 0x1, 0x8000000, 0x0, 0x0) 16:57:23 executing program 0: syz_emit_ethernet(0x1a, &(0x7f0000001100)={@multicast, @link_local, @val={@void}, {@llc_tr={0x11, {@snap={0x0, 0x0, "e1", "1717c7"}}}}}, 0x0) 16:57:23 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a57", 0x18, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) 16:57:23 executing program 1: bpf$PROG_LOAD(0xa, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 16:57:23 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x10, 0x0, 0x7000000) 16:57:23 executing program 0: fsopen(&(0x7f0000000000)='bpf\x00', 0x0) [ 560.089884][T12858] loop3: detected capacity change from 0 to 184 [ 560.096259][T12858] isofs_fill_super: root inode is not a directory. Corrupted media? 16:57:23 executing program 0: syz_emit_ethernet(0x22, &(0x7f0000000000)={@remote, @broadcast, @val={@void, {0x8906}}, {@can={0xc, {{}, 0x0, 0x0, 0x0, 0x0, "37d7a9ce94369144"}}}}, 0x0) 16:57:23 executing program 1: r0 = io_uring_setup(0x29ed, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0xfffffcce) [ 560.149048][T12865] loop2: detected capacity change from 0 to 64 [ 560.850647][T12869] syz-executor.2: attempt to access beyond end of device [ 560.850647][T12869] loop2: rw=2049, sector=257, nr_sectors = 1 limit=64 [ 560.850683][T12869] Buffer I/O error on dev loop2, logical block 257, lost async page write 16:57:24 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x0, 0x0, 0x0) 16:57:24 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a57", 0x18, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) 16:57:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@ipv4_newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ENCAP_TYPE={0x6}]}, 0x24}}, 0x0) 16:57:24 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 16:57:24 executing program 0: syz_open_dev$sg(&(0x7f0000000000), 0x432f, 0x123943) [ 560.898038][T12874] loop3: detected capacity change from 0 to 184 16:57:24 executing program 1: bpf$PROG_LOAD_XDP(0x15, 0x0, 0x0) [ 560.902753][T12874] isofs_fill_super: root inode is not a directory. Corrupted media? [ 560.917628][T12878] loop2: detected capacity change from 0 to 64 16:57:24 executing program 1: bpf$PROG_LOAD_XDP(0x15, 0x0, 0x0) 16:57:24 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18230000", @ANYRES32, @ANYBLOB="00000000090000001843"], &(0x7f0000000400)='GPL\x00', 0x2, 0x90, &(0x7f0000000440)=""/144, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 561.285279][T12878] syz-executor.2: attempt to access beyond end of device [ 561.285279][T12878] loop2: rw=2049, sector=64, nr_sectors = 1 limit=64 [ 561.285304][T12878] Buffer I/O error on dev loop2, logical block 64, lost async page write [ 561.285533][T12878] syz-executor.2: attempt to access beyond end of device [ 561.285533][T12878] loop2: rw=2049, sector=65, nr_sectors = 192 limit=64 [ 561.673764][T12887] syz-executor.2: attempt to access beyond end of device [ 561.673764][T12887] loop2: rw=2049, sector=257, nr_sectors = 1 limit=64 [ 561.673803][T12887] Buffer I/O error on dev loop2, logical block 257, lost async page write 16:57:25 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x0, 0x0, 0x0) 16:57:25 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a5708", 0x19, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) 16:57:25 executing program 0: request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='!\x00', 0xffffffffffffffff) 16:57:25 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x16, 0x0, 0x0, 0x40, 0x0, 0x1}, 0x48) [ 561.706231][T12892] loop3: detected capacity change from 0 to 184 16:57:25 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x3, r0, &(0x7f0000000000)={0x10000000}) 16:57:25 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0xc, 0x3, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 561.716856][T12892] isofs_fill_super: root inode is not a directory. Corrupted media? 16:57:25 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a5708", 0x19, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) 16:57:25 executing program 1: clock_gettime(0x6, &(0x7f0000000280)) [ 561.792638][T12901] loop3: detected capacity change from 0 to 184 [ 561.796522][T12901] isofs_fill_super: root inode is not a directory. Corrupted media? [ 561.804341][T12902] loop2: detected capacity change from 0 to 64 [ 561.884137][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 561.884156][ T40] audit: type=1804 audit(1655225845.680:635): pid=12905 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir3074280079/syzkaller.qGS2Hp/864/file0/bus" dev="loop2" ino=1048956 res=1 errno=0 [ 561.941759][ T40] audit: type=1804 audit(1655225845.740:636): pid=12906 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir3074280079/syzkaller.qGS2Hp/864/file0/bus" dev="loop2" ino=1048956 res=1 errno=0 [ 562.173549][T12902] syz-executor.2: attempt to access beyond end of device [ 562.173549][T12902] loop2: rw=2049, sector=64, nr_sectors = 1 limit=64 [ 562.173574][T12902] Buffer I/O error on dev loop2, logical block 64, lost async page write [ 562.173814][T12902] syz-executor.2: attempt to access beyond end of device [ 562.173814][T12902] loop2: rw=2049, sector=65, nr_sectors = 192 limit=64 [ 562.510490][T12905] syz-executor.2: attempt to access beyond end of device 16:57:26 executing program 0: socket$inet6(0xa, 0x3, 0x74) pselect6(0x40, &(0x7f0000000180), &(0x7f0000000400)={0x1}, &(0x7f0000000200)={0x8}, 0x0, 0x0) 16:57:26 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) 16:57:26 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x2, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x1ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x0, 0x0, 0x0) 16:57:26 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a5708", 0x19, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) [ 562.510490][T12905] loop2: rw=2049, sector=257, nr_sectors = 1 limit=64 [ 562.510589][T12905] Buffer I/O error on dev loop2, logical block 257, lost async page write [ 562.542792][T12912] loop3: detected capacity change from 0 to 184 16:57:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="3d5e4e9d4e7e5fffc5ec2f4817d823a337b6a5f5fe2d6d02b6a26e129c3cdf79bb5f3aa327f14d514ff057683c1c5fcda82583078e72927617af7070", 0x3c}, {&(0x7f0000000040)="47167e4e93775e57dae83d6ea618d77a627fa349e29a63c21bd9a7f5aa555107b269ad0be5c350271b505b", 0x2b}, {&(0x7f0000000600)="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", 0xe5a}], 0x3}, 0x1316f5fe) [ 562.549381][T12912] isofs_fill_super: root inode is not a directory. Corrupted media? 16:57:26 executing program 0: syz_emit_ethernet(0x2e, &(0x7f0000000000)={@random="ef2f75143c1f", @dev, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, {[@noop, @generic={0x44, 0x2}]}}, {0x0, 0x0, 0x8}}}}}, 0x0) [ 562.592559][T12917] loop2: detected capacity change from 0 to 64 16:57:26 executing program 1: syz_emit_ethernet(0x99, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffff"], 0x0) 16:57:26 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x16, 0x0, 0x56be7f3a, 0x40, 0x0, 0x1}, 0x48) 16:57:26 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) 16:57:26 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x7, 0x0, 0x0) [ 562.639475][T12924] loop3: detected capacity change from 0 to 136 [ 562.647704][T12924] isofs_fill_super: get root inode failed [ 562.666669][ T40] audit: type=1804 audit(1655225846.460:637): pid=12927 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir3074280079/syzkaller.qGS2Hp/865/file0/bus" dev="loop2" ino=1048958 res=1 errno=0 [ 562.730569][ T4116] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 562.760066][ T40] audit: type=1804 audit(1655225846.560:638): pid=12928 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir3074280079/syzkaller.qGS2Hp/865/file0/bus" dev="loop2" ino=1048958 res=1 errno=0 [ 563.401289][T12927] syz-executor.2: attempt to access beyond end of device [ 563.401289][T12927] loop2: rw=2049, sector=257, nr_sectors = 1 limit=64 [ 563.401315][T12927] Buffer I/O error on dev loop2, logical block 257, lost async page write 16:57:27 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8982, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) 16:57:27 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) 16:57:27 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) 16:57:27 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x1d, 0x0, 0x0) 16:57:27 executing program 1: setreuid(0x0, 0xee00) r0 = geteuid() setreuid(r0, 0xee00) 16:57:27 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x14, 0x1, &(0x7f0000000000)=@raw=[@kfunc], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2}, 0x80) [ 563.455166][T12934] loop3: detected capacity change from 0 to 136 [ 563.465318][T12934] isofs_fill_super: get root inode failed 16:57:27 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xe}, 0x48) 16:57:27 executing program 1: setreuid(0x0, 0xee00) r0 = geteuid() setreuid(r0, 0xee00) 16:57:27 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='0'], &(0x7f0000000040)='GPL\x00', 0x2, 0xe8, &(0x7f0000000080)=""/232, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:57:27 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000140)={0x10, 0x0, {0x0, 0x0, 0x0, {}, {}, @cond}, {0x0, 0x0, 0x0, {}, {}, @cond}}) 16:57:27 executing program 0: syz_io_uring_setup(0x6694, &(0x7f0000002740)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002700)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x7221}, 0x1}, 0x1) syz_io_uring_setup(0x169c, &(0x7f0000000000)={0x0, 0xb668, 0x2, 0x0, 0x191}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:57:27 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) 16:57:27 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x1, &(0x7f0000000000)=@raw=[@kfunc], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 563.549050][T12949] loop3: detected capacity change from 0 to 136 [ 563.551972][T12949] isofs_fill_super: get root inode failed 16:57:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x14, 0x0, 0xa05, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) 16:57:27 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='timers\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/125, 0x7d}], 0x1, 0x0, 0x0) preadv(r0, &(0x7f0000001540)=[{&(0x7f0000000080)=""/191, 0xbf}], 0x1, 0x301, 0x0) 16:57:27 executing program 0: setreuid(0x0, 0xee00) setreuid(0x0, 0xee00) 16:57:27 executing program 2: syz_open_dev$sg(&(0x7f0000000080), 0xffffffffffffffff, 0x42443) 16:57:27 executing program 0: r0 = io_uring_setup(0x9f9, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x26011, r0, 0x0) 16:57:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x5c5fe33e6dac8f6d, 0x0, 0x0, {0x8}, [@BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x1c}}, 0x0) [ 563.621237][ T3826] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 16:57:27 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) 16:57:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x5c5fe33e6dac8f6d, 0x0, 0x0, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x3}]}, 0x24}}, 0x0) [ 563.657548][T12969] loop3: detected capacity change from 0 to 184 16:57:27 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x3}], &(0x7f0000000040)='GPL\x00', 0x7, 0xd8, &(0x7f0000000080)=""/216, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:57:27 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1a8dfc}, 0x80) [ 563.669851][T12969] isofs_fill_super: bread failed, dev=loop3, iso_blknum=46, block=92 16:57:27 executing program 2: bpf$PROG_LOAD(0xa, &(0x7f0000000480)={0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 16:57:27 executing program 0: io_uring_setup(0x9f9, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0xfffffffc}) 16:57:27 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x202, 0x0) [ 563.722943][ T4116] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 16:57:27 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) 16:57:27 executing program 0: syz_emit_ethernet(0xe81, &(0x7f00000000c0)={@broadcast, @link_local, @val, {@llc_tr={0x11, {@llc={0x0, 0x0, "9a", "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"}}}}}, 0x0) 16:57:27 executing program 2: bpf$PROG_LOAD_XDP(0x14, &(0x7f0000000640)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:57:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8915, 0x0) [ 563.773952][T12988] loop3: detected capacity change from 0 to 184 16:57:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r1, 0x5c5fe33e6dac8f6d, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x2c}}, 0x0) 16:57:27 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x17, 0x3, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:57:27 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x40}}, 0x14) [ 563.794126][T12988] isofs_fill_super: bread failed, dev=loop3, iso_blknum=46, block=92 16:57:27 executing program 0: mq_open(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0, 0x0) [ 563.871504][ T4116] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 16:57:27 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) 16:57:27 executing program 2: bpf$PROG_LOAD(0x4, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:57:27 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x43000000, 0x0, 0x0) 16:57:27 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:57:27 executing program 1: r0 = epoll_create(0x7) r1 = inotify_init() epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) [ 563.910430][T13004] loop0: detected capacity change from 0 to 87 [ 563.911895][T13006] loop3: detected capacity change from 0 to 184 16:57:27 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x2}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) [ 563.951403][T13006] isofs_fill_super: bread failed, dev=loop3, iso_blknum=46, block=92 16:57:27 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x3a, 0x0, 0x7000000) [ 563.966249][ T40] audit: type=1804 audit(1655225847.760:639): pid=13004 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/813/file1/bus" dev="loop0" ino=1048960 res=1 errno=0 16:57:27 executing program 1: syz_io_uring_setup(0x6694, &(0x7f0000002740), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x169c, &(0x7f0000000000), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 563.990859][ T40] audit: type=1804 audit(1655225847.770:640): pid=13004 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/813/file1/bus" dev="loop0" ino=1048960 res=1 errno=0 [ 564.002620][T13004] syz-executor.0: attempt to access beyond end of device [ 564.002620][T13004] loop0: rw=2049, sector=94, nr_sectors = 136 limit=87 [ 564.035357][ T4116] I/O error, dev loop3, sector 138 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 564.035384][ T4116] Buffer I/O error on dev loop3, logical block 69, async page read [ 564.035515][ T4116] I/O error, dev loop3, sector 142 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 564.035532][ T4116] Buffer I/O error on dev loop3, logical block 71, async page read 16:57:27 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {0x0, 0x0, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) 16:57:27 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x191040, 0x0) 16:57:27 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="a501feff"], &(0x7f0000000040)='GPL\x00', 0x5, 0x87, &(0x7f0000000080)=""/135, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 564.094590][T13021] loop3: detected capacity change from 0 to 184 16:57:27 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:57:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@ipv4_newnexthop={0x18, 0x77, 0x1}, 0x18}}, 0x0) 16:57:27 executing program 1: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) [ 564.106517][T13021] isofs_fill_super: bread failed, dev=loop3, iso_blknum=46, block=92 16:57:27 executing program 2: syz_emit_ethernet(0x22, &(0x7f0000000000)={@remote, @broadcast, @val={@void, {0x806}}, {@can={0xc, {{}, 0x0, 0x0, 0x0, 0x0, "37d7a9ce94369144"}}}}, 0x0) [ 564.140818][T13025] loop1: detected capacity change from 0 to 87 16:57:27 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x5}, 0x14}}, 0x0) [ 564.174643][T13029] loop0: detected capacity change from 0 to 87 [ 564.178336][ T4116] I/O error, dev loop3, sector 138 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 564.178359][ T4116] Buffer I/O error on dev loop3, logical block 69, async page read [ 564.178400][ T4116] I/O error, dev loop3, sector 142 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 16:57:28 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {0x0, 0x0, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) 16:57:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000940)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6d8f27bd7000000000000500000008002b000400000008003a000000000008000300", @ANYRES32=r3], 0x2c}}, 0x0) [ 564.194637][ T40] audit: type=1804 audit(1655225847.990:641): pid=13025 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir3597529437/syzkaller.Q1iSMt/1147/file1/bus" dev="loop1" ino=1048961 res=1 errno=0 16:57:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000940)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6d8f27bd7000000000000500000008002b000400000008003a000000000008000300", @ANYRES32=r3], 0x2c}}, 0x0) [ 564.202096][ T40] audit: type=1804 audit(1655225847.990:642): pid=13025 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/syzkaller-testdir3597529437/syzkaller.Q1iSMt/1147/file1/bus" dev="loop1" ino=1048961 res=1 errno=0 [ 564.229070][ T40] audit: type=1804 audit(1655225848.020:643): pid=13029 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/814/file1/bus" dev="loop0" ino=1048962 res=1 errno=0 [ 564.230078][ T40] audit: type=1804 audit(1655225848.030:644): pid=13029 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/814/file1/bus" dev="loop0" ino=1048962 res=1 errno=0 [ 564.265443][T13036] loop3: detected capacity change from 0 to 184 [ 564.288895][T13036] isofs_fill_super: bread failed, dev=loop3, iso_blknum=46, block=92 16:57:28 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:57:28 executing program 2: bpf$PROG_LOAD(0xb, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:57:28 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1c, 0x1, &(0x7f0000000000)=@raw=[@kfunc], &(0x7f0000000040)='GPL\x00', 0x7, 0xd8, &(0x7f0000000080)=""/216, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:57:28 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {0x0, 0x0, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) [ 564.422452][T13043] loop3: detected capacity change from 0 to 184 16:57:28 executing program 1: bpf$PROG_LOAD(0x21, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 564.435118][T13043] isofs_fill_super: bread failed, dev=loop3, iso_blknum=46, block=92 16:57:28 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x16, 0x0, 0x7000000) [ 564.460673][T13046] loop0: detected capacity change from 0 to 87 16:57:28 executing program 1: syz_io_uring_setup(0x2e83, &(0x7f0000000000), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) 16:57:28 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600), 0x0, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) [ 564.543479][T13054] loop3: detected capacity change from 0 to 184 [ 564.566690][T13054] isofs_fill_super: bread failed, dev=loop3, iso_blknum=46, block=92 16:57:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x5c5fe33e6dac8f6d, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) 16:57:28 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:57:28 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x2, &(0x7f0000000200)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, 0x1}], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 16:57:28 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600), 0x0, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) 16:57:28 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x3a, 0x0, 0x0) 16:57:28 executing program 1: request_key(&(0x7f0000000180)='rxrpc\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0xfffffffffffffffd) request_key(&(0x7f00000000c0)='logon\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='\x00', 0x0) [ 564.639559][T13060] loop0: detected capacity change from 0 to 87 16:57:28 executing program 2: socket(0x2c, 0x3, 0x9) [ 564.644609][T13064] loop3: detected capacity change from 0 to 184 16:57:28 executing program 1: bpf$PROG_LOAD_XDP(0xd, 0x0, 0x0) 16:57:28 executing program 2: mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x1, @tid=0xffffffffffffffff}) [ 564.661255][T13064] isofs_fill_super: bread failed, dev=loop3, iso_blknum=46, block=92 [ 564.733793][ T4116] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 16:57:28 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_submit(0x0, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:57:28 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x0, 0x0, 0x0, 0x0, 0x44, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2}, 0x48) 16:57:28 executing program 2: ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}) bpf$PROG_LOAD_XDP(0x3, &(0x7f0000000000)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xaa) 16:57:28 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600), 0x0, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) [ 564.830871][T13076] loop3: detected capacity change from 0 to 184 16:57:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x891c, 0x0) 16:57:28 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x8, 0x1, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2000}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 564.854933][T13076] isofs_fill_super: bread failed, dev=loop3, iso_blknum=46, block=92 [ 564.858683][T13080] loop0: detected capacity change from 0 to 87 16:57:28 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x24, 0x0, 0x0) 16:57:28 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) [ 564.929393][T13088] loop1: detected capacity change from 0 to 184 16:57:28 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_submit(0x0, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:57:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote}}}}) 16:57:28 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344", 0x3, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) 16:57:28 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) [ 565.013957][T13092] loop3: detected capacity change from 0 to 184 [ 565.015569][T13094] loop1: detected capacity change from 0 to 184 16:57:28 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x11}, 0x48) [ 565.023388][T13092] isofs_fill_super: bread failed, dev=loop3, iso_blknum=46, block=92 [ 565.035473][T13096] loop0: detected capacity change from 0 to 87 16:57:28 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) 16:57:28 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x10, 0x0, 0x0, 0x1}, 0x48) 16:57:28 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344", 0x3, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) [ 565.085088][T13101] loop1: detected capacity change from 0 to 184 [ 565.111995][T13104] loop3: detected capacity change from 0 to 184 [ 565.126142][T13104] isofs_fill_super: bread failed, dev=loop3, iso_blknum=46, block=92 16:57:28 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_submit(0x0, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:57:28 executing program 2: bpf$PROG_LOAD(0xd, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:57:28 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) [ 565.178796][T13107] loop1: detected capacity change from 0 to 184 16:57:29 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) 16:57:29 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344", 0x3, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) 16:57:29 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) [ 565.225167][T13110] loop0: detected capacity change from 0 to 87 16:57:29 executing program 2: syz_emit_ethernet(0x22, &(0x7f0000000000)={@remote, @broadcast, @val={@void}, {@can={0x8906, {{}, 0x0, 0x0, 0x0, 0x0, "37d7a9ce94369144"}}}}, 0x0) [ 565.260417][T13114] loop3: detected capacity change from 0 to 184 [ 565.268740][T13117] loop1: detected capacity change from 0 to 184 16:57:29 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) [ 565.293502][T13114] isofs_fill_super: bread failed, dev=loop3, iso_blknum=46, block=92 16:57:29 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xf, 0x0, 0x0, 0x8}, 0x48) 16:57:29 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff43443030", 0x5, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) 16:57:29 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) [ 565.344482][ T4116] I/O error, dev loop1, sector 32 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 16:57:29 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) [ 565.373593][T13122] loop3: detected capacity change from 0 to 184 [ 565.381850][T13124] loop0: detected capacity change from 0 to 87 [ 565.396093][T13126] loop1: detected capacity change from 0 to 184 16:57:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@ipv4_newnexthop={0x1c, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_FDB={0x7800}]}, 0x1c}}, 0x0) 16:57:29 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) [ 565.431455][T13122] isofs_fill_super: bread failed, dev=loop3, iso_blknum=46, block=92 16:57:29 executing program 2: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180), &(0x7f0000000400)={0x1}, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={[0x78c1]}, 0x8}) [ 565.439560][T13130] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 565.461438][T13133] loop1: detected capacity change from 0 to 184 16:57:29 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) 16:57:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8954, 0x0) [ 565.519444][T13137] loop1: detected capacity change from 0 to 184 16:57:29 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:57:29 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff43443030", 0x5, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) 16:57:29 executing program 2: bpf$PROG_LOAD(0x8, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 565.553755][T13142] loop3: detected capacity change from 0 to 184 [ 565.562097][T13142] isofs_fill_super: bread failed, dev=loop3, iso_blknum=46, block=92 [ 565.565512][ T4116] buffer_io_error: 1 callbacks suppressed [ 565.565530][ T4116] Buffer I/O error on dev loop1, logical block 0, async page read [ 565.565699][ T4116] ldm_validate_partition_table(): Disk read failed. [ 565.565729][ T4116] Dev loop1: unable to read RDB block 0 16:57:29 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) 16:57:29 executing program 2: syz_io_uring_setup(0x6ead, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) [ 565.565751][ T4116] loop1: unable to read partition table [ 565.566077][ T4116] loop1: partition table beyond EOD, truncated [ 565.601760][T13145] loop0: detected capacity change from 0 to 87 [ 565.645218][T13147] loop1: detected capacity change from 0 to 184 16:57:29 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff43443030", 0x5, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) 16:57:29 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, &(0x7f0000000180)={&(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)='@', 0x1}], 0x1, &(0x7f0000001800)=ANY=[@ANYBLOB="20000000000000002900000004000000870000000000000005020009000000001400000000000000290000003400000001000080000000001400000000000000290000000b0000000000ffff000000001400000000000000290000003e00000001000000000000002400000000000000290000003200"/136, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00$'], 0xb8}, 0x0) 16:57:29 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) [ 565.703711][T13151] loop3: detected capacity change from 0 to 184 [ 565.715726][T13155] loop1: detected capacity change from 0 to 184 [ 565.751739][T13151] isofs_fill_super: bread failed, dev=loop3, iso_blknum=46, block=92 16:57:29 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:57:29 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) 16:57:29 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x1e, 0x3, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:57:29 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = dup(r0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000000c0)={'c', ' *:* ', 'rwm\x00'}, 0xa) 16:57:29 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) [ 565.822597][T13162] loop0: detected capacity change from 0 to 87 16:57:29 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) [ 565.856348][T13164] loop3: detected capacity change from 0 to 184 16:57:29 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) [ 565.896162][T13164] isofs_fill_super: bread failed, dev=loop3, iso_blknum=46, block=92 16:57:29 executing program 2: bpf$PROG_LOAD(0x15, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:57:29 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) 16:57:29 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) 16:57:29 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:57:29 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x4c, 0x0, 0x0) [ 565.990910][T13174] loop1: detected capacity change from 0 to 136 [ 565.994959][T13174] isofs_fill_super: get root inode failed [ 565.997101][T13176] loop3: detected capacity change from 0 to 184 16:57:29 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) 16:57:29 executing program 2: r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x1ff, 0x0) read$msr(r0, &(0x7f0000000040)=""/4096, 0x1000) [ 566.046679][T13182] loop1: detected capacity change from 0 to 136 [ 566.052895][T13183] loop0: detected capacity change from 0 to 87 [ 566.057425][T13176] isofs_fill_super: bread failed, dev=loop3, iso_blknum=46, block=92 [ 566.061500][T13182] isofs_fill_super: get root inode failed 16:57:29 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) 16:57:29 executing program 2: r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x1ff, 0x0) read$msr(r0, &(0x7f0000000040)=""/4096, 0x1000) [ 566.111935][T13186] loop3: detected capacity change from 0 to 184 [ 566.131532][T13186] isofs_fill_super: bread failed, dev=loop3, iso_blknum=46, block=92 16:57:29 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) 16:57:29 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) [ 566.174737][T13190] loop1: detected capacity change from 0 to 136 [ 566.177361][T13190] isofs_fill_super: get root inode failed [ 566.192875][T13192] loop3: detected capacity change from 0 to 184 16:57:30 executing program 2: syz_emit_ethernet(0x1e, &(0x7f0000000000)={@empty, @broadcast, @void, {@can={0xc, {{}, 0x0, 0x0, 0x0, 0x0, "37d7a9ce94369144"}}}}, 0x0) 16:57:30 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) [ 566.195393][T13192] ISOFS: Unable to identify CD-ROM format. 16:57:30 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x16, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 16:57:30 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {0x0, 0x0, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) 16:57:30 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) [ 566.252744][T13198] loop0: detected capacity change from 0 to 87 16:57:30 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x31, 0x0, 0x7000000) [ 566.281238][T13201] loop3: detected capacity change from 0 to 184 [ 566.284316][T13202] loop1: detected capacity change from 0 to 184 16:57:30 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x1e, 0x0, 0x7000000) [ 566.284698][T13201] ISOFS: Unable to identify CD-ROM format. [ 566.308742][T13202] isofs_fill_super: get root inode failed 16:57:30 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) 16:57:30 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/key-users\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x8113, r0, 0x10000000) [ 566.367544][T13208] loop3: detected capacity change from 0 to 184 [ 566.384429][T13208] ISOFS: Unable to identify CD-ROM format. 16:57:30 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:57:30 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {0x0, 0x0, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) 16:57:30 executing program 2: bpf$PROG_LOAD(0x2, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:57:30 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{0x0, 0x0, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) [ 566.462921][T13213] loop1: detected capacity change from 0 to 184 16:57:30 executing program 2: bpf$PROG_LOAD(0x2, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xcd) [ 566.487299][T13216] loop3: detected capacity change from 0 to 184 [ 566.491543][T13216] ISOFS: Unable to identify CD-ROM format. [ 566.495811][T13213] isofs_fill_super: get root inode failed 16:57:30 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) read$msr(r0, 0x0, 0x0) [ 566.509637][T13220] loop0: detected capacity change from 0 to 87 16:57:30 executing program 2: bpf$PROG_LOAD_XDP(0xf, &(0x7f0000000640)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:57:30 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {0x0, 0x0, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) [ 566.587390][T13225] loop1: detected capacity change from 0 to 184 [ 566.598810][T13225] isofs_fill_super: get root inode failed 16:57:30 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{0x0, 0x0, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) 16:57:30 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r2, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:57:30 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x12, 0x3, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:57:30 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100), 0x0, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) [ 566.642265][T13229] loop3: detected capacity change from 0 to 184 16:57:30 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x49, 0x0, 0x7000000) [ 566.645468][T13229] ISOFS: Unable to identify CD-ROM format. [ 566.660462][T13232] loop1: detected capacity change from 0 to 184 [ 566.670050][T13232] isofs_fill_super: get root inode failed 16:57:30 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100), 0x0, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) 16:57:30 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x0, 0x0, 0x9}, 0x48) [ 566.691933][T13236] loop0: detected capacity change from 0 to 87 16:57:30 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{0x0, 0x0, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) [ 566.709309][T13238] loop1: detected capacity change from 0 to 184 [ 566.711842][T13238] isofs_fill_super: get root inode failed 16:57:30 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100), 0x0, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) [ 566.727203][T13242] loop3: detected capacity change from 0 to 184 [ 566.746992][T13242] ISOFS: Unable to identify CD-ROM format. 16:57:30 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r2, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:57:30 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000040)="ce", 0x1}], 0x1}, 0x0) 16:57:30 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="88001700000000000017000800", 0xd, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) 16:57:30 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000), 0x0, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) [ 566.836660][T13248] loop1: detected capacity change from 0 to 184 16:57:30 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="88001700000000000017000800", 0xd, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) [ 566.848858][T13248] isofs_fill_super: root inode is not a directory. Corrupted media? [ 566.851806][T13251] loop3: detected capacity change from 0 to 184 [ 566.856464][T13251] ISOFS: Unable to identify CD-ROM format. [ 566.857294][T13252] loop0: detected capacity change from 0 to 87 16:57:30 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="88001700000000000017000800", 0xd, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) [ 566.878920][T13254] loop1: detected capacity change from 0 to 184 16:57:30 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000), 0x0, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) [ 566.883979][T13254] isofs_fill_super: root inode is not a directory. Corrupted media? [ 566.922036][T13256] loop1: detected capacity change from 0 to 184 [ 566.925763][T13256] isofs_fill_super: root inode is not a directory. Corrupted media? [ 566.930914][T13258] loop3: detected capacity change from 0 to 184 16:57:30 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000), 0x0, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) [ 566.934611][T13258] ISOFS: Unable to identify CD-ROM format. 16:57:30 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r2, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) [ 566.968454][T13260] loop3: detected capacity change from 0 to 184 [ 566.972760][T13260] ISOFS: Unable to identify CD-ROM format. [ 567.022563][T13262] loop0: detected capacity change from 0 to 87 [ 567.050923][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 567.050940][ T40] audit: type=1804 audit(1655225850.850:671): pid=13262 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/828/file1/bus" dev="loop0" ino=1048976 res=1 errno=0 [ 567.052211][ T40] audit: type=1804 audit(1655225850.850:672): pid=13262 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/828/file1/bus" dev="loop0" ino=1048976 res=1 errno=0 16:57:31 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000", 0x50, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) 16:57:31 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809", 0x14, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) 16:57:31 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000040)="ce", 0x1}], 0x1}, 0x0) 16:57:31 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r3, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) [ 567.698779][T13266] loop3: detected capacity change from 0 to 184 [ 567.701936][T13266] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 567.704267][T13267] loop1: detected capacity change from 0 to 184 [ 567.704942][T13268] loop0: detected capacity change from 0 to 87 [ 567.717578][ T40] audit: type=1804 audit(1655225851.510:673): pid=13268 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/829/file1/bus" dev="loop0" ino=1048977 res=1 errno=0 [ 567.719591][ T40] audit: type=1804 audit(1655225851.520:674): pid=13268 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/829/file1/bus" dev="loop0" ino=1048977 res=1 errno=0 [ 567.722532][T13267] isofs_fill_super: root inode is not a directory. Corrupted media? 16:57:31 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809", 0x14, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) 16:57:31 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000", 0x50, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) [ 567.828021][T13272] loop1: detected capacity change from 0 to 184 [ 567.831554][T13272] isofs_fill_super: root inode is not a directory. Corrupted media? [ 567.833950][T13274] loop3: detected capacity change from 0 to 184 16:57:31 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r3, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) [ 567.846863][T13274] ISOFS: Logical zone size(0) < hardware blocksize(1024) 16:57:31 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000", 0x50, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) [ 567.890910][ T3826] blk_print_req_error: 8 callbacks suppressed [ 567.890956][ T3826] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 16:57:31 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809", 0x14, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) [ 567.898650][T13276] loop3: detected capacity change from 0 to 184 [ 567.926523][T13276] ISOFS: Logical zone size(0) < hardware blocksize(1024) 16:57:31 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b800"/120, 0x78, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) [ 567.957629][T13278] loop0: detected capacity change from 0 to 87 [ 567.966679][T13280] loop1: detected capacity change from 0 to 184 [ 567.974629][T13280] isofs_fill_super: root inode is not a directory. Corrupted media? [ 567.975570][T13282] loop3: detected capacity change from 0 to 184 [ 567.986077][ T40] audit: type=1804 audit(1655225851.780:675): pid=13278 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/830/file1/bus" dev="loop0" ino=1048978 res=1 errno=0 [ 567.988131][T13282] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 567.993056][ T40] audit: type=1804 audit(1655225851.790:676): pid=13278 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/830/file1/bus" dev="loop0" ino=1048978 res=1 errno=0 16:57:31 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a", 0x17, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) [ 568.058142][T13284] loop1: detected capacity change from 0 to 184 [ 568.074661][T13284] isofs_fill_super: root inode is not a directory. Corrupted media? 16:57:32 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x1d, 0x9, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000400000000000000080000008520000001000021"], &(0x7f0000000080)='GPL\x00', 0x5, 0x86, &(0x7f00000000c0)=""/134, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:57:32 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b800"/120, 0x78, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) 16:57:32 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a", 0x17, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) 16:57:32 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r3, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) [ 568.590309][T13287] loop3: detected capacity change from 0 to 184 [ 568.596331][T13289] loop0: detected capacity change from 0 to 87 16:57:32 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) [ 568.599747][T13291] loop1: detected capacity change from 0 to 184 [ 568.612381][T13291] isofs_fill_super: root inode is not a directory. Corrupted media? [ 568.615842][T13287] ISOFS: Logical zone size(0) < hardware blocksize(1024) 16:57:32 executing program 2: syz_io_uring_setup(0x9, &(0x7f0000000100)={0x0, 0xdef5}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) [ 568.629004][ T40] audit: type=1804 audit(1655225852.430:677): pid=13289 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/831/file1/bus" dev="loop0" ino=1048979 res=1 errno=0 [ 568.629562][ T40] audit: type=1804 audit(1655225852.430:678): pid=13289 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/831/file1/bus" dev="loop0" ino=1048979 res=1 errno=0 16:57:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8924, &(0x7f0000000240)={'erspan0\x00', 0x0}) 16:57:32 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b800"/120, 0x78, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) [ 568.714451][T13298] loop3: detected capacity change from 0 to 184 [ 568.716751][T13298] ISOFS: Logical zone size(0) < hardware blocksize(1024) 16:57:32 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a", 0x17, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) 16:57:32 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r3, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) [ 568.745749][T13302] loop1: detected capacity change from 0 to 184 16:57:32 executing program 2: bpf$PROG_LOAD_XDP(0x23, &(0x7f0000000640)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 568.755285][T13302] isofs_fill_super: root inode is not a directory. Corrupted media? 16:57:32 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b800000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018", 0x8c, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) 16:57:32 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a5708", 0x19, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) [ 568.782243][T13305] loop0: detected capacity change from 0 to 87 16:57:32 executing program 2: syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x183642) [ 568.808503][T13310] loop3: detected capacity change from 0 to 184 [ 568.812513][T13311] loop1: detected capacity change from 0 to 184 16:57:32 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x8, 0x1, &(0x7f0000001300)=ANY=[@ANYBLOB="f5"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 568.823198][T13311] isofs_fill_super: root inode is not a directory. Corrupted media? [ 568.824943][ T40] audit: type=1804 audit(1655225852.620:679): pid=13305 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/832/file1/bus" dev="loop0" ino=1048980 res=1 errno=0 [ 568.825053][T13310] isofs_fill_super: get root inode failed 16:57:32 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x21, 0x0, 0x0) [ 568.863542][ T4116] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 16:57:32 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a5708", 0x19, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) [ 568.910635][T13318] loop1: detected capacity change from 0 to 184 [ 568.913360][T13318] isofs_fill_super: root inode is not a directory. Corrupted media? 16:57:32 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r3, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:57:32 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b800000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018", 0x8c, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) 16:57:32 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x74) bind(r0, &(0x7f0000000000)=@phonet, 0x80) 16:57:32 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x12, 0x1, &(0x7f0000000000)=@raw=[@ldst], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 568.940225][T13321] loop3: detected capacity change from 0 to 184 [ 568.949213][T13321] isofs_fill_super: get root inode failed 16:57:32 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b800000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018", 0x8c, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) [ 568.967719][T13324] loop0: detected capacity change from 0 to 87 [ 568.985535][T13328] loop3: detected capacity change from 0 to 184 16:57:32 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a5708", 0x19, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) [ 568.991857][ T40] audit: type=1804 audit(1655225852.790:680): pid=13324 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/833/file1/bus" dev="loop0" ino=1048981 res=1 errno=0 16:57:32 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000440)={0x4}) [ 569.009368][T13330] loop1: detected capacity change from 0 to 184 [ 569.018672][T13328] isofs_fill_super: get root inode failed [ 569.027007][T13330] isofs_fill_super: root inode is not a directory. Corrupted media? 16:57:32 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000", 0x96, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) [ 569.068614][T13334] loop3: detected capacity change from 0 to 184 [ 569.070650][ T4116] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 569.083121][T13334] isofs_fill_super: get root inode failed 16:57:32 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r3, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:57:32 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x3, 0x0, 0x4, 0x1000}, 0x48) 16:57:32 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) 16:57:32 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x2e, 0x0, 0x7000000) 16:57:32 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000", 0x96, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) [ 569.143656][T13340] loop0: detected capacity change from 0 to 87 16:57:32 executing program 2: request_key(&(0x7f00000000c0)='logon\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='\x00', 0x0) [ 569.161551][T13344] loop3: detected capacity change from 0 to 184 [ 569.165472][T13338] loop1: detected capacity change from 0 to 136 [ 569.172897][T13338] isofs_fill_super: get root inode failed 16:57:33 executing program 2: bpf$PROG_LOAD(0x11, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 569.189295][T13344] isofs_fill_super: get root inode failed 16:57:33 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000", 0x96, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) [ 569.224747][ T3826] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 569.228416][T13350] loop3: detected capacity change from 0 to 184 [ 569.254058][T13350] isofs_fill_super: get root inode failed 16:57:33 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) 16:57:33 executing program 2: bpf$PROG_LOAD_XDP(0x17, &(0x7f0000000640)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:57:33 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4400) dup3(0xffffffffffffffff, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r3, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) [ 569.291573][ T4116] I/O error, dev loop3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 16:57:33 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b800000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000", 0x9b, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) [ 569.291598][ T4116] Buffer I/O error on dev loop3, logical block 1, async page read [ 569.315269][T13355] loop1: detected capacity change from 0 to 136 16:57:33 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x1, &(0x7f00000004c0)=@raw=[@kfunc], &(0x7f0000000500)='GPL\x00', 0x4, 0xf8, &(0x7f0000000540)=""/248, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 569.321741][T13355] isofs_fill_super: get root inode failed [ 569.321944][T13356] loop0: detected capacity change from 0 to 87 [ 569.330818][T13358] loop3: detected capacity change from 0 to 184 [ 569.341189][T13358] isofs_fill_super: get root inode failed 16:57:33 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b800000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000", 0x9b, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) 16:57:33 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x11, 0x3, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:57:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000180)={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) 16:57:33 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) [ 569.392457][T13364] loop3: detected capacity change from 0 to 184 [ 569.395123][T13364] isofs_fill_super: get root inode failed 16:57:33 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b800000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000", 0x9b, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) [ 569.408701][T13366] loop1: detected capacity change from 0 to 136 [ 569.411958][T13366] isofs_fill_super: get root inode failed [ 569.427419][T13370] loop3: detected capacity change from 0 to 184 [ 569.441775][T13370] isofs_fill_super: get root inode failed 16:57:33 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4400) dup3(0xffffffffffffffff, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r3, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:57:33 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=@framed={{}, [@func, @generic, @map_val, @btf_id, @map_fd, @kfunc, @func]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xb8) 16:57:33 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b8000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181300000000000000000000150000000022", 0x9d, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) [ 569.462268][ T7358] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 16:57:33 executing program 2: r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r0, &(0x7f0000000040)=""/4096, 0x7ffff000) 16:57:33 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) [ 569.492665][T13374] loop0: detected capacity change from 0 to 87 [ 569.508867][T13378] loop3: detected capacity change from 0 to 184 [ 569.511904][T13379] loop1: detected capacity change from 0 to 184 [ 569.515593][T13378] isofs_fill_super: get root inode failed 16:57:33 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) [ 569.527740][T13379] isofs_fill_super: bread failed, dev=loop1, iso_blknum=46, block=92 [ 569.575828][T13382] loop1: detected capacity change from 0 to 184 [ 569.584474][ T4116] I/O error, dev loop3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 569.584497][ T4116] Buffer I/O error on dev loop3, logical block 1, async page read [ 569.590066][T13382] isofs_fill_super: bread failed, dev=loop1, iso_blknum=46, block=92 16:57:33 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) 16:57:33 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4400) dup3(0xffffffffffffffff, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r3, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:57:33 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b8000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181300000000000000000000150000000022", 0x9d, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) [ 569.644630][T13385] loop1: detected capacity change from 0 to 184 [ 569.660672][T13386] loop3: detected capacity change from 0 to 184 [ 569.667929][T13386] isofs_fill_super: get root inode failed 16:57:33 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {0x0, 0x0, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) [ 569.670424][T13385] isofs_fill_super: bread failed, dev=loop1, iso_blknum=46, block=92 [ 569.687038][T13388] loop0: detected capacity change from 0 to 87 [ 569.712239][T13390] loop1: detected capacity change from 0 to 184 16:57:33 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b8000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181300000000000000000000150000000022", 0x9d, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) [ 569.730089][T13390] isofs_fill_super: bread failed, dev=loop1, iso_blknum=46, block=92 [ 569.738711][T13392] loop3: detected capacity change from 0 to 184 [ 569.747630][T13392] isofs_fill_super: get root inode failed [ 569.796980][ T3826] I/O error, dev loop3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 569.797004][ T3826] Buffer I/O error on dev loop3, logical block 1, async page read [ 571.602762][ T1344] ieee802154 phy1 wpan1: encryption failed: -22 [ 621.216843][ T8076] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 16:58:25 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {0x0, 0x0, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) 16:58:25 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b800000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200", 0x9e, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) 16:58:25 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r0, 0x4, 0x4400) dup3(r0, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r3, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:58:25 executing program 2: init_module(&(0x7f0000000080)='\x03\x00/&\x04|\x93\xe2H\xeczAL\a\xfaHT\xee\xf0\xaf\x9a\xe5`\xdf\xd4z\xf4\x9a)\x81\x8b^\x13\x13\x99H\xb0\xaex\xb9\xfa:\xaa\xbb_ S\xed\x92\xda\xd3\xbfh\x0f\xb8\xda;@\'\xa5J\x95\xae\xde\xed\x1b\xfc:\xe7\x85I\xe7\xd6\x9f\x94\x05\xc3\x83\xf8\xc4@\xd6G\xc5\xb5\xf4\xf3j\xd4P\x9e\xf2\x17k)\x0f\xcd\xeb\x9d)\x9b\xcdK\x03\x9b\xf3m\x81\x89\x06=\xad\xc0\xce\xd8\xffWu,\xa0\xac\x93\b\xb4Q\xefq(\x12F\xdb\xda\xb2\x88\x85\x1eC\xc4k\xdf\xa3\xff\xc6t\xfc\v\xbc \x8bf\xaf\b\xba\xfb\xee\xca\x16\xfa3\xf4e\x017\xe7\xb6\x8c_1A\xfd\x9b\x8dX\xf3U\xc9^=\x12i\x89\x88\x00\x00\x00\x00\x00\x00\x00\xb6\xa4\xf8\xed\xf0\xb9PHBg\x1f\x9b\vi\xfa\x8e\x1c\xe3\x1a\xc3\x8d\x13\xc9\x10\x06ig\x9c\xfe\xc8K\x98\xb0\x8b7q\xa0\xa9\x95\xe0\xe6\xba\xb7\xab\xbc\xaeH\xecm\xee\t', 0xf0, 0x0) [ 621.421533][T13405] loop1: detected capacity change from 0 to 184 [ 621.427007][T13407] loop3: detected capacity change from 0 to 184 [ 621.427505][T13406] loop0: detected capacity change from 0 to 87 [ 621.444685][ T8076] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.445244][T13407] isofs_fill_super: get root inode failed [ 621.447318][T13405] isofs_fill_super: bread failed, dev=loop1, iso_blknum=46, block=92 [ 621.516238][ T8076] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 16:58:25 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {0x0, 0x0, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) 16:58:25 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b800000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200", 0x9e, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) [ 621.549567][T13409] loop3: detected capacity change from 0 to 184 16:58:25 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r0, 0x4, 0x4400) dup3(r0, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r3, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x200a00, 0x4000}]) [ 621.568212][T13409] isofs_fill_super: get root inode failed 16:58:25 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b800000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200", 0x9e, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) [ 621.582831][ T8076] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.631497][T13411] loop1: detected capacity change from 0 to 184 [ 621.642746][T13411] isofs_fill_super: bread failed, dev=loop1, iso_blknum=46, block=92 [ 621.653461][T13414] loop3: detected capacity change from 0 to 184 [ 621.656089][T13414] isofs_fill_super: get root inode failed [ 621.659015][T13415] loop0: detected capacity change from 0 to 87 16:58:25 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600), 0x0, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) 16:58:25 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) [ 621.751116][T13417] loop1: detected capacity change from 0 to 184 [ 621.763271][T13419] loop3: detected capacity change from 0 to 184 [ 621.765162][T13419] ISOFS: Unable to identify CD-ROM format. [ 621.791571][T13417] isofs_fill_super: bread failed, dev=loop1, iso_blknum=46, block=92 16:58:25 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r0, 0x4, 0x4400) dup3(r0, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r3, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x200a00, 0x4000}]) [ 621.829486][T13401] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 621.856966][T13400] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 621.875503][T13424] loop0: detected capacity change from 0 to 87 [ 622.719914][ T8076] device hsr_slave_0 left promiscuous mode [ 622.721067][ T8076] device hsr_slave_1 left promiscuous mode [ 622.722160][ T8076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 622.722244][ T8076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 622.724393][ T8076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 622.724409][ T8076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 622.726056][ T8076] device bridge_slave_1 left promiscuous mode [ 622.727714][ T8076] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.741333][ T8076] device bridge_slave_0 left promiscuous mode [ 622.741474][ T8076] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.774575][ T8076] device veth1_macvtap left promiscuous mode [ 622.774686][ T8076] device veth0_macvtap left promiscuous mode [ 622.774816][ T8076] device veth1_vlan left promiscuous mode [ 622.774968][ T8076] device veth0_vlan left promiscuous mode [ 622.968935][ T8076] team0 (unregistering): Port device team_slave_1 removed [ 622.975156][ T8076] team0 (unregistering): Port device team_slave_0 removed [ 622.985940][ T8076] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 623.002880][ T8076] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 623.092462][ T8076] bond0 (unregistering): Released all slaves [ 626.398190][ T64] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 630.888005][ T64] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 633.040041][ T1344] ieee802154 phy1 wpan1: encryption failed: -22 [ 635.358028][ T64] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 637.687669][ T3745] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 637.689665][ T3745] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 637.690244][ T3745] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 637.690992][ T3745] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 637.691295][ T3745] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 637.691471][ T3745] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 637.769218][T13572] chnl_net:caif_netlink_parms(): no params data found [ 637.846951][T13572] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.847093][T13572] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.848501][T13572] device bridge_slave_0 entered promiscuous mode [ 637.850068][T13572] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.850139][T13572] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.850805][T13572] device bridge_slave_1 entered promiscuous mode [ 637.882378][T13572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 637.884321][T13572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 637.920574][T13572] team0: Port device team_slave_0 added [ 637.922392][T13572] team0: Port device team_slave_1 added [ 637.951781][T13572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 637.951792][T13572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 637.951808][T13572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 637.953038][T13572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 637.953047][T13572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 637.953061][T13572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 638.028352][T13572] device hsr_slave_0 entered promiscuous mode [ 638.029168][T13572] device hsr_slave_1 entered promiscuous mode [ 638.125538][T13572] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.125594][T13572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 638.126219][T13572] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.126267][T13572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 638.162638][T13572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 638.169301][ T9560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 638.172698][ T9560] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.177626][ T9560] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.189851][ T9560] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 638.199282][T13572] 8021q: adding VLAN 0 to HW filter on device team0 [ 638.207056][T11840] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 638.207415][T11840] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.207470][T11840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 638.212082][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 638.212634][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.212721][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 638.223077][ T9929] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 638.225077][ T9929] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 638.227712][ T5047] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 638.231426][ T9561] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 638.235974][ T5047] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 638.238536][T13572] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 638.246302][ T9561] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 638.246390][ T9561] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 638.251216][T13572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 638.458258][ T9922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 638.466999][T10560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 638.467947][T10560] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 638.468556][T10560] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 638.472915][T13572] device veth0_vlan entered promiscuous mode [ 638.477972][T13572] device veth1_vlan entered promiscuous mode [ 638.493358][T10562] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 638.493823][T10562] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 638.494404][T10562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 638.496947][T13572] device veth0_macvtap entered promiscuous mode [ 638.500492][T13572] device veth1_macvtap entered promiscuous mode [ 638.510240][T13572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 638.510260][T13572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.510284][T13572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 638.510298][T13572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.510306][T13572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 638.510319][T13572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.512196][T13572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 638.512320][ T9922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 638.515708][ T9922] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 638.518552][T13572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 638.518565][T13572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.518570][T13572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 638.518578][T13572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.518583][T13572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 638.518590][T13572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.519864][T13572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 638.520075][T10560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 638.583252][ T4494] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.583271][ T4494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.587463][ T9561] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 638.607668][ T4494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.607681][ T4494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.611352][T10562] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 16:58:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x5c5fe33e6dac8f6d}, 0x14}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) 16:58:42 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) 16:58:42 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600), 0x0, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) 16:58:42 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) [ 638.642834][T13592] Invalid ELF header magic: != ELF [ 638.660456][T13597] loop1: detected capacity change from 0 to 184 [ 638.662183][T13596] loop3: detected capacity change from 0 to 184 [ 638.662291][T13598] loop0: detected capacity change from 0 to 87 [ 638.666975][T13596] ISOFS: Unable to identify CD-ROM format. 16:58:42 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) [ 638.675446][T13597] isofs_fill_super: bread failed, dev=loop1, iso_blknum=46, block=92 [ 638.678946][ T40] kauditd_printk_skb: 1 callbacks suppressed 16:58:42 executing program 2: bpf$PROG_LOAD_XDP(0xb, 0x0, 0x0) [ 638.678967][ T40] audit: type=1804 audit(1655225922.480:682): pid=13598 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/841/bus" dev="sda1" ino=1166 res=1 errno=0 [ 638.679735][ T40] audit: type=1804 audit(1655225922.480:683): pid=13598 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/841/bus" dev="sda1" ino=1166 res=1 errno=0 16:58:42 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) 16:58:42 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600), 0x0, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) 16:58:42 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f0000000380)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x5}, @ldst, @btf_id, @map_val], &(0x7f0000000400)='GPL\x00', 0x5, 0x90, &(0x7f00000000c0)=""/144, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 638.763639][T13608] loop3: detected capacity change from 0 to 184 [ 638.765677][T13608] ISOFS: Unable to identify CD-ROM format. [ 638.768855][T13611] loop1: detected capacity change from 0 to 184 16:58:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x891b, 0x0) [ 638.780008][T13611] isofs_fill_super: bread failed, dev=loop1, iso_blknum=46, block=92 16:58:42 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000780)={'syztnl1\x00', 0x0}) [ 638.812677][T13400] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 638.832864][T13420] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 16:58:43 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:58:43 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) 16:58:43 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344", 0x3, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) 16:58:43 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x9, 0xa, &(0x7f0000000040)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @btf_id, @map_idx_val, @alu, @exit]}, &(0x7f00000000c0)='syzkaller\x00', 0x7, 0xc0, &(0x7f0000000100)=""/192, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 639.236215][T13621] loop3: detected capacity change from 0 to 184 [ 639.236855][T13622] loop1: detected capacity change from 0 to 184 16:58:43 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) 16:58:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0x3, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="002179bbb2e82ec1c64123f2604a1c000000", @ANYRES16=0x0, @ANYBLOB="00002bbd7000fcdb6510120697b42a5bdf2503000000040005000500040002000000"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4) [ 639.256322][T13622] isofs_fill_super: bread failed, dev=loop1, iso_blknum=46, block=92 16:58:43 executing program 2: bpf$PROG_LOAD_XDP(0xa, &(0x7f0000000640)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:58:43 executing program 2: socketpair(0x2, 0xa, 0x0, &(0x7f00000001c0)) [ 639.309073][T13420] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 639.330560][T13629] loop3: detected capacity change from 0 to 184 [ 639.378898][T13633] loop0: detected capacity change from 0 to 87 [ 639.386566][ T40] audit: type=1804 audit(1655225923.180:684): pid=13633 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/842/bus" dev="sda1" ino=1152 res=1 errno=0 [ 639.387120][ T40] audit: type=1804 audit(1655225923.180:685): pid=13633 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/842/bus" dev="sda1" ino=1152 res=1 errno=0 [ 639.758540][ T5047] Bluetooth: hci0: command 0x0409 tx timeout 16:58:43 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344", 0x3, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) 16:58:43 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) 16:58:43 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:58:43 executing program 2: bpf$PROG_LOAD_XDP(0x7, &(0x7f0000000640)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 639.836572][T13638] loop1: detected capacity change from 0 to 184 [ 639.837661][T13639] loop3: detected capacity change from 0 to 184 [ 639.852504][T13638] isofs_fill_super: bread failed, dev=loop1, iso_blknum=46, block=92 16:58:43 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x8, 0x1, &(0x7f0000000000)=@raw=[@ldst={0x1}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:58:43 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) 16:58:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000440)={0xfffffffffffffffe, 0x0, &(0x7f0000000400)={0x0}, 0x5}, 0x0) 16:58:43 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344", 0x3, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) 16:58:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@ipv4_newnexthop={0x18, 0x68, 0x1, 0x0, 0x0, {0x3}}, 0x18}}, 0x0) [ 639.926395][T13400] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 639.932136][T13646] loop1: detected capacity change from 0 to 184 [ 639.957591][T13649] loop3: detected capacity change from 0 to 184 16:58:43 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000000)=@framed={{0x6}}, &(0x7f0000000040)='GPL\x00', 0x2, 0xe8, &(0x7f0000000080)=""/232, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 639.970580][T13646] isofs_fill_super: bread failed, dev=loop1, iso_blknum=46, block=92 [ 639.991663][T13654] loop0: detected capacity change from 0 to 87 [ 640.007396][ T40] audit: type=1804 audit(1655225923.800:686): pid=13654 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/843/bus" dev="sda1" ino=1148 res=1 errno=0 [ 640.008317][ T40] audit: type=1804 audit(1655225923.810:687): pid=13654 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/843/bus" dev="sda1" ino=1148 res=1 errno=0 16:58:44 executing program 0: chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:58:44 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) 16:58:44 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, 0x7000000) 16:58:44 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff43443030", 0x5, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) [ 640.526769][T13658] loop3: detected capacity change from 0 to 184 16:58:44 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) 16:58:44 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x1, 0x0, 0x0) [ 640.541423][T13661] loop1: detected capacity change from 0 to 184 [ 640.561559][T13663] loop3: detected capacity change from 0 to 184 [ 640.566152][T13661] isofs_fill_super: bread failed, dev=loop1, iso_blknum=46, block=92 16:58:44 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) sendmsg$inet6(r0, &(0x7f0000000900)={&(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000280)="f7", 0x1}], 0x2}, 0x0) 16:58:44 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(0x0, 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) [ 640.595289][T13667] loop3: detected capacity change from 0 to 184 [ 640.643704][ T40] audit: type=1804 audit(1655225924.440:688): pid=13671 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/844/bus" dev="sda1" ino=1151 res=1 errno=0 [ 640.644297][ T40] audit: type=1804 audit(1655225924.440:689): pid=13671 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/844/bus" dev="sda1" ino=1151 res=1 errno=0 16:58:44 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(0x0, 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) 16:58:44 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff43443030", 0x5, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) 16:58:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000440)={0xfffffffffffffffe, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_PMSR_ATTR_PEERS={0xd50, 0x5, 0x0, 0x1, [{0x3e8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x19c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x100, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x194, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x114, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xa0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]}]}, {0x2cc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x10, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x274, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x11c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x98, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}]}]}, {0x260, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x138, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xec, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x88, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x2b4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x90, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x194, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x100, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x4c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}]}, {0x160, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x150, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x160, 0x5, 0x0, 0x1, [{0x15c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x94, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}]}]}]}, 0xec4}}, 0x40) 16:58:44 executing program 0: chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) [ 641.065894][T13675] loop3: detected capacity change from 0 to 184 16:58:44 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) [ 641.070721][T13677] loop1: detected capacity change from 0 to 184 16:58:44 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(0x0, 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/70, 0x46) [ 641.089426][T13677] isofs_fill_super: bread failed, dev=loop1, iso_blknum=46, block=92 [ 641.103116][T13680] loop2: detected capacity change from 0 to 87 [ 641.106202][T13682] loop3: detected capacity change from 0 to 184 [ 641.112119][ T40] audit: type=1804 audit(1655225924.910:690): pid=13680 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir1742540418/syzkaller.Qym0Qm/20/file1/bus" dev="loop2" ino=1048992 res=1 errno=0 [ 641.118209][ T40] audit: type=1804 audit(1655225924.910:691): pid=13680 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir1742540418/syzkaller.Qym0Qm/20/file1/bus" dev="loop2" ino=1048992 res=1 errno=0 16:58:44 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000040)=""/70, 0x46) [ 641.126617][T13680] bio_check_eod: 4 callbacks suppressed [ 641.126640][T13680] syz-executor.2: attempt to access beyond end of device [ 641.126640][T13680] loop2: rw=0, sector=65, nr_sectors = 165 limit=87 16:58:44 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff43443030", 0x5, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) [ 641.187628][T13686] loop3: detected capacity change from 0 to 184 16:58:45 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000040)=""/70, 0x46) [ 641.198087][T13688] loop1: detected capacity change from 0 to 184 [ 641.214347][T13688] isofs_fill_super: bread failed, dev=loop1, iso_blknum=46, block=92 16:58:45 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) [ 641.232429][T13690] loop3: detected capacity change from 0 to 184 [ 641.240858][T13693] loop2: detected capacity change from 0 to 87 16:58:45 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000040)=""/70, 0x46) [ 641.250613][T13420] I/O error, dev loop1, sector 138 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 641.250651][T13420] Buffer I/O error on dev loop1, logical block 69, async page read [ 641.250734][T13420] I/O error, dev loop1, sector 142 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 641.250751][T13420] Buffer I/O error on dev loop1, logical block 71, async page read [ 641.295044][T13695] loop3: detected capacity change from 0 to 184 [ 641.306729][T13693] syz-executor.2: attempt to access beyond end of device [ 641.306729][T13693] loop2: rw=0, sector=65, nr_sectors = 165 limit=87 16:58:45 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) 16:58:45 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@hide}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) 16:58:45 executing program 0: chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:58:45 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) [ 641.724085][T13699] loop1: detected capacity change from 0 to 184 [ 641.724947][T13700] loop3: detected capacity change from 0 to 184 [ 641.725747][T13701] loop2: detected capacity change from 0 to 87 [ 641.734747][T13699] isofs_fill_super: bread failed, dev=loop1, iso_blknum=46, block=92 16:58:45 executing program 3: syz_io_uring_setup(0x52c, &(0x7f0000000180), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6ead, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) 16:58:45 executing program 3: bpf$PROG_LOAD_XDP(0x6, 0x0, 0x0) [ 641.773224][T13701] syz-executor.2: attempt to access beyond end of device [ 641.773224][T13701] loop2: rw=0, sector=65, nr_sectors = 165 limit=87 16:58:45 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) 16:58:45 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x13, 0x3, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 641.813855][T13708] loop1: detected capacity change from 0 to 184 [ 641.825491][T13708] isofs_fill_super: bread failed, dev=loop1, iso_blknum=46, block=92 16:58:45 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x13, 0x3, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 641.838068][ T9561] Bluetooth: hci0: command 0x041b tx timeout 16:58:45 executing program 3: syz_emit_ethernet(0x1a, &(0x7f0000001100)={@multicast, @link_local, @val={@void, {0x8100, 0x2}}, {@llc_tr={0x11, {@snap={0x0, 0x0, "e1", "1717c7"}}}}}, 0x0) 16:58:46 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1, &(0x7f00000001c0)=@raw=[@func], &(0x7f0000000200)='GPL\x00', 0x0, 0x29, &(0x7f0000000240)=""/41, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:58:46 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:58:46 executing program 0: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:58:46 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) [ 642.257968][T13720] loop2: detected capacity change from 0 to 87 [ 642.258351][T13721] loop1: detected capacity change from 0 to 184 16:58:46 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x8, 0x801, 0x7ff, 0x0, 0x1}, 0x48) [ 642.276615][T13721] isofs_fill_super: bread failed, dev=loop1, iso_blknum=46, block=92 [ 642.300291][T13720] syz-executor.2: attempt to access beyond end of device [ 642.300291][T13720] loop2: rw=0, sector=65, nr_sectors = 165 limit=87 16:58:46 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x8, 0x1, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x3}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:58:46 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) [ 642.356232][T13726] loop0: detected capacity change from 0 to 87 [ 642.363302][T13728] loop1: detected capacity change from 0 to 184 [ 642.369458][T13728] ISOFS: Unable to identify CD-ROM format. 16:58:46 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x3, 0x0, 0x0) 16:58:46 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x6, 0x0, 0x0) 16:58:46 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_submit(0x0, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) [ 642.413732][T13400] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 642.430119][T13737] loop2: detected capacity change from 0 to 87 16:58:46 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x6, 0x0, 0x7) 16:58:46 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) 16:58:46 executing program 0: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:58:46 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_submit(0x0, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:58:46 executing program 3: bpf$PROG_LOAD_XDP(0x4, 0x0, 0x0) syz_io_uring_setup(0x14e5, &(0x7f0000000000)={0x0, 0xa635, 0x8}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000fea000/0x14000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 642.858112][T13741] loop1: detected capacity change from 0 to 184 [ 642.862773][T13741] ISOFS: Unable to identify CD-ROM format. [ 642.865634][T13744] loop2: detected capacity change from 0 to 87 16:58:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x20, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0x20}}, 0x0) 16:58:46 executing program 3: bpf$PROG_LOAD_XDP(0xf, 0x0, 0x0) 16:58:46 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) 16:58:46 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x81, 0x0) [ 642.959954][T13752] loop1: detected capacity change from 0 to 184 [ 642.962046][T13752] ISOFS: Unable to identify CD-ROM format. 16:58:46 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{0x0, 0x0, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) [ 643.006840][T13756] loop1: detected capacity change from 0 to 184 [ 643.011132][T13756] ISOFS: Unable to identify CD-ROM format. [ 643.022883][T13758] loop0: detected capacity change from 0 to 87 16:58:47 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_submit(0x0, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:58:47 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x48) 16:58:47 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{0x0, 0x0, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) 16:58:47 executing program 0: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:58:47 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x0, 0x400}, 0x48) [ 643.470525][T13764] loop1: detected capacity change from 0 to 184 [ 643.476481][T13765] loop2: detected capacity change from 0 to 87 [ 643.478742][T13764] ISOFS: Unable to identify CD-ROM format. 16:58:47 executing program 3: r0 = io_uring_setup(0x9f9, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x65492ef000, 0x0, 0x12, r0, 0x0) 16:58:47 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x38, 0x0, 0x7000000) 16:58:47 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{0x0, 0x0, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) [ 643.569078][T13773] loop1: detected capacity change from 0 to 184 [ 643.573028][T13773] ISOFS: Unable to identify CD-ROM format. 16:58:47 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mreq(r0, 0x29, 0x6, 0x0, 0x0) 16:58:47 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) [ 643.614002][T13777] loop2: detected capacity change from 0 to 87 [ 643.660080][T13779] loop0: detected capacity change from 0 to 87 [ 643.918269][ T5047] Bluetooth: hci0: command 0x040f tx timeout 16:58:47 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000), 0x0, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) 16:58:47 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000240)={&(0x7f0000000040)={0xa, 0x2}, 0x9b, &(0x7f00000002c0)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_INTERVAL]}, 0x1c}}, 0x0) 16:58:47 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), 0x0, 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:58:47 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:58:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000440)={0xfffffffffffffffe, 0x0, 0x0, 0xffffff1f}, 0x0) [ 644.120607][T13785] loop1: detected capacity change from 0 to 184 [ 644.121776][T13786] loop2: detected capacity change from 0 to 87 [ 644.125755][T13785] ISOFS: Unable to identify CD-ROM format. 16:58:47 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='gid=', @ANYBLOB='b']) [ 644.142756][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 644.142768][ T40] audit: type=1804 audit(1655225927.940:716): pid=13786 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir1742540418/syzkaller.Qym0Qm/28/file1/bus" dev="loop2" ino=1049000 res=1 errno=0 [ 644.146014][ T40] audit: type=1804 audit(1655225927.940:717): pid=13786 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir1742540418/syzkaller.Qym0Qm/28/file1/bus" dev="loop2" ino=1049000 res=1 errno=0 16:58:47 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b}, 0x48) 16:58:48 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000), 0x0, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) [ 644.170650][T13790] FAT-fs (loop3): Unrecognized mount option "gid=b" or missing value 16:58:48 executing program 3: r0 = syz_open_dev$MSR(&(0x7f00000006c0), 0x0, 0x0) r1 = dup(r0) readv(r1, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000100)=""/12, 0xc}], 0x2) [ 644.211874][T13794] loop1: detected capacity change from 0 to 184 [ 644.215705][T13794] ISOFS: Unable to identify CD-ROM format. 16:58:48 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000), 0x0, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) [ 644.240762][T13799] loop1: detected capacity change from 0 to 184 [ 644.245965][T13799] ISOFS: Unable to identify CD-ROM format. [ 644.245999][T13800] loop0: detected capacity change from 0 to 87 [ 644.289310][T13400] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 644.289347][T13400] Buffer I/O error on dev loop0, logical block 0, async page read [ 644.289445][T13400] ldm_validate_partition_table(): Disk read failed. [ 644.289502][T13400] Dev loop0: unable to read RDB block 0 [ 644.289523][T13400] loop0: unable to read partition table [ 644.289693][T13400] loop0: partition table beyond EOD, truncated [ 644.292390][ T40] audit: type=1804 audit(1655225928.090:718): pid=13800 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/850/bus" dev="sda1" ino=1156 res=1 errno=0 [ 644.293148][ T40] audit: type=1804 audit(1655225928.090:719): pid=13800 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/850/bus" dev="sda1" ino=1156 res=1 errno=0 16:58:48 executing program 3: r0 = syz_open_dev$MSR(&(0x7f00000006c0), 0x0, 0x0) r1 = dup(r0) readv(r1, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000100)=""/12, 0xc}], 0x2) 16:58:48 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:58:48 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000", 0x50, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) 16:58:48 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), 0x0, 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) [ 644.795793][T13805] loop1: detected capacity change from 0 to 184 [ 644.797237][T13807] loop2: detected capacity change from 0 to 87 [ 644.809473][T13805] ISOFS: Logical zone size(0) < hardware blocksize(1024) 16:58:48 executing program 3: r0 = syz_open_dev$MSR(&(0x7f00000006c0), 0x0, 0x0) r1 = dup(r0) readv(r1, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000100)=""/12, 0xc}], 0x2) 16:58:48 executing program 3: r0 = syz_open_dev$MSR(&(0x7f00000006c0), 0x0, 0x0) r1 = dup(r0) readv(r1, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000100)=""/12, 0xc}], 0x2) [ 644.824256][ T40] audit: type=1804 audit(1655225928.620:720): pid=13807 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir1742540418/syzkaller.Qym0Qm/29/file1/bus" dev="loop2" ino=1049001 res=1 errno=0 16:58:48 executing program 3: syz_open_dev$MSR(&(0x7f00000006c0), 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000100)=""/12, 0xc}], 0x2) [ 644.825126][ T40] audit: type=1804 audit(1655225928.620:721): pid=13807 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir1742540418/syzkaller.Qym0Qm/29/file1/bus" dev="loop2" ino=1049001 res=1 errno=0 16:58:48 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000", 0x50, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) 16:58:48 executing program 3: syz_open_dev$MSR(&(0x7f00000006c0), 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000100)=""/12, 0xc}], 0x2) [ 644.904036][T13815] loop1: detected capacity change from 0 to 184 [ 644.911952][T13815] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 644.923206][T13819] loop0: detected capacity change from 0 to 87 16:58:48 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:58:48 executing program 3: syz_open_dev$MSR(&(0x7f00000006c0), 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000100)=""/12, 0xc}], 0x2) [ 644.980773][T13422] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 644.980796][T13422] Buffer I/O error on dev loop0, logical block 0, async page read [ 644.980852][T13422] ldm_validate_partition_table(): Disk read failed. [ 644.980868][T13422] Dev loop0: unable to read RDB block 0 [ 644.980883][T13422] loop0: unable to read partition table [ 644.980972][T13422] loop0: partition table beyond EOD, truncated [ 644.987052][ T40] audit: type=1804 audit(1655225928.780:722): pid=13819 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/851/bus" dev="sda1" ino=1147 res=1 errno=0 [ 644.987697][ T40] audit: type=1804 audit(1655225928.780:723): pid=13819 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/851/bus" dev="sda1" ino=1147 res=1 errno=0 [ 645.010303][T13823] loop2: detected capacity change from 0 to 87 [ 645.031535][ T40] audit: type=1804 audit(1655225928.820:724): pid=13823 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir1742540418/syzkaller.Qym0Qm/30/file1/bus" dev="loop2" ino=1049002 res=1 errno=0 [ 645.032252][ T40] audit: type=1804 audit(1655225928.820:725): pid=13823 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir1742540418/syzkaller.Qym0Qm/30/file1/bus" dev="loop2" ino=1049002 res=1 errno=0 16:58:49 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000", 0x50, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) 16:58:49 executing program 3: r0 = dup(0xffffffffffffffff) readv(r0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000100)=""/12, 0xc}], 0x2) 16:58:49 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:58:49 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), 0x0, 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) [ 645.466830][T13828] loop2: detected capacity change from 0 to 87 [ 645.471935][T13830] loop1: detected capacity change from 0 to 184 16:58:49 executing program 3: r0 = dup(0xffffffffffffffff) readv(r0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000100)=""/12, 0xc}], 0x2) [ 645.479898][T13830] ISOFS: Logical zone size(0) < hardware blocksize(1024) 16:58:49 executing program 3: r0 = dup(0xffffffffffffffff) readv(r0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000100)=""/12, 0xc}], 0x2) 16:58:49 executing program 3: r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) r1 = dup(r0) readv(r1, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000100)=""/12, 0xc}], 0x2) 16:58:49 executing program 3: r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) r1 = dup(r0) readv(r1, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000100)=""/12, 0xc}], 0x2) 16:58:49 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b800"/120, 0x78, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) 16:58:49 executing program 3: r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) r1 = dup(r0) readv(r1, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000100)=""/12, 0xc}], 0x2) [ 645.594414][T13842] loop1: detected capacity change from 0 to 184 [ 645.603045][T13844] loop0: detected capacity change from 0 to 87 [ 645.603505][T13842] ISOFS: Logical zone size(0) < hardware blocksize(1024) 16:58:49 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) [ 645.640946][T13846] loop2: detected capacity change from 0 to 87 [ 645.661418][T13400] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 645.664450][T13422] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 645.664472][T13422] Buffer I/O error on dev loop0, logical block 0, async page read [ 645.664528][T13422] ldm_validate_partition_table(): Disk read failed. [ 645.664560][T13422] Dev loop0: unable to read RDB block 0 [ 645.664575][T13422] loop0: unable to read partition table [ 645.664674][T13422] loop0: partition table beyond EOD, truncated [ 645.998420][ T9561] Bluetooth: hci0: command 0x0419 tx timeout 16:58:49 executing program 3: syz_open_dev$MSR(&(0x7f00000006c0), 0x0, 0x0) r0 = dup(0xffffffffffffffff) readv(r0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000100)=""/12, 0xc}], 0x2) 16:58:49 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b800"/120, 0x78, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) 16:58:49 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r2, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:58:49 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:58:49 executing program 3: syz_open_dev$MSR(&(0x7f00000006c0), 0x0, 0x0) r0 = dup(0xffffffffffffffff) readv(r0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000100)=""/12, 0xc}], 0x2) [ 646.150420][T13851] loop1: detected capacity change from 0 to 184 [ 646.156055][T13853] loop2: detected capacity change from 0 to 87 [ 646.158260][T13851] ISOFS: Logical zone size(0) < hardware blocksize(1024) 16:58:50 executing program 3: syz_open_dev$MSR(&(0x7f00000006c0), 0x0, 0x0) r0 = dup(0xffffffffffffffff) readv(r0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000100)=""/12, 0xc}], 0x2) 16:58:50 executing program 3: r0 = syz_open_dev$MSR(&(0x7f00000006c0), 0x0, 0x0) dup(r0) readv(0xffffffffffffffff, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000100)=""/12, 0xc}], 0x2) 16:58:50 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b800"/120, 0x78, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) 16:58:50 executing program 3: r0 = syz_open_dev$MSR(&(0x7f00000006c0), 0x0, 0x0) dup(r0) readv(0xffffffffffffffff, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000100)=""/12, 0xc}], 0x2) [ 646.261941][T13861] loop1: detected capacity change from 0 to 184 [ 646.265052][T13861] ISOFS: Logical zone size(0) < hardware blocksize(1024) 16:58:50 executing program 3: r0 = syz_open_dev$MSR(&(0x7f00000006c0), 0x0, 0x0) dup(r0) readv(0xffffffffffffffff, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000100)=""/12, 0xc}], 0x2) 16:58:50 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r2, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) [ 646.301038][T13867] FAT-fs (loop0): bogus number of reserved sectors [ 646.301052][T13867] FAT-fs (loop0): Can't find a valid FAT filesystem [ 646.317159][T13400] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 646.324928][T13869] loop2: detected capacity change from 0 to 87 16:58:50 executing program 3: r0 = syz_open_dev$MSR(&(0x7f00000006c0), 0x0, 0x0) r1 = dup(r0) readv(r1, 0x0, 0x0) 16:58:50 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b800000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018", 0x8c, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) 16:58:50 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r2, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:58:50 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) [ 646.766826][T13874] loop2: detected capacity change from 0 to 87 16:58:50 executing program 3: r0 = syz_open_dev$MSR(&(0x7f00000006c0), 0x0, 0x0) r1 = dup(r0) readv(r1, 0x0, 0x0) [ 646.783633][T13876] loop1: detected capacity change from 0 to 184 [ 646.788947][T13876] isofs_fill_super: get root inode failed 16:58:50 executing program 3: r0 = syz_open_dev$MSR(&(0x7f00000006c0), 0x0, 0x0) r1 = dup(r0) readv(r1, 0x0, 0x0) 16:58:50 executing program 3: r0 = syz_open_dev$MSR(&(0x7f00000006c0), 0x0, 0x0) r1 = dup(r0) readv(r1, &(0x7f0000000700)=[{0x0}], 0x1) 16:58:50 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b800000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018", 0x8c, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) 16:58:50 executing program 3: r0 = syz_open_dev$MSR(&(0x7f00000006c0), 0x0, 0x0) r1 = dup(r0) readv(r1, &(0x7f0000000700)=[{0x0}], 0x1) 16:58:50 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r3, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) [ 646.885423][T13885] loop1: detected capacity change from 0 to 184 [ 646.887684][T13885] isofs_fill_super: get root inode failed 16:58:50 executing program 3: r0 = syz_open_dev$MSR(&(0x7f00000006c0), 0x0, 0x0) r1 = dup(r0) readv(r1, &(0x7f0000000700)=[{0x0}], 0x1) [ 646.900786][T13889] loop2: detected capacity change from 0 to 87 [ 646.901896][T13890] FAT-fs (loop0): bogus number of reserved sectors [ 646.901908][T13890] FAT-fs (loop0): Can't find a valid FAT filesystem [ 646.955612][T13400] I/O error, dev loop1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 646.955637][T13400] Buffer I/O error on dev loop1, logical block 1, async page read 16:58:51 executing program 3: r0 = syz_open_dev$MSR(&(0x7f00000006c0), 0x0, 0x0) r1 = dup(r0) readv(r1, &(0x7f0000000700)=[{0x0}, {0x0}], 0x2) 16:58:51 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b800000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018", 0x8c, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) 16:58:51 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:58:51 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r3, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) [ 647.427025][T13897] loop2: detected capacity change from 0 to 87 [ 647.430172][T13898] loop1: detected capacity change from 0 to 184 [ 647.434621][T13898] isofs_fill_super: get root inode failed 16:58:51 executing program 3: r0 = syz_open_dev$MSR(&(0x7f00000006c0), 0x0, 0x0) r1 = dup(r0) readv(r1, &(0x7f0000000700)=[{0x0}, {0x0}], 0x2) 16:58:51 executing program 3: r0 = syz_open_dev$MSR(&(0x7f00000006c0), 0x0, 0x0) r1 = dup(r0) readv(r1, &(0x7f0000000700)=[{0x0}, {0x0}], 0x2) 16:58:51 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000", 0x96, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) 16:58:51 executing program 3: r0 = syz_open_dev$MSR(&(0x7f00000006c0), 0x0, 0x0) r1 = dup(r0) readv(r1, &(0x7f0000000700)=[{&(0x7f0000000100)=""/12, 0xc}], 0x1) [ 647.526951][T13905] loop1: detected capacity change from 0 to 184 [ 647.545027][T13905] isofs_fill_super: get root inode failed 16:58:51 executing program 3: r0 = syz_open_dev$MSR(&(0x7f00000006c0), 0x0, 0x0) r1 = dup(r0) readv(r1, &(0x7f0000000700)=[{&(0x7f0000000100)=""/12, 0xc}], 0x1) 16:58:51 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000", 0x96, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) [ 647.555170][T13909] FAT-fs (loop0): bogus number of reserved sectors [ 647.555191][T13909] FAT-fs (loop0): Can't find a valid FAT filesystem [ 647.584502][T13913] loop1: detected capacity change from 0 to 184 [ 647.595338][T13913] isofs_fill_super: get root inode failed [ 647.659358][T13400] I/O error, dev loop1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 647.659384][T13400] Buffer I/O error on dev loop1, logical block 1, async page read 16:58:51 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r3, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:58:51 executing program 3: r0 = syz_open_dev$MSR(&(0x7f00000006c0), 0x0, 0x0) r1 = dup(r0) readv(r1, &(0x7f0000000700)=[{&(0x7f0000000100)=""/12, 0xc}], 0x1) 16:58:51 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000", 0x96, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) 16:58:51 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) [ 648.080850][T13918] loop1: detected capacity change from 0 to 184 [ 648.083308][T13920] loop2: detected capacity change from 0 to 87 [ 648.087480][T13918] isofs_fill_super: get root inode failed 16:58:51 executing program 3: mq_open(&(0x7f0000000080)='!\xb8\x99\",\xde\xbc\xf9\xd3\xd6\xd07-?\x15\xfeS|\xf1\x9e\xf4r\xd4)\xe1\x9c\xfba\x94\x16\xff\xcel\xc4\xf5\x00a\x15c\xabX\xcdQ\x06\xc1C\x96\x0et\xbf\xf3\xa8\xd3\x85\xa9\xce\x12', 0x0, 0x0, 0x0) 16:58:51 executing program 3: bpf$PROG_LOAD_XDP(0x4, 0x0, 0x3) 16:58:51 executing program 3: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/custom1\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom0\x00', 0x0, 0x0) 16:58:51 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b800000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000", 0x9b, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) [ 648.172104][T13927] loop1: detected capacity change from 0 to 184 [ 648.175018][T13927] isofs_fill_super: get root inode failed 16:58:52 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r3, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:58:52 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)={0x5, 0x100076}, 0x20) [ 648.221043][T13400] I/O error, dev loop1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 648.221072][T13400] Buffer I/O error on dev loop1, logical block 1, async page read 16:58:52 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b800000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000", 0x9b, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) [ 648.261616][T13935] loop2: detected capacity change from 0 to 87 [ 648.264144][T13937] loop1: detected capacity change from 0 to 184 [ 648.267667][T13937] isofs_fill_super: get root inode failed 16:58:52 executing program 3: bpf$PROG_LOAD_XDP(0x21, 0x0, 0x0) 16:58:52 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b800000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000", 0x9b, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) 16:58:52 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:58:52 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r3, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) [ 648.715712][T13941] loop1: detected capacity change from 0 to 184 16:58:52 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000040)="ce", 0x1}], 0x1}, 0x0) [ 648.720445][T13943] loop2: detected capacity change from 0 to 87 [ 648.733972][T13941] isofs_fill_super: get root inode failed 16:58:52 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x19, 0x0, 0x7000000) 16:58:52 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x19, 0x0, 0x7000000) 16:58:52 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b8000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181300000000000000000000150000000022", 0x9d, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) 16:58:52 executing program 3: bpf$PROG_LOAD_XDP(0xa, 0x0, 0x700) [ 648.836675][T13952] loop1: detected capacity change from 0 to 184 16:58:52 executing program 3: bpf$PROG_LOAD_XDP(0x22, &(0x7f0000000640)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 648.848812][T13952] isofs_fill_super: get root inode failed 16:58:53 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r3, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:58:53 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = getpgid(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r1, r0, 0x0, 0x0, 0x0}, 0x30) 16:58:53 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:58:53 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b8000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181300000000000000000000150000000022", 0x9d, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) [ 649.355999][T13962] loop1: detected capacity change from 0 to 184 16:58:53 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x6, 0x0, 0x7000000) [ 649.356745][T13963] loop2: detected capacity change from 0 to 87 [ 649.368029][T13962] isofs_fill_super: get root inode failed [ 649.377477][ T40] kauditd_printk_skb: 30 callbacks suppressed [ 649.377488][ T40] audit: type=1804 audit(1655225933.170:756): pid=13963 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir1742540418/syzkaller.Qym0Qm/41/file1/bus" dev="loop2" ino=1049013 res=1 errno=0 16:58:53 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000000)=@raw=[@func], &(0x7f0000000040)='GPL\x00', 0x3, 0xe7, &(0x7f0000000080)=""/231, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:58:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8914, &(0x7f0000000240)={'erspan0\x00', 0x0}) 16:58:53 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b8000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181300000000000000000000150000000022", 0x9d, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) [ 649.458307][T13972] loop1: detected capacity change from 0 to 184 [ 649.469506][T13972] isofs_fill_super: get root inode failed 16:58:53 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4400) dup3(0xffffffffffffffff, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r3, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:58:53 executing program 3: r0 = io_uring_setup(0x9f9, &(0x7f0000000000)) mmap$IORING_OFF_SQES(&(0x7f0000002000/0x14000)=nil, 0x14000, 0x0, 0x12, r0, 0x10000000) [ 649.494461][ T40] audit: type=1804 audit(1655225933.290:757): pid=13974 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/858/file1/bus" dev="sda1" ino=1152 res=1 errno=0 [ 649.495303][ T40] audit: type=1804 audit(1655225933.290:758): pid=13974 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/858/file1/bus" dev="sda1" ino=1152 res=1 errno=0 [ 649.496537][T13977] loop2: detected capacity change from 0 to 87 16:58:53 executing program 3: r0 = socket(0x28, 0x1, 0x0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 16:58:53 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b800000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200", 0x9e, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) 16:58:53 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4400) dup3(0xffffffffffffffff, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r3, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:58:53 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) [ 649.966877][T13984] loop2: detected capacity change from 0 to 87 16:58:53 executing program 3: r0 = io_uring_setup(0x67b, &(0x7f0000000080)) io_uring_setup(0x61d0, &(0x7f0000000100)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}) [ 649.983924][T13985] loop1: detected capacity change from 0 to 184 [ 649.987684][T13985] isofs_fill_super: get root inode failed 16:58:53 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x17, 0x0, 0x0) 16:58:53 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b800000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200", 0x9e, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) 16:58:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x10, r1, 0x1}, 0x14}}, 0x0) 16:58:53 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1a}, 0x48) [ 650.073475][T13993] loop1: detected capacity change from 0 to 184 [ 650.077221][T13993] isofs_fill_super: get root inode failed 16:58:53 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b800000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200", 0x9e, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) 16:58:53 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4400) dup3(0xffffffffffffffff, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r3, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) [ 650.112712][T13997] loop1: detected capacity change from 0 to 184 [ 650.115771][T13999] loop0: detected capacity change from 0 to 87 [ 650.115948][T13997] isofs_fill_super: get root inode failed [ 650.117558][T13999] FAT-fs (loop0): bogus number of reserved sectors [ 650.117570][T13999] FAT-fs (loop0): Can't find a valid FAT filesystem [ 650.130243][T14001] loop2: detected capacity change from 0 to 87 [ 650.159878][T13422] I/O error, dev loop0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 650.159921][T13422] Buffer I/O error on dev loop0, logical block 1, async page read [ 650.159971][T13422] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 650.159987][T13422] Buffer I/O error on dev loop0, logical block 2, async page read [ 650.160020][T13422] I/O error, dev loop0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 650.160035][T13422] Buffer I/O error on dev loop0, logical block 3, async page read [ 650.160061][T13422] I/O error, dev loop0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 650.160076][T13422] Buffer I/O error on dev loop0, logical block 4, async page read [ 650.160107][T13422] I/O error, dev loop0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 650.160122][T13422] Buffer I/O error on dev loop0, logical block 5, async page read [ 650.160149][T13422] I/O error, dev loop0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 650.160163][T13422] Buffer I/O error on dev loop0, logical block 6, async page read [ 650.160189][T13422] I/O error, dev loop0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 650.160204][T13422] Buffer I/O error on dev loop0, logical block 7, async page read [ 650.162088][ T40] audit: type=1804 audit(1655225933.960:759): pid=13999 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/859/file1/bus" dev="sda1" ino=1162 res=1 errno=0 [ 650.162697][ T40] audit: type=1804 audit(1655225933.960:760): pid=13999 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/859/file1/bus" dev="sda1" ino=1162 res=1 errno=0 [ 650.163021][T13420] I/O error, dev loop1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 16:58:54 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="850000006a0000001819c8559d573690c6"], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0xd5, &(0x7f0000000340)=""/213, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:58:54 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) 16:58:54 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:58:54 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r0, 0x4, 0x4400) dup3(r0, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r3, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x200a00, 0x600}]) [ 650.594524][T14005] loop1: detected capacity change from 0 to 184 [ 650.596877][T14005] ISOFS: Unable to identify CD-ROM format. [ 650.601324][T14008] loop2: detected capacity change from 0 to 87 16:58:54 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="850000006a0000001819c8559d573690c6"], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0xd5, &(0x7f0000000340)=""/213, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:58:54 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000b40)={&(0x7f00000007c0)={0xa, 0x4e22, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000000940)=[@hoplimit_2292={{0x14}}, @hoplimit_2292={{0x14}}], 0x30}, 0x0) 16:58:54 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) 16:58:54 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}, 0x80) [ 650.672146][T14014] loop1: detected capacity change from 0 to 184 [ 650.684226][T14014] ISOFS: Unable to identify CD-ROM format. [ 650.690594][T14016] loop0: detected capacity change from 0 to 87 [ 650.695939][T14016] FAT-fs (loop0): bogus number of reserved sectors [ 650.695952][T14016] FAT-fs (loop0): Can't find a valid FAT filesystem 16:58:54 executing program 3: io_uring_setup(0x7659, &(0x7f0000000100)={0x0, 0x3afb, 0x8}) 16:58:54 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r0, 0x4, 0x4400) dup3(r0, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r3, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x200a00, 0x600}]) [ 650.740650][ T40] audit: type=1804 audit(1655225934.540:761): pid=14016 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/860/file1/bus" dev="sda1" ino=1153 res=1 errno=0 [ 650.741263][ T40] audit: type=1804 audit(1655225934.540:762): pid=14016 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/860/file1/bus" dev="sda1" ino=1153 res=1 errno=0 [ 650.755476][T14022] loop2: detected capacity change from 0 to 87 16:58:55 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = dup(r0) r2 = openat$cgroup_devices(r1, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$binfmt_elf64(r2, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 16:58:55 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}, {@check_strict}]}) 16:58:55 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r0, 0x4, 0x4400) dup3(r0, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r3, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x200a00, 0x600}]) 16:58:55 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) [ 651.274518][T14028] loop1: detected capacity change from 0 to 184 [ 651.276779][T14028] ISOFS: Unable to identify CD-ROM format. [ 651.278973][T14029] loop2: detected capacity change from 0 to 87 16:58:55 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = dup(r0) r2 = openat$cgroup_devices(r1, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$binfmt_elf64(r2, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 16:58:55 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = dup(r0) r2 = openat$cgroup_devices(r1, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$binfmt_elf64(r2, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 16:58:55 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = dup(r0) r2 = openat$cgroup_devices(r1, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$binfmt_elf64(r2, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 16:58:55 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, 0x0) [ 651.377735][T14035] loop1: detected capacity change from 0 to 184 16:58:55 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, 0x0) 16:58:55 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) dup(r0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) [ 651.395940][T14039] loop0: detected capacity change from 0 to 87 [ 651.398135][T14039] FAT-fs (loop0): bogus number of reserved sectors [ 651.398147][T14039] FAT-fs (loop0): Can't find a valid FAT filesystem 16:58:55 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) [ 651.434036][T13400] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 651.434310][T14043] loop2: detected capacity change from 0 to 87 [ 651.450305][T13420] I/O error, dev loop0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 651.452913][ T40] audit: type=1804 audit(1655225935.250:763): pid=14039 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/861/file1/bus" dev="sda1" ino=1161 res=1 errno=0 [ 651.453557][ T40] audit: type=1804 audit(1655225935.250:764): pid=14039 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/861/file1/bus" dev="sda1" ino=1161 res=1 errno=0 [ 651.456485][ T40] audit: type=1804 audit(1655225935.250:765): pid=14043 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir1742540418/syzkaller.Qym0Qm/48/bus" dev="sda1" ino=1162 res=1 errno=0 [ 651.456695][T14045] loop1: detected capacity change from 0 to 184 16:58:55 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{0x0}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:58:55 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) dup(r0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 16:58:55 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, 0x0) 16:58:55 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}, {@utf8}]}) 16:58:55 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) dup(r0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) [ 651.908831][T14050] loop1: detected capacity change from 0 to 184 16:58:55 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$binfmt_elf64(r0, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 16:58:55 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) [ 651.957959][T14055] loop1: detected capacity change from 0 to 184 16:58:55 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)={[{@overriderock}]}) [ 652.000953][T14059] loop1: detected capacity change from 0 to 184 [ 652.007178][T14061] loop0: detected capacity change from 0 to 87 [ 652.020101][T14061] FAT-fs (loop0): bogus number of reserved sectors [ 652.020121][T14061] FAT-fs (loop0): Can't find a valid FAT filesystem [ 652.064842][T14063] loop2: detected capacity change from 0 to 87 [ 652.071326][T13400] buffer_io_error: 8 callbacks suppressed [ 652.071338][T13400] Buffer I/O error on dev loop0, logical block 1, async page read [ 652.071381][T13400] Buffer I/O error on dev loop0, logical block 2, async page read [ 652.071411][T13400] Buffer I/O error on dev loop0, logical block 3, async page read [ 652.071439][T13400] Buffer I/O error on dev loop0, logical block 4, async page read [ 652.071467][T13400] Buffer I/O error on dev loop0, logical block 5, async page read [ 652.071494][T13400] Buffer I/O error on dev loop0, logical block 6, async page read [ 652.071522][T13400] Buffer I/O error on dev loop0, logical block 7, async page read 16:58:56 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{0x0}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:58:56 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$binfmt_elf64(r0, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 16:58:56 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)) [ 652.546054][T14068] loop1: detected capacity change from 0 to 184 16:58:56 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$binfmt_elf64(r0, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 16:58:56 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)) 16:58:56 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = dup(0xffffffffffffffff) r1 = openat$cgroup_devices(r0, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$binfmt_elf64(r1, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) [ 652.624657][T14075] loop1: detected capacity change from 0 to 184 [ 652.653579][T14077] loop0: detected capacity change from 0 to 87 16:58:56 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) [ 652.655668][T14077] FAT-fs (loop0): bogus number of reserved sectors [ 652.655681][T14077] FAT-fs (loop0): Can't find a valid FAT filesystem 16:58:56 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = dup(0xffffffffffffffff) r1 = openat$cgroup_devices(r0, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$binfmt_elf64(r1, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) [ 652.701579][T13420] Buffer I/O error on dev loop0, logical block 1, async page read [ 652.701634][T13420] Buffer I/O error on dev loop0, logical block 2, async page read [ 652.701664][T13420] Buffer I/O error on dev loop0, logical block 3, async page read [ 652.756411][T14082] loop2: detected capacity change from 0 to 87 16:58:57 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a570802", 0x1a, 0xb800}], 0x0, &(0x7f0000000200)) 16:58:57 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = dup(0xffffffffffffffff) r1 = openat$cgroup_devices(r0, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$binfmt_elf64(r1, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 16:58:57 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{0x0}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) [ 653.215694][T14086] loop1: detected capacity change from 0 to 184 16:58:57 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = dup(r0) r2 = openat$cgroup_devices(r1, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$binfmt_elf64(r2, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 16:58:57 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = dup(r0) r2 = openat$cgroup_devices(r1, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$binfmt_elf64(r2, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 16:58:57 executing program 2: chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:58:57 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = dup(r0) r2 = openat$cgroup_devices(r1, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$binfmt_elf64(r2, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 16:58:57 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = dup(r0) r2 = openat$cgroup_devices(r1, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$binfmt_elf64(r2, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 16:58:57 executing program 1: bpf$PROG_LOAD_XDP(0x16, &(0x7f0000000640)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 653.331775][T14097] loop0: detected capacity change from 0 to 87 [ 653.336128][T14097] FAT-fs (loop0): bogus number of reserved sectors 16:58:57 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = dup(r0) r2 = openat$cgroup_devices(r1, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$binfmt_elf64(r2, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) [ 653.336262][T14097] FAT-fs (loop0): Can't find a valid FAT filesystem 16:58:57 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:58:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8955, 0x0) 16:58:57 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = dup(r0) r2 = openat$cgroup_devices(r1, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$binfmt_elf64(r2, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 16:58:57 executing program 2: chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:58:57 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x17, 0x0, 0x7000000) 16:58:57 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = dup(r0) r2 = openat$cgroup_devices(r1, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$binfmt_elf64(r2, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 16:58:57 executing program 1: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0}) pselect6(0x40, &(0x7f0000000180)={0x8}, &(0x7f0000000400)={0x1}, &(0x7f0000000200)={0x8}, &(0x7f00000002c0)={r0}, 0x0) 16:58:57 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = dup(r0) r2 = openat$cgroup_devices(r1, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$binfmt_elf64(r2, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) [ 653.958358][T14120] loop0: detected capacity change from 0 to 87 [ 653.960632][T14120] FAT-fs (loop0): bogus number of reserved sectors [ 653.960645][T14120] FAT-fs (loop0): Can't find a valid FAT filesystem 16:58:58 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x1a, 0x0, 0x7000000) 16:58:58 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = dup(r0) r2 = openat$cgroup_devices(r1, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$binfmt_elf64(r2, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 16:58:58 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:58:58 executing program 2: chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:58:58 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = dup(r0) r2 = openat$cgroup_devices(r1, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$binfmt_elf64(r2, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 16:58:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x5c5fe33e6dac8f6d, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) [ 654.585118][ T40] kauditd_printk_skb: 17 callbacks suppressed 16:58:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) sendmsg$SMC_PNETID_DEL(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x20}}, 0x0) [ 654.585132][ T40] audit: type=1804 audit(1655225938.380:783): pid=14129 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir1742540418/syzkaller.Qym0Qm/53/bus" dev="sda1" ino=1159 res=1 errno=0 16:58:58 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r0 = dup(0xffffffffffffffff) r1 = openat$cgroup_devices(r0, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$binfmt_elf64(r1, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 16:58:58 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x74) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x40}, r1}, 0x14) [ 654.585856][ T40] audit: type=1804 audit(1655225938.380:784): pid=14129 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir1742540418/syzkaller.Qym0Qm/53/bus" dev="sda1" ino=1159 res=1 errno=0 16:58:58 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r0 = dup(0xffffffffffffffff) r1 = openat$cgroup_devices(r0, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$binfmt_elf64(r1, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) [ 654.715705][T14144] loop0: detected capacity change from 0 to 87 [ 654.723265][T14144] FAT-fs (loop0): bogus number of reserved sectors [ 654.723279][T14144] FAT-fs (loop0): Can't find a valid FAT filesystem [ 654.777512][ T40] audit: type=1804 audit(1655225938.570:785): pid=14144 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/866/file1/bus" dev="sda1" ino=1152 res=1 errno=0 [ 654.778108][ T40] audit: type=1804 audit(1655225938.580:786): pid=14144 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/866/file1/bus" dev="sda1" ino=1152 res=1 errno=0 16:58:59 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1c, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 16:58:59 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r0 = dup(0xffffffffffffffff) r1 = openat$cgroup_devices(r0, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$binfmt_elf64(r1, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 16:58:59 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:58:59 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:58:59 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x8, 0x1, &(0x7f0000000000)=@raw=[@kfunc], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:58:59 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) dup(r0) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$binfmt_elf64(r1, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) [ 655.320559][T14151] loop2: detected capacity change from 0 to 87 16:58:59 executing program 1: bpf$PROG_LOAD_XDP(0x4, &(0x7f0000000640)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:58:59 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) dup(r0) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$binfmt_elf64(r1, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) [ 655.338006][ T40] audit: type=1804 audit(1655225939.130:787): pid=14151 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir1742540418/syzkaller.Qym0Qm/54/file1/bus" dev="sda1" ino=1165 res=1 errno=0 [ 655.338587][ T40] audit: type=1804 audit(1655225939.140:788): pid=14151 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir1742540418/syzkaller.Qym0Qm/54/file1/bus" dev="sda1" ino=1165 res=1 errno=0 16:58:59 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) dup(r0) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$binfmt_elf64(r1, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 16:58:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8917, 0x0) [ 655.439961][T14166] loop0: detected capacity change from 0 to 87 [ 655.441817][T14166] FAT-fs (loop0): bogus number of reserved sectors [ 655.441831][T14166] FAT-fs (loop0): Can't find a valid FAT filesystem [ 655.488840][T13400] blk_print_req_error: 28 callbacks suppressed [ 655.488854][T13400] I/O error, dev loop0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 655.488916][T13400] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 655.488952][T13400] I/O error, dev loop0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 655.488986][T13400] I/O error, dev loop0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 655.489020][T13400] I/O error, dev loop0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 655.489062][T13400] I/O error, dev loop0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 655.489096][T13400] I/O error, dev loop0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 655.491159][ T40] audit: type=1804 audit(1655225939.290:789): pid=14166 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/867/file1/bus" dev="sda1" ino=1154 res=1 errno=0 [ 655.492528][ T40] audit: type=1804 audit(1655225939.290:790): pid=14166 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/867/file1/bus" dev="sda1" ino=1154 res=1 errno=0 16:58:59 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) 16:58:59 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = dup(r0) r2 = openat$cgroup_devices(r1, 0x0, 0x2, 0x0) write$binfmt_elf64(r2, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 16:58:59 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:58:59 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400", 0xc}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:58:59 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = dup(r0) r2 = openat$cgroup_devices(r1, 0x0, 0x2, 0x0) write$binfmt_elf64(r2, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 16:58:59 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x7, 0x3, &(0x7f0000001100)=@framed, &(0x7f0000001140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 16:58:59 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = dup(r0) r2 = openat$cgroup_devices(r1, 0x0, 0x2, 0x0) write$binfmt_elf64(r2, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 16:58:59 executing program 1: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r2, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 16:58:59 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = dup(r0) openat$cgroup_devices(r1, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) [ 656.035110][T14181] loop1: detected capacity change from 0 to 87 16:58:59 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = dup(r0) openat$cgroup_devices(r1, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) [ 656.042977][T14185] loop2: detected capacity change from 0 to 87 [ 656.045343][ T40] audit: type=1804 audit(1655225939.840:791): pid=14185 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir1742540418/syzkaller.Qym0Qm/55/file1/bus" dev="sda1" ino=1166 res=1 errno=0 [ 656.046106][ T40] audit: type=1804 audit(1655225939.840:792): pid=14185 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir1742540418/syzkaller.Qym0Qm/55/file1/bus" dev="sda1" ino=1166 res=1 errno=0 [ 656.120028][T14189] loop0: detected capacity change from 0 to 87 [ 656.122750][T14189] FAT-fs (loop0): bogus number of reserved sectors [ 656.122768][T14189] FAT-fs (loop0): Can't find a valid FAT filesystem 16:59:00 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:59:00 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = dup(r0) openat$cgroup_devices(r1, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 16:59:00 executing program 1: bpf$PROG_LOAD_XDP(0x9, &(0x7f0000000640)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:59:00 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400", 0xc}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:59:00 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = dup(r0) r2 = openat$cgroup_devices(r1, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$binfmt_elf64(r2, 0x0, 0x0) 16:59:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000440)={0xfffffffffffffffe, 0x9effffff, &(0x7f0000000400)={&(0x7f0000000140)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) 16:59:00 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = dup(r0) r2 = openat$cgroup_devices(r1, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$binfmt_elf64(r2, 0x0, 0x0) 16:59:00 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x74) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@private2, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, 0x0, 0x0, 0xfffa}) [ 656.725358][T14205] loop0: detected capacity change from 0 to 87 [ 656.737294][T14205] FAT-fs (loop0): bogus number of reserved sectors [ 656.737315][T14205] FAT-fs (loop0): Can't find a valid FAT filesystem [ 656.790399][T13400] I/O error, dev loop0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 656.790484][T13400] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 656.790614][T13400] I/O error, dev loop0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 656.803093][T14207] loop2: detected capacity change from 0 to 87 16:59:01 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), 0x0, 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:59:01 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = dup(r0) r2 = openat$cgroup_devices(r1, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$binfmt_elf64(r2, 0x0, 0x0) 16:59:01 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x0, 0x0, 0x0, 0x0, 0x44, 0xffffffffffffffff, 0x48000}, 0x48) 16:59:01 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400", 0xc}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:59:01 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x7, 0xa7, &(0x7f00000000c0)=""/167, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180), 0x8, 0x10, 0x0}, 0x80) [ 657.421196][T14215] loop0: detected capacity change from 0 to 87 [ 657.423868][T14215] FAT-fs (loop0): bogus number of reserved sectors [ 657.423972][T14215] FAT-fs (loop0): Can't find a valid FAT filesystem 16:59:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@ipv4_newnexthop={0x18, 0x68, 0x1}, 0x18}}, 0x0) 16:59:01 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x100010, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 16:59:01 executing program 1: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)={0x95, 0x72}, 0x20) [ 657.559188][T14226] loop2: detected capacity change from 0 to 87 16:59:01 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), 0x0, 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:59:01 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x4a, 0x0, 0x0) 16:59:01 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200", 0x12}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:59:01 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0xe71c16fb3b5449ef}, 0x14}}, 0x0) [ 658.086714][T14232] loop0: detected capacity change from 0 to 87 16:59:01 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x2, &(0x7f0000000000)=@raw=[@map_idx_val], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:59:01 executing program 3: bpf$MAP_CREATE(0x5, &(0x7f0000000200), 0x48) [ 658.099203][T14232] FAT-fs (loop0): invalid media value (0x00) [ 658.099227][T14232] FAT-fs (loop0): Can't find a valid FAT filesystem 16:59:01 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80403, 0x0) 16:59:01 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000100)="e6", 0x1}], 0x1}, 0x0) [ 658.222257][T14244] loop2: detected capacity change from 0 to 87 16:59:02 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x4e, 0x0, 0x7000000) 16:59:02 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), 0x0, 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:59:02 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200", 0x12}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:59:02 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x9, 0x3, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:59:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@getroute={0x14, 0x1a, 0x1}, 0x14}}, 0x0) 16:59:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@ipv4_newnexthop={0x10, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) 16:59:02 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x19, 0x3, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:59:02 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=@framed={{}, [@func, @generic, @map_val, @btf_id, @map_fd, @kfunc, @func]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xb8) 16:59:02 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000280)={&(0x7f00000003c0), 0xfffffe7f, &(0x7f0000000240)={&(0x7f00000000c0)={0x16c, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0xb0, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xa0, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}, {0x4}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}]}]}, 0x16c}}, 0x0) [ 658.797583][T14261] loop2: detected capacity change from 0 to 87 [ 658.812458][T14263] loop0: detected capacity change from 0 to 87 [ 658.814828][T14263] FAT-fs (loop0): invalid media value (0x00) [ 658.814842][T14263] FAT-fs (loop0): Can't find a valid FAT filesystem [ 658.849616][ T3136] buffer_io_error: 25 callbacks suppressed [ 658.849630][ T3136] Buffer I/O error on dev loop2, logical block 0, async page read [ 658.849712][ T3136] ldm_validate_partition_table(): Disk read failed. [ 658.849739][ T3136] Dev loop2: unable to read RDB block 0 [ 658.849755][ T3136] loop2: unable to read partition table [ 658.849875][ T3136] loop2: partition table beyond EOD, truncated 16:59:03 executing program 3: bpf$PROG_LOAD(0x9, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:59:03 executing program 1: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0}) pselect6(0x40, &(0x7f0000000180)={0x8}, 0x0, &(0x7f0000000200)={0x8}, &(0x7f00000002c0)={r0}, 0x0) 16:59:03 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:59:03 executing program 3: r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f0000000080)=[0x0, 0xc0e]) 16:59:03 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200", 0x12}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:59:03 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0xd, 0x3, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:59:03 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) futimesat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) 16:59:03 executing program 1: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0}) pselect6(0x40, &(0x7f0000000180)={0x8}, 0x0, &(0x7f0000000200)={0x8}, &(0x7f00000002c0)={r0}, 0x0) 16:59:03 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x8, 0x1, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x3, 0x0, 0xc}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:59:03 executing program 3: syz_io_uring_setup(0x313d, &(0x7f00000001c0)={0x0, 0x5b2f, 0x39}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000240)) [ 659.451954][T14281] FAT-fs (loop2): bogus number of reserved sectors [ 659.451969][T14281] FAT-fs (loop2): Can't find a valid FAT filesystem [ 659.514758][T14285] loop0: detected capacity change from 0 to 87 [ 659.516908][T14285] FAT-fs (loop0): invalid media value (0x00) [ 659.516922][T14285] FAT-fs (loop0): Can't find a valid FAT filesystem [ 659.559364][T13420] Buffer I/O error on dev loop0, logical block 1, async page read [ 659.559438][T13420] Buffer I/O error on dev loop0, logical block 2, async page read [ 659.559493][T13420] Buffer I/O error on dev loop0, logical block 3, async page read [ 659.559539][T13420] Buffer I/O error on dev loop0, logical block 4, async page read [ 659.559685][T13420] Buffer I/O error on dev loop0, logical block 5, async page read [ 659.559738][T13420] Buffer I/O error on dev loop0, logical block 6, async page read [ 659.559784][T13420] Buffer I/O error on dev loop0, logical block 7, async page read 16:59:03 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) sendmsg$inet6(r0, &(0x7f0000000900)={&(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}, 0x0) 16:59:03 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:59:03 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400", 0x15}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:59:03 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x74) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2}}) 16:59:03 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) sendmsg$inet6(r0, &(0x7f0000000900)={&(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}, 0x0) 16:59:03 executing program 3: bpf$PROG_LOAD(0x1d, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:59:03 executing program 1: getrusage(0x1, &(0x7f0000000340)) 16:59:03 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x1600bd74, 0x0, 0x0) 16:59:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="3d5e4e9d4e7e5fffc5ec2f4817d823a337b6a5f5fe2d6d02b6a26e129c3cdf79bb5f3aa327f14d514ff057683c1c5fcda82583078e72927617af7070", 0x3c}, {&(0x7f0000000040)="47167e4e93775e57dae83d6ea618d77a627fa349e29a63c21bd9a7f5aa555107b269ad0be5c350271b505b", 0x2b}, {&(0x7f0000000600)="cfda75bca00e748d382eeb1058bb80911320d925b9b3a63496d1cb271e14bb39a17788b34c768fff3907f0006a9e6cd733ccf385012c102905f981c2833c5a6acdc262e40862b1c8cd2279caafc413208f551907363701d8d515b8372b818f64627575aa476aeb18dbbd9350b7b550849b20178b116cb1169b50f336fc30df712db7aa6b25a8527d61d48ad9577d7952788e33e7111fba8c3bb809f167e5d778a55894dc12b02ecdda6f85ba1b5e3ac23df74de5feacd241647e4181c42cc616e8a10f961edbbb4c3afdb4c46cb02f01cae0fe36359400868f42686b544b35b0bfc10895eda45debbdec17565ba6df170d19316a654b9ff4f3e33980f74ccb281dd14e663c9eff99d6288a336e24664589ddbeca7000b620ea40d531f7b5f6cf8cb172a5a6ee2a48ae99c1c31ac0d0678a7feb35e3167e8c3b29341f3060e04ab1d444a997d2b5e5d25635662e4955b53c635086cc83eba32c9f492c8cea9e810fb90b1fc2f7a76bc870e1206e0294038cc14a7f612db7f2dfdf637264ff726b87715c2a45a56ffd1842c21cee5175584103f10fb7b0770ea2e806a3b6932195df1231da1227bcf1594fb7075faae8d15ac57e31d833feb326e81fac9e1882296f4da993aacb3d667bed10d8317b1646f84c36619babc12a71f5495b981949ea80948d93d1ad8ffe88ab491897d3de4728fbff66e48af3db4bbdb10486a3beb73ab151e80f5b49cd62f699dcee09e80808978daea1e0c6f1e727787a8bd76182a45785e34d788e28b3605785a26736e1fad4c8f1f33a66899f8882fe32c0d8a8e1ecfe8e7fc5b1e14e5702db15dbb63152643df1b47c96060deea6909909b0248fb11ff194411023d117b0a1e70c7bb2a1e8dfc5d3692c3e3d9397ff34293c367b147497f5f12df0fad0e0cd11d1d6a5377bf75e5756cf74f79a04465948bc421ba4e7fa71687845301cb2b668cab4b0eaf91a6712140092061186e288ef0f4b46cf6fc69cc44bd971ba39d762ef9c1e4987d9baff5be2d8b76f240d0910ec43fea2b85b09ed2922fffbcfa0d9126bc278b47c9eb28b3acbb7919db1fd6e4c83a0bcd811171258ce4bd077cd62c065fbaf88964f95e29dae4ca3775e08b420d1aa172dab8a5d2c00ef9cebe42bbbd82b62a38dba774dff1e6a1ccbabd0d718f5a2036ab59650252375b7dfdda511d7e6c2135764da1fb9a4c488d7fa28e103d402a0cb7a90b4166c2f972115b4004e39014d7b90f24a61fb63a749a757dedc0763148d85b4fdb1dbd8fe57b1bf0590c6b5664a58ae737d69192ef0102df11b88797c248e300d3ca2cb2c01328faefef8a56c2ab47d5c0ba5e579493ea0074bc36af619dd5fba80c902e732f4e41df39b0c914ed1f353b62bb9d42d9ed7d45a248fa6b21e606f59fb1a7a8c125f7e692e46f0b26f0c81fccb0a059f8534faa84ad4aa8e8fc66f7c931b6e98fd5be640a6491eedb04415c57fb76a7d16e5e5ead549581b411bd249199c5c7ca8d91efb191ee078c8574b879df638f784fe74a559c0ef365e68074c87cab434637faf1f40f0a2694e40892c70e027bc658163c9129713fb67bf23ec1c9a5e64c60410e90b6b8f4f6c5a56a5fd93a712adec1682f3908731c9098072155bbb2dec0f8dbfd7dc2c0681bf1a8751635afd897298ae72b3b3f5c91d5f55ccc01c0a05ece4226eecb76dd80bc613499071bd9b3c3fd28eaac55ebff58e7fddbd951b304b1bb9edac49bbec468bf8be5d9ae7661e21536fb0812844c32144b0fc99a13e6fad7a929f860409752fe350951fc0e55b1bc084d22eea23d784c72ce8bdbc0750e8ab9343ee11a1a3c70182a5a25021ed6b318675b9e4897490ef373af042df058203335c22131b9dfdab0188c06985b9c661f9bcd63b82b6806d8699c5d9d09769361e0d3c8ee8eaa3d30319676532d2cc33c0fcc9b480609858774158f41f26e65f789a2e63914a5dd238c012bc6c7b25e29323993bd9c9865694997f8c3d68c541e4961d41a917089fdd312767fec4278262da46e19cd1e53dfc084338a29b4a7e70860a17cfe8d7031954981732e7efb8250fb831fd8d223242e0b187729b8a78d4dc265650095789e385063d730e28231d023acf6fe9f766d0bdb54ca76cafe709d5fad9d6b8408a5ddfecaacf2f8b36f30ec3153416b1d1ae7c97514f935a1466f0fde26780e32aaca631fc5d0e9bac15895ccb715b2490046ad797353ee0063e17c48bd8dd2bbca80b678f19b45fa693da0e41738af6f8c57b15d3c80422f4a8e96e464703b24c788c384b0dcb3fb40ac89ccb55586636ef71b264c01812727ddeea79f89626170fe1be6ed90410bba8d0b66f7f6394766e943cbb968a763e00739b61932551234ccc91048ab20d1f01d4cd7caab0638f6991668ae7aee468730444952225fd561e23c4a8b906645d16848172d7f3d5f39e77b85f1b43d0fb24b45e248c54331fc6eaf35e74881d7e095b0df05fd17c6ce59eb3f24c00ce00004908bb8f897048ca2bba3fbf401a219abdcbc4f7350d0c4b7ae9f296b352f923ab7c9c20fb2afa622039328d8f66e8bf2b4fbcd8f600c1e742c2624879c889585f444811fc54e2ee9f523eb556924fb6c040094ef921dcb842aca5fec72ef1451ade18b6a26e478ee43bfa2fe4c4a7c6d6d4921ecccadf353649409bf676d3f8f9da3e6f1d5ae9db91c2d3512c4a98e836c373ee89855d5100249e735b084318cbe3d10d7c0e95ff2efec2755cec6ffad7af1d181393d8bd11a6629bf4e82b2d3e63b6674d8467a9d0f6985cb3e1a4643cb8c5f5ba7e74987618e3cea065dcf744e812bc34c60db4b13424da4025641ebdf038ee12aac7b9467630c739c90215279db60767705a9e0c06b1b6748330db462ba48d75c76d510e645dda09be8ba7a5d49badce392760e4911cd9866c7708dbdd7a29422e6ddb13a7accd18083bc4e6829fc6307fe347ed7f3571709ce58b922fb3320963259fa3ecf9aa653e9b25b19916c18e837fbba4ec7cd589fd22ff082f132e67741cc425368b8e89f92b98c3b93c1202f677856733a64f36a28c5c55c54b9a94ad5e54b229f812323289b0adc29b511a462d68b98f3d53d2029b1e270d575b0375d4101402c6c797509459691df721ca600c65f55cb32ddba8f3f4ca09b90ecd8473d95b35b7b16e265f834fb6b15b1cd28d5656e4f2e8de5c0eadadb4677650ab34a2f06dcbaf507f25d8ba1f835e3f36f6944b4a01e3d559cbd7e2a348676bf7daec0496ed5f9adcf7351fdb4dca8acce59116b61d643e66d4102917ac8f82c2d89f1843ad5faa81912c660069ce5c62f557ce721b34eb961197d2d6e170439c6582fae0cb353f709c2f934dbe3da3522e515ae2ab39c586d959f076914ccf9bcff9a596832f278221ce7ca44f0f5962d63dfe57c31bf571b857e780923213c3deb948c97b1f17bffaeba09ed648ef779bfea6f1df4fa481e949f0b6109572f6fe6f155e8d0582c447b6fd3fc4faca4b03b94c0f31ab8c3f176b2dfb3cc3ecaa9543ae35f7a9a4aea0edce0879d668b75f059b2e86e3fc070f9646c2a53be07a248e7af5584df02274da917fc1e385e6aa63a0b3e2279bc079fd88d83897f118f3083aade6f5cb0186093a990b95ecd2a0aae29df2a1413f4134eee4d10848ff645ca9f985beca1b5e19f83cd3e055907689d33d1ded850f9f4f1d9fee7b78241c3bceff3a55fdedab383589dd48e19d3b7189ab9740b9704be35a37da340411a43cb5b7bcb4f8512e7e2d8b235f86f6fbb38bc270099c9f8afcabf6ce923dc63deae5aa25dc2330369ed98646c2b2f60bcc387d3becbcfd4b8c1a54d0e0ac14163eea9f9b448d40a79be306779f19f1b2a35c91331703a5c350e5116e2b6ee70f29efd89dbba4b7d7db25690e3eba6330fc7655842e4b300af5b21aa20d84c70b122f9441b91685b7bc58e214c0810ee3dd1db8482b508c419ce7e8dbc55959f6be66677a7a783019e31a7ff903f7fe7de965eedac29dbff55013f4a7d81a60abfbe09a4e60c7a0c290eba040eddad556ba419be1641ad8c90ccd5fb2248b8a3267f69fec6e6cabe75a6ea0fd2eb26fb86786d0e20faec8c48edc7df04840bb893f07760b321cb0a66bbfa8016500eaa2baf3d31bfb1bcd615896da1aa6225e9514f638221a8a2dccf1fd14c42af4331d0c5d01de107235c70974baf7895e177905ac04b37a5d592cdedad9917433db66712195d961cb679997117453463ae8eb583adfc15b9a24733ff53520c78e45240d81b3f3922d5c0ebe5bb79b2102991d78c6f2759cee461cab93896392841fc6b2030ee3e63a00cfa773697886b6807ef83babbecaef98423edbabe2a5105d1243ce971206b9909c47df5743e6ad8c412c1e5c987e703eacc4588cca10907a65472a677e4a68d637095390dc2068fe64d0af99e9d2878fb35a8b8e43370a36eed31bd8c7882ee6a87032a638ef46a678f3146dc5ae1035d1ff27e713dd1be1666cdcf9174c715ee5955091b0496564464cb47991e51779e6599469bb703699e769521326a7292a7cea91eb903d4e106fec0c9756dcfe1e6efd925203d9279a8802b044456ceba93d8716b50e9685d7181b28dd4ad1b2f9e5c72335d4d93d369c761aaae85efb25211f36c3c75e8dcb3009b8a68f16c363fbe845a2794e180d6555f501de319939d3370064690fa79b5eb0519f527127e19bb3aeeb0891776924da8a6fc3c170b3e8284f49d7518c2086021c6b52b6be906bc1b0ed96fd49dd89b781a38be3af7b335edffb9a4ed79c8c94dc6b2094d01f938feb67505e2f4bdc8289f8c4395ec82b9a4267539d9101f5543a95533fb948cac3ef2baa2fedc48fdde2ef2f636e0685e4f4cfc02d3dc7dc46062b5adfed34eed035907f8b1fbb1f87e795ddacbee086b4b9478e47fa6900de083f8193531184eb8a8f1a43ad0778f6bcefa705a4c3ad4b7a839b4495b0d99079bb76611d9214fc2f181b0e8128920bef44d9669e14517ba23edbf737d34a92ae3cc5738cc8161e34faeebc91abd88e0a96b7014c8b6c70a33d2cd8659213115aa97c3c8bc518ae1192d89deb0d0d80462b011dd8c179ad280232437a62c15eba4ccb5de6e3f3de5d70106596b02e07b50ffe7f13cd4fc7784c0f999666554faaf73f7a2acb27c7e7428d1f6e9e4e90a3bf525b949fc706f863ed07dead43172e48c3b3d2a1070746240c64faa344c3eb4d9c0cd0558fa91a321157bc2ef0ad3a7a6ea0a21acade71bedf51a7a30f07ae8575c2b6243d426111b1e789848ccf21d168643b713a1142fd7f987de83c1bb7cfc7b07afb81b692c27e61e925fb8d63829eb83a76c3d4338e60b725fb1db68a9008e8c00227658ee0628072c8744684802af0e0856ee6e55dae12901f3c9ca6d5e4ee9d09b2a8", 0xf00}], 0x3, &(0x7f0000000480)=[@ip_pktinfo={{0xf, 0x0, 0x8, {0x0, @private, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @loopback}}}], 0x40}, 0x0) [ 660.123173][T14299] FAT-fs (loop2): bogus number of reserved sectors [ 660.123188][T14299] FAT-fs (loop2): Can't find a valid FAT filesystem [ 660.174222][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 660.174233][ T40] audit: type=1804 audit(1655225943.970:816): pid=14299 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir1742540418/syzkaller.Qym0Qm/61/file1/bus" dev="sda1" ino=1147 res=1 errno=0 [ 660.174684][ T40] audit: type=1804 audit(1655225943.970:817): pid=14299 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir1742540418/syzkaller.Qym0Qm/61/file1/bus" dev="sda1" ino=1147 res=1 errno=0 [ 660.207712][T14305] loop0: detected capacity change from 0 to 87 [ 660.208814][T14305] loop0: [POWERTEC] p1 [ 660.209068][T14305] loop0: p1 start 7627110 is beyond EOD, truncated [ 660.220019][T14305] FAT-fs (loop0): invalid media value (0x00) [ 660.220033][T14305] FAT-fs (loop0): Can't find a valid FAT filesystem [ 660.283731][ T40] audit: type=1804 audit(1655225944.080:818): pid=14305 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/874/file1/bus" dev="sda1" ino=1153 res=1 errno=0 [ 660.284192][ T40] audit: type=1804 audit(1655225944.080:819): pid=14305 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/874/file1/bus" dev="sda1" ino=1153 res=1 errno=0 16:59:04 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x9, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:59:04 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:59:04 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400", 0x15}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:59:04 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x8031, 0xffffffffffffffff, 0x8000000) 16:59:04 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x4b, 0x0, 0x0) 16:59:04 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000011c0)={0x6, 0x5, &(0x7f0000000080)=@framed={{}, [@cb_func]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000100)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:59:04 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x23, 0x0, 0x0) 16:59:04 executing program 3: syz_emit_ethernet(0x20000022, &(0x7f0000000000)={@remote, @broadcast, @val={@void}, {@can={0xc, {{}, 0x0, 0x0, 0x0, 0x0, "37d7a9ce94369144"}}}}, 0x0) 16:59:04 executing program 1: request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0xffffffffffffffff) [ 660.826920][T14323] FAT-fs (loop2): bogus number of reserved sectors [ 660.826934][T14323] FAT-fs (loop2): Can't find a valid FAT filesystem [ 660.858841][T14325] loop0: detected capacity change from 0 to 87 [ 660.861238][T14325] loop0: [POWERTEC] p1 [ 660.861337][T14325] loop0: p1 start 7627110 is beyond EOD, truncated [ 660.862164][T14325] FAT-fs (loop0): invalid media value (0x00) [ 660.862178][T14325] FAT-fs (loop0): Can't find a valid FAT filesystem [ 660.868122][ T40] audit: type=1804 audit(1655225944.660:820): pid=14325 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/875/file1/bus" dev="sda1" ino=1152 res=1 errno=0 [ 660.868154][ T40] audit: type=1804 audit(1655225944.660:821): pid=14325 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/875/file1/bus" dev="sda1" ino=1152 res=1 errno=0 [ 660.870798][ T40] audit: type=1804 audit(1655225944.670:822): pid=14323 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir1742540418/syzkaller.Qym0Qm/62/file1/bus" dev="sda1" ino=1153 res=1 errno=0 [ 660.871258][ T40] audit: type=1804 audit(1655225944.670:823): pid=14323 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir1742540418/syzkaller.Qym0Qm/62/file1/bus" dev="sda1" ino=1153 res=1 errno=0 16:59:05 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:59:05 executing program 3: bpf$PROG_LOAD(0x12, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:59:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x890d, 0x0) 16:59:05 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400", 0x15}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:59:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000006c0001"], 0x1c}}, 0x0) 16:59:05 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=@base={0xf}, 0x48) 16:59:05 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)=[@ip_ttl={{0x14}}], 0x18}, 0x0) [ 661.412885][ T40] audit: type=1804 audit(1655225945.210:824): pid=14339 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir1742540418/syzkaller.Qym0Qm/63/file1/bus" dev="sda1" ino=1161 res=1 errno=0 16:59:05 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 661.413675][ T40] audit: type=1804 audit(1655225945.210:825): pid=14339 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir1742540418/syzkaller.Qym0Qm/63/file1/bus" dev="sda1" ino=1161 res=1 errno=0 [ 661.443382][T14343] loop0: detected capacity change from 0 to 87 [ 661.444476][T14343] loop0: [POWERTEC] p1 [ 661.444579][T14343] loop0: p1 start 7627110 is beyond EOD, truncated [ 661.463299][T14343] FAT-fs (loop0): invalid media value (0x00) [ 661.463314][T14343] FAT-fs (loop0): Can't find a valid FAT filesystem [ 661.508663][T13400] blk_print_req_error: 12 callbacks suppressed [ 661.508678][T13400] I/O error, dev loop0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 661.508697][T13400] Buffer I/O error on dev loop0, logical block 1, async page read [ 661.508746][T13400] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 661.508761][T13400] Buffer I/O error on dev loop0, logical block 2, async page read [ 661.508790][T13400] I/O error, dev loop0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 661.508823][T13400] I/O error, dev loop0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 661.508857][T13400] I/O error, dev loop0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 661.508891][T13400] I/O error, dev loop0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 661.508937][T13400] I/O error, dev loop0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 16:59:05 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:59:05 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x2, &(0x7f0000000000)=@raw=[@map_idx_val], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:59:05 executing program 1: r0 = io_uring_setup(0x9f9, &(0x7f0000000000)) mmap$IORING_OFF_SQES(&(0x7f0000002000/0x14000)=nil, 0x14000, 0xa, 0x12, r0, 0x10000000) 16:59:05 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f8", 0x16}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:59:05 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x35, 0x0, 0x7000000) 16:59:05 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x14, &(0x7f0000000140)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:59:05 executing program 3: syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="ef2f75143c1f", @dev, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, {[@noop, @generic={0x0, 0x4, "f43e"}]}}, {0x0, 0x0, 0x8}}}}}, 0x0) 16:59:05 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x8, 0x1, &(0x7f0000000000)=@raw=[@kfunc], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 662.092071][T14364] loop0: detected capacity change from 0 to 87 [ 662.095708][T14364] FAT-fs (loop0): bogus number of FAT sectors [ 662.095721][T14364] FAT-fs (loop0): Can't find a valid FAT filesystem 16:59:06 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = dup(r0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x9) 16:59:06 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x22, 0x0, 0x7000000) 16:59:06 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:59:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x40, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x40}}, 0x0) 16:59:06 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = dup(r0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x9) 16:59:06 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f8", 0x16}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:59:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x890b, 0x0) 16:59:06 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = dup(r0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x9) 16:59:06 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = dup(r0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x9) 16:59:06 executing program 3: syz_io_uring_setup(0x9, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) [ 662.699937][T14386] loop0: detected capacity change from 0 to 87 [ 662.703079][T14386] FAT-fs (loop0): bogus number of FAT sectors [ 662.703097][T14386] FAT-fs (loop0): Can't find a valid FAT filesystem [ 662.771012][T13400] I/O error, dev loop0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 662.771076][T13400] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 662.771131][T13400] I/O error, dev loop0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 16:59:06 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:59:06 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) 16:59:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000002300)={@private1, @private1, @remote, 0x0, 0x7ff}) 16:59:07 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x33, 0x0, 0x0) 16:59:07 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f8", 0x16}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:59:07 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) 16:59:07 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) 16:59:07 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6}, 0x48) [ 663.278780][T14400] loop2: detected capacity change from 0 to 87 [ 663.286528][T14400] FAT-fs (loop2): bogus number of reserved sectors [ 663.286549][T14400] FAT-fs (loop2): Can't find a valid FAT filesystem [ 663.343048][T14404] loop0: detected capacity change from 0 to 87 [ 663.346264][T14404] FAT-fs (loop0): bogus number of FAT sectors [ 663.346284][T14404] FAT-fs (loop0): Can't find a valid FAT filesystem 16:59:07 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:59:07 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x9) 16:59:07 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) 16:59:07 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x9) [ 663.921972][T14414] loop2: detected capacity change from 0 to 87 [ 663.924350][T14414] FAT-fs (loop2): bogus number of reserved sectors [ 663.924362][T14414] FAT-fs (loop2): Can't find a valid FAT filesystem 16:59:07 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) sendmsg$inet6(r0, &(0x7f0000000900)={&(0x7f0000000140)={0xa, 0x4e21, 0x0, @remote}, 0x1c, 0x0}, 0x0) 16:59:07 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x9) 16:59:07 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:59:07 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2000}], &(0x7f0000000040)='GPL\x00', 0x7, 0xd8, &(0x7f0000000080)=""/216, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 664.147333][T14423] loop0: detected capacity change from 0 to 87 16:59:08 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = dup(0xffffffffffffffff) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x9) 16:59:08 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:59:08 executing program 3: bpf$PROG_LOAD_XDP(0x6, &(0x7f0000000640)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:59:08 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x21, 0x0, 0x7000000) 16:59:08 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = dup(0xffffffffffffffff) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x9) 16:59:08 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = dup(0xffffffffffffffff) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x9) 16:59:08 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:59:08 executing program 3: r0 = io_uring_setup(0x9f9, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x40000, 0x1000004, 0x12, r0, 0x0) 16:59:08 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = dup(r0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x9) [ 664.629897][T14440] loop2: detected capacity change from 0 to 87 [ 664.631691][T14440] FAT-fs (loop2): bogus number of reserved sectors [ 664.631704][T14440] FAT-fs (loop2): Can't find a valid FAT filesystem [ 664.669106][T13420] buffer_io_error: 19 callbacks suppressed [ 664.669132][T13420] Buffer I/O error on dev loop2, logical block 1, async page read [ 664.669186][T13420] Buffer I/O error on dev loop2, logical block 2, async page read [ 664.669216][T13420] Buffer I/O error on dev loop2, logical block 3, async page read [ 664.669245][T13420] Buffer I/O error on dev loop2, logical block 4, async page read [ 664.669273][T13420] Buffer I/O error on dev loop2, logical block 5, async page read [ 664.669323][T13420] Buffer I/O error on dev loop2, logical block 6, async page read [ 664.669351][T13420] Buffer I/O error on dev loop2, logical block 7, async page read [ 664.708257][T14442] loop0: detected capacity change from 0 to 87 16:59:08 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{0x0}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:59:08 executing program 3: syz_open_dev$evdev(&(0x7f0000000080), 0x7, 0x201) 16:59:08 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = dup(r0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x9) 16:59:08 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = dup(r0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x9) 16:59:08 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x46, 0x0, 0x0) 16:59:08 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:59:08 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = dup(r0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x9) 16:59:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@ipv4_newnexthop={0x18, 0x10, 0x1}, 0x18}}, 0x0) [ 665.212668][T14458] loop2: detected capacity change from 0 to 87 [ 665.214714][T14458] FAT-fs (loop2): bogus number of reserved sectors [ 665.214727][T14458] FAT-fs (loop2): Can't find a valid FAT filesystem [ 665.251284][T13422] Buffer I/O error on dev loop2, logical block 1, async page read [ 665.251358][T13422] Buffer I/O error on dev loop2, logical block 2, async page read [ 665.251405][T13422] Buffer I/O error on dev loop2, logical block 3, async page read [ 665.251467][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 665.251477][ T40] audit: type=1804 audit(1655225949.050:848): pid=14458 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir1742540418/syzkaller.Qym0Qm/69/file1/bus" dev="sda1" ino=1157 res=1 errno=0 [ 665.252417][ T40] audit: type=1804 audit(1655225949.050:849): pid=14458 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir1742540418/syzkaller.Qym0Qm/69/file1/bus" dev="sda1" ino=1157 res=1 errno=0 [ 665.317686][T14461] loop0: detected capacity change from 0 to 87 [ 665.321329][ T40] audit: type=1804 audit(1655225949.120:850): pid=14461 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/882/file1/bus" dev="sda1" ino=1158 res=1 errno=0 [ 665.321719][ T40] audit: type=1804 audit(1655225949.120:851): pid=14461 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/882/file1/bus" dev="sda1" ino=1158 res=1 errno=0 16:59:09 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{0x0}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:59:09 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = dup(r0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x9) 16:59:09 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x2a, 0x0, 0x7000000) 16:59:09 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:59:09 executing program 3: r0 = socket(0xa, 0x3, 0x9) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 16:59:09 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = dup(r0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x9) 16:59:09 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0x3, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:59:09 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = dup(r0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x9) [ 665.915845][T14476] loop2: detected capacity change from 0 to 87 [ 665.917993][T14476] FAT-fs (loop2): bogus number of reserved sectors [ 665.918006][T14476] FAT-fs (loop2): Can't find a valid FAT filesystem [ 665.920695][T14478] loop0: detected capacity change from 0 to 87 [ 665.934888][ T40] audit: type=1804 audit(1655225949.730:852): pid=14478 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/883/bus" dev="sda1" ino=1157 res=1 errno=0 [ 665.934925][ T40] audit: type=1804 audit(1655225949.730:853): pid=14478 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/883/bus" dev="sda1" ino=1157 res=1 errno=0 [ 665.954894][ T40] audit: type=1804 audit(1655225949.750:854): pid=14476 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir1742540418/syzkaller.Qym0Qm/70/file1/bus" dev="sda1" ino=1158 res=1 errno=0 [ 665.955639][ T40] audit: type=1804 audit(1655225949.750:855): pid=14476 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir1742540418/syzkaller.Qym0Qm/70/file1/bus" dev="sda1" ino=1158 res=1 errno=0 16:59:10 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{0x0}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:59:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) 16:59:10 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = dup(r0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x9) 16:59:10 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:59:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="3d5e4e9d4e7e5fffc5ec2f4817d823a337b6a5f5fe2d6d02b6a26e129c3cdf79bb5f3aa327f14d514ff057683c1c5fcda82583078e72927617af7070", 0x3c}, {&(0x7f0000000040)="47167e4e93775e57dae83d6ea618d77a627fa349e29a63c21bd9a7f5aa555107b269ad0be5c350271b505b", 0x2b}, {&(0x7f0000000600)="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", 0xf00}], 0x3, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @loopback}}}], 0x30}, 0x0) 16:59:10 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = dup(r0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x9) 16:59:10 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r0 = dup(0xffffffffffffffff) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x9) [ 666.536280][T14490] loop0: detected capacity change from 0 to 87 16:59:10 executing program 3: r0 = io_uring_setup(0x9f9, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r0, 0x10000000) [ 666.568328][ T40] audit: type=1804 audit(1655225950.360:856): pid=14490 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/884/bus" dev="sda1" ino=1165 res=1 errno=0 [ 666.568429][ T40] audit: type=1804 audit(1655225950.360:857): pid=14490 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/884/bus" dev="sda1" ino=1165 res=1 errno=0 [ 666.642705][T14497] loop2: detected capacity change from 0 to 87 [ 666.645780][T14497] FAT-fs (loop2): bogus number of reserved sectors [ 666.645800][T14497] FAT-fs (loop2): Can't find a valid FAT filesystem 16:59:10 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:59:10 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) 16:59:10 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r0 = dup(0xffffffffffffffff) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x9) 16:59:10 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:59:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000080), 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@getroute={0x0, 0x1a, 0x0, 0x0, 0x0, {}, ["", "", "", "", "", ""]}, 0x14}, 0xffffff1f}, 0x0) 16:59:10 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r0 = dup(0xffffffffffffffff) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x9) 16:59:11 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x2a0043, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180)={0x100081, 0x0, 0x0, {r0}}, 0x20) 16:59:11 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) dup(r0) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x9) [ 667.207958][T14508] loop0: detected capacity change from 0 to 87 [ 667.249911][T14514] loop2: detected capacity change from 0 to 87 [ 667.252299][T14514] FAT-fs (loop2): bogus number of reserved sectors [ 667.252312][T14514] FAT-fs (loop2): Can't find a valid FAT filesystem [ 667.299749][T13422] blk_print_req_error: 32 callbacks suppressed [ 667.299774][T13422] I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 667.299827][T13422] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 667.299864][T13422] I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 667.299897][T13422] I/O error, dev loop2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 667.299930][T13422] I/O error, dev loop2, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 667.299964][T13422] I/O error, dev loop2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 667.299997][T13422] I/O error, dev loop2, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 16:59:11 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:59:11 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) dup(r0) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x9) 16:59:11 executing program 3: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4042071, 0xffffffffffffffff, 0x0) 16:59:11 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(0x0, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:59:11 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) dup(r0) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x9) 16:59:11 executing program 3: syz_emit_ethernet(0xfa, &(0x7f0000000840)={@dev, @empty, @val={@void}, {@ipv4={0x800, @tcp={{0x35, 0x4, 0x0, 0x0, 0xe8, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private, {[@noop, @timestamp_addr={0x44, 0x4c, 0x0, 0x1, 0x0, [{}, {@private}, {@empty}, {@dev}, {@multicast2}, {@broadcast}, {@dev}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private}]}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@dev}]}, @ssrr={0x89, 0xb, 0x0, [@multicast2, @multicast1]}, @ssrr={0x89, 0x3}, @ra={0x94, 0x4}, @lsrr={0x83, 0xb, 0x0, [@local, @loopback]}, @cipso={0x86, 0x47, 0x0, [{0x0, 0x4, '5A'}, {0x0, 0x5, "109d6e"}, {0x0, 0x12, "a9777a327518c3f87c66f44b8cdbe038"}, {0x0, 0x7, "1b1ef77fae"}, {0x0, 0x4, '$T'}, {0x0, 0xa, "9fc2a8809b053313"}, {0x0, 0x11, "b28696edc08347e0e874eb0f40ce05"}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 16:59:11 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = dup(r0) r2 = openat$cgroup_devices(r1, 0x0, 0x2, 0x0) sendfile(r2, r2, 0x0, 0x9) 16:59:11 executing program 3: bpf$PROG_LOAD(0x13, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 667.813695][T14527] loop0: detected capacity change from 0 to 87 [ 667.851902][T14532] loop2: detected capacity change from 0 to 87 [ 667.855682][T14532] FAT-fs (loop2): bogus number of reserved sectors [ 667.855701][T14532] FAT-fs (loop2): Can't find a valid FAT filesystem [ 667.895447][T13420] I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 667.895535][T13420] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 667.895602][T13420] I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 16:59:12 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x74) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x2b}, 0x45, r1}) setsockopt$inet6_mreq(r0, 0x29, 0x6, 0x0, 0x0) 16:59:12 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = dup(r0) r2 = openat$cgroup_devices(r1, 0x0, 0x2, 0x0) sendfile(r2, r2, 0x0, 0x9) 16:59:12 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:59:12 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(0x0, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:59:12 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = dup(r0) r2 = openat$cgroup_devices(r1, 0x0, 0x2, 0x0) sendfile(r2, r2, 0x0, 0x9) [ 668.439074][T14538] loop0: detected capacity change from 0 to 87 16:59:12 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = dup(r0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x9) 16:59:12 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0xf, 0x3, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:59:12 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = dup(r0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x9) 16:59:12 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xf, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:59:12 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = dup(r0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x9) [ 668.559702][T14553] loop2: detected capacity change from 0 to 87 [ 668.561676][T14553] FAT-fs (loop2): bogus number of reserved sectors [ 668.561688][T14553] FAT-fs (loop2): Can't find a valid FAT filesystem 16:59:12 executing program 3: bpf$PROG_LOAD_XDP(0x19, &(0x7f0000000640)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:59:12 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = dup(r0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x9) 16:59:12 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(0x0, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:59:12 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400", 0xc}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) [ 669.082596][T14558] loop0: detected capacity change from 0 to 87 16:59:12 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000240)={&(0x7f0000000040)={0xa}, 0x9b, &(0x7f00000002c0)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_INTERVAL]}, 0x1c}}, 0x0) 16:59:12 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = dup(r0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x9) 16:59:12 executing program 3: r0 = io_uring_setup(0x9f9, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) 16:59:12 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = dup(r0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x9) 16:59:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8918, 0x0) 16:59:12 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = dup(r0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x0) 16:59:13 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) [ 669.206394][T14574] loop2: detected capacity change from 0 to 87 [ 669.213354][T14574] FAT-fs (loop2): bogus number of reserved sectors [ 669.213368][T14574] FAT-fs (loop2): Can't find a valid FAT filesystem [ 669.233172][T14576] loop0: detected capacity change from 0 to 87 16:59:13 executing program 3: syz_emit_ethernet(0x22, &(0x7f0000000000)={@remote, @broadcast, @val={@void, {0x8847}}, {@can={0xc, {{}, 0x0, 0x0, 0x0, 0x0, "37d7a9ce94369144"}}}}, 0x0) 16:59:13 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = dup(r0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x0) 16:59:13 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400", 0xc}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:59:13 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) [ 669.766166][T14582] loop0: detected capacity change from 0 to 87 16:59:13 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = dup(r0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x0) 16:59:13 executing program 3: sysfs$2(0x2, 0x29f0, 0x0) 16:59:13 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0xa, 0x3, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:59:13 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x8, 0x3, 0x7ff, 0x48, 0x1}, 0x48) 16:59:13 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) sendmsg$inet6(r0, &(0x7f0000000900)={&(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000840)=[{&(0x7f0000000180)='}', 0x1}], 0x1}, 0x0) 16:59:13 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000100)=@raw=[@ldst={0x1}, @exit, @cb_func], &(0x7f0000000180)='GPL\x00', 0x3, 0x90, &(0x7f00000001c0)=""/144, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 669.885429][T14597] loop2: detected capacity change from 0 to 87 [ 669.887218][T14597] FAT-fs (loop2): bogus number of reserved sectors [ 669.887229][T14597] FAT-fs (loop2): Can't find a valid FAT filesystem [ 669.949505][T13400] buffer_io_error: 39 callbacks suppressed [ 669.949518][T13400] Buffer I/O error on dev loop2, logical block 1, async page read [ 669.949566][T13400] Buffer I/O error on dev loop2, logical block 2, async page read [ 669.949596][T13400] Buffer I/O error on dev loop2, logical block 3, async page read [ 669.949624][T13400] Buffer I/O error on dev loop2, logical block 4, async page read [ 669.949652][T13400] Buffer I/O error on dev loop2, logical block 5, async page read [ 669.949680][T13400] Buffer I/O error on dev loop2, logical block 6, async page read [ 669.949708][T13400] Buffer I/O error on dev loop2, logical block 7, async page read 16:59:14 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400", 0xc}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:59:14 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:59:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@ipv4_newnexthop={0x1c, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_FDB={0x4, 0xc}]}, 0x1c}}, 0x0) 16:59:14 executing program 3: epoll_create1(0x2bd358100f8eb222) [ 670.452452][T14602] loop0: detected capacity change from 0 to 87 16:59:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) 16:59:14 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000ebed00000000000008000000851000000500000018140000", @ANYRES32, @ANYBLOB="000000000000000018270000", @ANYRES32, @ANYBLOB="0000000004000000950000000000000018260000", @ANYRES32, @ANYBLOB="0000000009000000185500000e00000000000000000000009d"], &(0x7f0000000240)='syzkaller\x00', 0x1, 0xe1, &(0x7f0000000d80)=""/225, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:59:14 executing program 3: bpf$PROG_LOAD(0xa, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:59:14 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x16, 0x0, 0x0) [ 670.546815][T14614] loop2: detected capacity change from 0 to 87 [ 670.553144][T14614] FAT-fs (loop2): bogus number of reserved sectors [ 670.553160][T14614] FAT-fs (loop2): Can't find a valid FAT filesystem [ 670.589962][T13420] Buffer I/O error on dev loop2, logical block 1, async page read [ 670.590015][T13420] Buffer I/O error on dev loop2, logical block 2, async page read [ 670.590046][T13420] Buffer I/O error on dev loop2, logical block 3, async page read [ 670.593519][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 670.593583][ T40] audit: type=1804 audit(1655225954.390:872): pid=14614 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir1742540418/syzkaller.Qym0Qm/77/file1/bus" dev="sda1" ino=1150 res=1 errno=0 [ 670.594226][ T40] audit: type=1804 audit(1655225954.390:873): pid=14614 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir1742540418/syzkaller.Qym0Qm/77/file1/bus" dev="sda1" ino=1150 res=1 errno=0 16:59:14 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200", 0x12}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:59:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="3d5e4e9d4e7e5fffc5ec2f4817d823a337b6a5f5fe2d6d02b6a26e129c3cdf79bb5f3aa327f14d514ff057683c1c5fcda82583078e72927617af7070", 0x3c}, {&(0x7f0000000040)="47167e4e93775e57dae83d6ea618d77a627fa349e29a63c21bd9a7f5aa555107b269ad0be5c350271b505b", 0xffffffffffffffc0}, {&(0x7f0000000600)="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", 0xf00}], 0x3, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @loopback}}}], 0x40}, 0x0) 16:59:14 executing program 1: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000940)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x34, r0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x34}}, 0x0) 16:59:14 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(0x0, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:59:14 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xe, 0x4, 0x0, 0x1}, 0x48) [ 671.045043][T14620] loop0: detected capacity change from 0 to 87 16:59:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000200)={0xebc, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TX_RATES={0x324, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xb8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x25, 0x2, [{0x5, 0x9}, {0x0, 0x8}, {0x1, 0x9}, {0x5}, {0x0, 0x7}, {0x0, 0xa}, {0x5, 0x9}, {0x1, 0xa}, {0x4, 0x9}, {0x6}, {0x0, 0x9}, {0x2, 0x8}, {0x4}, {0x4, 0x6}, {0x3}, {0x3, 0x6}, {0x6, 0x2}, {0x4, 0x6}, {0x1, 0x5}, {0x4, 0x1}, {0x7, 0x2}, {0x4, 0x7}, {}, {0x3, 0x3}, {0x2, 0x9}, {0x5, 0x7}, {0x1, 0x7}, {0x2, 0x5}, {0x4, 0x4}, {0x4}, {0x7, 0x7}, {0x2, 0x2}, {0x4, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x4, 0x49, 0x9, 0x16, 0xb, 0x5, 0xb, 0x2, 0x6, 0xb, 0x0, 0x0, 0x28, 0x36, 0x30, 0xb, 0x5, 0x6, 0x12, 0x6, 0x5, 0x24, 0x60, 0x18, 0x60, 0x5, 0x18, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x31, 0x4, 0x3, 0x7fff, 0x8, 0x0, 0xfffd, 0x3]}}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x4, 0x2}, {0x1, 0x2}, {0x7, 0x6}, {0x7, 0x7}, {0x1, 0x8}, {0x0, 0xa}, {0x3, 0xa}, {0x0, 0x3}, {0x2, 0x8}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x5, 0x7}, {0x2, 0x2}, {0x0, 0xa}, {0x5, 0x6}, {0x1, 0x1}, {0x4, 0xa}, {0x4, 0x7}, {0x1, 0x9}, {0x1, 0x5}, {0x5, 0x7}, {0x1, 0xa}, {0x2, 0x7}, {0x1, 0x6}, {0x3, 0x2}, {0x4, 0x8}, {0x7, 0x4}, {0x6, 0x2}, {0x7, 0x1b}, {0x1, 0x4}, {0x0, 0x2}, {0x3, 0xa}, {0x3, 0xa}, {0x6, 0x8}, {0x1, 0x3}, {0x4, 0x4}, {0x1, 0x8}, {0x3, 0x3}, {0x6, 0x9}, {0x7, 0x2}, {0x4, 0x8}, {0x6, 0x8}, {0x4, 0x2}, {0x0, 0x5}, {0x2, 0x1}, {0x1, 0x5}, {0x3, 0x2}, {0x1, 0x4}, {0x6, 0xa}, {0x1, 0x5}, {0x1, 0x4}, {0x3, 0x2}, {0x1, 0x3}, {0x7, 0x9}, {0x0, 0x6}, {0x1}, {0x0, 0x6}, {0x0, 0x4}, {0x6, 0x1}, {0x4, 0x1}, {0x7, 0x6}, {0x1, 0x1}, {0x6, 0x1}, {0x4, 0x3}, {0x2}, {0x3, 0x5}, {0x0, 0xa}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x39, 0x2, [{0x6, 0xa}, {0x6, 0x6}, {0x2, 0x9}, {0x1, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1, 0x1}, {}, {0x1, 0x4}, {0x3, 0x2}, {0x3, 0x6}, {0x7, 0x1}, {0x6, 0x6}, {0x4, 0x6}, {0x6, 0x6}, {0x0, 0x3}, {0x4, 0x4}, {0x1, 0x6}, {0x2, 0x9}, {0x5, 0x4}, {0x4}, {0x4, 0x8}, {0x1, 0x1}, {0x3}, {0x0, 0x4}, {0x7, 0x9}, {0x2, 0x2}, {0x7, 0x5}, {0x3, 0x8}, {0x6, 0x5}, {0x0, 0x8}, {0x2}, {0x4, 0x4}, {0x1, 0x2}, {0x5, 0x2}, {0x3}, {0x6, 0x6}, {0x1, 0x8}, {0x1, 0x3}, {0x7, 0x1}, {0x2, 0x1}, {0x7, 0x4}, {0x3, 0x8}, {0x3, 0x1}, {0x1, 0x5}, {0x4, 0x6}, {0x2, 0x8}, {0x5}, {0x2, 0x4}, {0x5, 0x9}, {0x5, 0x3}, {0x4, 0x9}, {0x7, 0x2}]}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6c, 0x12, 0x12, 0x24, 0x16, 0x0]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x101, 0x5, 0x83f, 0x0, 0x1ff, 0x6, 0x24]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x6, 0x4}, {0x7, 0x3}, {0x5, 0x6}, {0x0, 0x2}, {0x2, 0x7}, {0x0, 0x1b}, {0x1}, {0x6, 0x2}, {0x7, 0x1}, {0x5}, {0x3, 0x9}, {0x5, 0xa}, {0x5, 0x7}, {0x5, 0x5}, {0x3, 0xa}, {0x2, 0x7}, {0x6, 0x3}, {0x5}, {0x7, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0x5, 0x2, 0x3, 0x2, 0x0, 0x5, 0xffff]}}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x2, 0xb, 0x12, 0x36, 0x6c, 0x12, 0x18, 0x60, 0x30, 0x3, 0xb, 0x4, 0x48, 0x5, 0x24, 0x6c, 0x1b, 0x3, 0x0, 0x1]}]}, @NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_6GHZ={0xac, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x6, 0x6c, 0x60, 0x2, 0x1b, 0x4, 0x60, 0x66, 0x5, 0x36, 0xd, 0x9, 0x30, 0xc, 0x60]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x2, 0x9}, {0x6, 0x5}, {0x4, 0x8}, {0x5, 0x8}, {0x0, 0x6}, {0x4, 0x7}, {0x3, 0x9}, {0x5, 0x8}, {0x4, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x6, 0x3}, {0x1}, {0x4, 0x4}, {0x1, 0x9}, {0x0, 0x9}, {0x7, 0x6}, {0x4, 0x6}, {0x5, 0x7}, {0x3, 0x8}, {0x6}, {0x1, 0x9}, {0x4, 0x6}, {0x7, 0x9}, {0x6, 0x7}, {0x0, 0x8}, {0x0, 0x9}, {0x1, 0x5}, {0x4, 0xa}, {0x3, 0x3}, {0x5, 0x2}, {0x1, 0x9}, {0x7, 0x8}, {0x5, 0x8}, {0x7}, {0x1, 0x8}, {0x6, 0x8}, {0x0, 0x3}, {0x5, 0x2}, {0x7, 0x2}, {0x7, 0x4}, {0x0, 0x6}, {0x2, 0x8}, {0x4}, {0x7, 0x9}, {0x2, 0x3}, {0x3, 0x1}, {0x5, 0x8}, {0x1, 0x5}, {0x1, 0x6}, {0x1, 0xa}, {0x1}, {0x4, 0xa}, {0x0, 0x5}, {0x1, 0x7}, {0x0, 0x3}, {0x7, 0x8}, {0x3, 0x1}, {0x3, 0x8}, {0x4, 0x1}, {0x7, 0x8}, {0x6, 0x3}, {0x7, 0x8}, {0x2, 0x4}, {0x0, 0x5}, {0x7, 0x5}, {0x6, 0x5}, {0x1, 0x6}, {0x6, 0xa}, {0x1, 0x2}, {0x1}, {0x7, 0x3}, {0x6, 0x7}, {0x6, 0x6}, {0x3, 0x5}, {0x1, 0x6}, {0x2, 0x5}, {0x4, 0x1}, {0x0, 0x6}, {0x5, 0x8}, {0x5, 0x3}, {0x4, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x240, 0x9c5, 0xd73c, 0xb5a7, 0x4000, 0xfe00, 0xef30, 0x50]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xed3a, 0x8, 0x2, 0x0, 0x9, 0x1, 0x1, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x4, 0x3, 0x2, 0x5, 0x400, 0x8001, 0x24]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x18, 0x12, 0x5, 0x24, 0x1, 0x1b, 0xc, 0x0, 0x2, 0x5, 0x36, 0x36, 0x6c, 0x60, 0x1, 0xb, 0x6d91f8cff226f97d, 0x6c, 0x24, 0x1b, 0x6c, 0x0, 0x0, 0x3]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x5, 0x9, 0x5, 0xc, 0x5, 0x3, 0x1, 0x16, 0x60, 0x30, 0x1b, 0x61, 0x6, 0x48, 0xc, 0x6, 0x30, 0x12, 0x24, 0x18, 0x2, 0x18, 0x16, 0x1, 0x60, 0x30, 0x18, 0x4, 0x5, 0x4, 0x48]}]}]}, @NL80211_ATTR_TX_RATES={0x354, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x4, 0x8}, {0x0, 0x4}, {0x6, 0x8}, {0x1, 0x3}, {0x2, 0x3}, {0x6, 0x9}, {0x1, 0xa}, {0x2, 0x7}, {0x3, 0x1}, {0x7, 0x1}, {0x1, 0x6}, {0x6, 0x6}, {0x5, 0x8}, {0x0, 0x1}, {0x1, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x9, 0x9, 0x2, 0x0, 0x6, 0x4, 0x80]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0xb8, 0x8000, 0x3ec7, 0x6, 0x4, 0x100, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xff, 0xc58e, 0x4, 0x98, 0x2, 0xffff, 0x1000]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xffff, 0x4, 0x3, 0x5, 0x5, 0x2, 0x4]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x1, 0x36, 0x3, 0x0, 0x3, 0x4, 0x16, 0x5, 0x60, 0x6, 0x60, 0x5, 0x2, 0x48]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x10c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7, 0x9a, 0x0, 0x237, 0x400, 0x4, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x3ff, 0xffff, 0x2, 0x2, 0x7f, 0x4, 0x2d]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x36, 0x18, 0x1b, 0x18, 0x1b, 0x30, 0x1b, 0x16, 0x0, 0x3, 0x6, 0x1, 0x0, 0x60, 0x1, 0x18, 0x6c, 0x3, 0x1, 0x18, 0x0, 0x2e301866849c7dcd, 0x1b, 0x2]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x5, 0x1000, 0xffff, 0x0, 0x7f, 0x3, 0xffd3]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x36, 0x1, 0x60, 0x0, 0x8952f3c8f6ba6bf5, 0x30, 0x6, 0x16, 0x12, 0x2, 0xb, 0x60, 0x1b]}, @NL80211_TXRATE_HT={0x51, 0x2, [{}, {0x2, 0x9}, {0x2, 0x7}, {0x3, 0x6}, {0x0, 0x2}, {0x3, 0x5}, {0x1, 0x4}, {0x1}, {0x5, 0x5}, {0x1, 0x2}, {0x0, 0x6}, {0x5, 0x7}, {0x2, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x5, 0xa}, {0x6, 0x8}, {0x2, 0x8}, {0x3, 0x6}, {0x1, 0x5}, {0x3, 0x6}, {0x2, 0x4}, {0x7, 0x9}, {0x1, 0x7}, {0x1, 0x2}, {0x0, 0x6}, {0x1, 0x3}, {0x0, 0x8}, {0x1, 0xa}, {0x5, 0x8}, {0x3, 0x7}, {0x6, 0x3}, {0x3, 0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x1, 0x9}, {0x7, 0x1}, {0x1, 0x7}, {0x0, 0x6}, {0x0, 0x2}, {0x0, 0x7}, {0x6, 0x8}, {0x7, 0x9}, {0x5, 0x3}, {0x2, 0x6}, {0x1, 0x3}, {0x4, 0x9}, {0x1, 0x9}, {0x4, 0x8}, {0x2, 0xa}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x7, 0x5}, {0x6, 0x5}, {0x7, 0x5}, {0x6, 0x3}, {0x7, 0xa}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x3}, {0x0, 0x9}, {0x1, 0x3}, {0x7, 0x5}, {0x2, 0x1}, {0x0, 0x6}, {0x1, 0x5}, {0x2, 0x5}, {0x5, 0x4}, {0x2, 0x8}, {0x3, 0x9}, {0x1, 0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x6}, {0x1, 0xa}, {0x6, 0x9}]}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x6, 0x4}, {0x5, 0x5}, {0x1, 0x2}, {0x5, 0x9}, {0x4, 0x6}, {0x1}, {0x3, 0x4}, {0x1, 0x2}, {0x1, 0x1}, {0x0, 0x9}, {0x5, 0x7}, {0x7, 0x1}, {0x2, 0x1}, {0x1, 0x4}, {0x3}, {}, {0x5, 0x5}, {}, {0x2, 0x1}, {0x6, 0x5}, {0x1, 0x9}, {0x2, 0x4}, {0x3, 0x9}, {0x3}, {0x0, 0x3}, {0x4, 0x8}, {0x6, 0x4}, {0x3, 0x2}, {0x0, 0x5}, {0x3, 0x2}, {0x7, 0x1}, {0x1, 0x3}, {0x2, 0x1}, {0x4, 0x4}, {0x1, 0x9}, {0x3, 0xa}, {0x3, 0x2}, {0x1, 0x2}, {0x2, 0x3}, {0x3, 0xa}, {0x1, 0x4}, {0x5, 0x6}, {0x4, 0x8}, {0x3, 0x7}, {0x1, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x16, 0x24, 0x24, 0xb, 0x2, 0x5, 0x36, 0x48, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x101, 0x1000, 0x800, 0xd4, 0x2, 0xc56, 0x7f]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0xc8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0x87d3, 0x1, 0x5, 0x1000, 0x3e, 0x1, 0x8]}}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x1, 0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x2}, {0x3, 0x6}, {0x3}, {0x4, 0x1}, {0x2, 0x9}, {0x1, 0x1}, {0x1}, {0x0, 0x9}, {0x7, 0x7}, {0x4, 0x7}, {0x5, 0x6}, {0x2, 0x5}, {0x3, 0x8}, {0x0, 0x6}, {0x5, 0x9}, {0x1, 0x3}, {0x5, 0x5}, {0x5, 0x8}, {0x7, 0xa}, {0x4, 0x4}, {0x0, 0x1}, {0x1, 0x6}, {0x2, 0x1}, {0x4, 0xa}, {0x2, 0x4}, {0x0, 0x9}, {0x3, 0x4}, {0x0, 0xa}, {0x7, 0x1}, {0x6, 0x6}, {}, {0x7, 0x1}, {0x4, 0x9}, {0x1, 0x6}, {0x2, 0x4}, {0x7, 0x6}, {0x6, 0x4}, {0x1, 0x8}, {0x2, 0x3}, {0x2, 0x3}, {0x4, 0x4}, {0x5, 0x8}, {0x5, 0x4}, {0x3, 0x4}, {0x3, 0x3}, {0x3, 0x6}, {0x7, 0x8}, {0x4, 0x8}, {0x0, 0x9}, {0x7, 0x5}, {0x0, 0x1}, {0x4}, {0x2, 0x6}, {0x2, 0xa}, {0x2, 0x3}, {0x6}, {0x7, 0x2}, {0x2, 0xa}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x18, 0x60, 0xc, 0x36, 0x18, 0x5, 0x36, 0x2, 0xdb2bce05fc39ab25, 0x5, 0x18, 0x4, 0x36, 0x9, 0x6c, 0x1, 0x3, 0x6c, 0x9, 0x3, 0x48, 0x1b, 0x16, 0x16, 0x1, 0x6c, 0x9, 0x1, 0x19, 0x4, 0x12]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x6, 0xbb88, 0x1, 0x6, 0x7, 0x0, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x75, 0x0, 0x6, 0xeb, 0x7ff, 0x9, 0x0, 0xf279]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xd8a, 0x6, 0x7, 0x7fff, 0xffff, 0x37ae, 0x1, 0x1ff]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x5}, {0x7, 0xa}, {0x5, 0x7}, {0x0, 0x9}, {0x7, 0x9}, {0x6, 0x5}, {0x0, 0x3}, {0x5, 0x7}, {0x4, 0x6}, {0x0, 0x3}, {0x3, 0x6}, {0x7, 0xa}, {0x7, 0xa}, {0x5, 0x9}, {0x7, 0xa}, {0x0, 0x4}, {0x4, 0xa}, {0x0, 0x8}, {0x1, 0x3}, {0x1}, {0x7, 0x4}, {0x7}, {0x6, 0x7}, {0x3, 0x5}, {0x5, 0xa}, {0x6, 0x8}, {0x6, 0x3}, {0x4, 0x4}, {0x6, 0x4}]}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x6c, 0x12, 0x36, 0x18, 0x60, 0x3, 0x12, 0x30, 0x60, 0xb, 0x4, 0x18, 0x9, 0xc, 0xc, 0x4, 0x12, 0x5, 0x12, 0x18, 0x2, 0x6c, 0x18, 0x36, 0x37]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x12, 0x36, 0xa5f2a85903f2b0ed, 0x24, 0x6c, 0x48, 0x6, 0x18, 0x48, 0x18, 0x18, 0x48, 0xb, 0x4, 0x18, 0x16, 0x36, 0x18]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x138, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x14, 0x2, [{0x1, 0x5}, {0x0, 0x3}, {0x0, 0xa}, {0x3, 0x5}, {0x4}, {0x2, 0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x1, 0x3}, {0x3, 0x9}, {0x3, 0x7}, {0x1, 0x1}, {0x6}, {0x2, 0x8}, {0x7, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x4, 0x1, 0x48e0, 0xb7, 0x4, 0x9]}}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x36, 0x60, 0x2, 0x0, 0x25, 0xc, 0x36, 0x4, 0x1, 0x2, 0x6c, 0x3, 0x12, 0x1b, 0x60, 0x48, 0x60, 0x6c]}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x1b, 0x6c, 0x12, 0x4, 0xc, 0x5, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x1, 0x0, 0x8a, 0x3, 0x4, 0xfff8, 0x81]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x0, 0x6}, {0x7, 0x8}, {0x5, 0x7}, {0x4, 0x1}, {0x4, 0x6}, {0x6, 0xa}, {0x1}, {0x1, 0x3}, {0x6, 0x7}, {0x7, 0x3}, {0x5, 0x4}, {0x1}, {0x6, 0x4}, {0x3, 0xa}, {0x4, 0x1}, {0x6, 0x1}, {0x7, 0x5}, {0x2, 0x4}]}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x2, 0x2, 0x5, 0x7, 0x7, 0x5, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x4, 0x200, 0x800, 0x7, 0x4, 0x9]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1, 0x2, 0x39, 0xb, 0x24, 0x1, 0x60, 0x2, 0x3, 0x30, 0x60, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa4db, 0x0, 0x64fd, 0x6, 0x808, 0x7f, 0x0, 0x401]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7, 0x9, 0x4, 0x7, 0x1000, 0x1ff, 0xfff]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x6, 0x36, 0x60, 0x36, 0x12, 0x2, 0x18, 0x48, 0x5, 0x5, 0x36, 0x1b]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x351c, 0x0, 0x8, 0x5, 0x0, 0x200, 0x20, 0x1ff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x530, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x36, 0x1b, 0x4, 0x6c, 0x39, 0x0, 0x1b, 0x1b, 0x3, 0xc, 0xc]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x400, 0xffff, 0xaa56, 0x4, 0x20, 0x7, 0x4]}}]}, @NL80211_BAND_5GHZ={0xf4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x6, 0x7}, {0x1, 0x4}, {0x5, 0x7}, {0x5, 0x6}, {0x3, 0x5}, {0x1, 0x4}, {0x2, 0x7}, {0x7}, {0x0, 0x9}, {0x1, 0x6}, {0x7, 0x8}, {0x2, 0x6}, {0x3, 0x1}, {0x5, 0x9}, {0x6, 0x4}, {0x4, 0x3}, {0x0, 0x3}, {0x6, 0x3}, {0x0, 0x9}, {0x2, 0x8}, {0x4, 0x8}, {0x1, 0x3}, {0x5, 0x8}, {0x5, 0x8}, {0x7, 0x8}, {0x2, 0x2}, {0x1, 0x1}, {0x0, 0xa}, {0x7, 0x2}, {0x0, 0x5}, {0x4, 0x4}, {0x6, 0x8}, {0x0, 0x6}, {0x2, 0x5}, {}, {0x0, 0x4}, {0x3, 0x3}, {0x1, 0xa}, {0x1, 0x8}, {0x3, 0xa}, {0x1, 0x1}, {0x7, 0x4}, {0x7}, {0x2, 0x9}, {0x6, 0x4}, {0x4, 0x9}, {0x7, 0x8}, {0x1, 0x18}, {0x6, 0x3}, {0x3, 0x7}, {0x0, 0x4}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x40, 0x88, 0x9, 0x1, 0x3, 0x0, 0xe49]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x811, 0x6, 0x9, 0xff, 0xef, 0xd2, 0x200]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x6, 0x8, 0xfa35, 0xfffa, 0x7, 0xff7f, 0xc081]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x913e, 0x2, 0x2, 0xfff7, 0x800, 0x6, 0x7fff, 0xcc]}}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x2, 0x9}, {0x3, 0x7}, {0x1}, {0x0, 0x4}, {0x3, 0x2}, {0x2, 0x8}, {0x2, 0x3}, {0x5, 0x3}, {0x2, 0x5}, {0x2, 0x7}, {0x0, 0x5}, {0x3, 0x8}, {0x5, 0x2}, {0x7}, {0x7, 0x9}, {0x7, 0x5}, {0x7, 0x8}, {0x4, 0xa}, {0x3, 0x1}, {0x0, 0x7}, {0x0, 0x9}, {0x7, 0x3}, {0x4}, {0x6, 0x3}, {0x1, 0x7}, {0x6, 0x6}, {0x3, 0x6}, {0x5, 0x3}, {0x7, 0x2}, {0x6, 0x1}, {0x6}, {0x0, 0x1}, {0x1, 0xa}, {0x0, 0x3}, {0x4, 0xa}, {0x7, 0x6}, {0x1, 0x7}, {0x0, 0x1}, {0x1, 0x2}, {0x0, 0x9}, {0x3, 0x8}, {0x1, 0xa}, {0x6}, {0x2, 0x5}, {0x2}, {0x0, 0x1}, {0x2, 0x2}, {0x1, 0xa}, {0x6, 0x3}, {0x7, 0x2}, {0x2}, {0x7, 0x4}, {0x1, 0x5}, {0x4, 0x3}, {0x4, 0x9}, {0x3, 0x3}, {0x5, 0x7}, {0x4, 0x6}, {0x0, 0x7}, {0x3, 0x2}, {0x4, 0x7}, {0x0, 0x5}, {0x4, 0x5}, {0x1, 0x6}, {0x3, 0xa}, {0x1}, {0x3, 0x4}, {0x1, 0xa}, {0x0, 0x6}, {0x6}, {0x3, 0x4}, {0x4, 0x1}, {0x6, 0x9}]}]}, @NL80211_BAND_5GHZ={0xb4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x5, 0x8, 0x1, 0x8, 0x4, 0xda, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3f, 0x9, 0x80, 0x2, 0x400, 0x7ff, 0x1000]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x9, 0x1, 0x3f, 0xfc01, 0xfff9, 0x5, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x30, 0xb, 0x2, 0x1b, 0x3, 0xb, 0x12, 0xb, 0x0, 0x24]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x165a, 0x7, 0x3, 0x0, 0x5, 0x698f, 0x2, 0x5]}}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x6, 0x8}, {0x3, 0x2}, {0x2, 0x8}, {0x0, 0x9}, {0x0, 0x4}, {0x3, 0xa}, {0x2}, {0x3, 0x3}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0x9}, {0x3, 0xa}, {0x0, 0x3}, {0x3}, {0x1, 0xa}, {0x2, 0x3}, {0x1, 0x1}, {0x6, 0x7}, {0x1, 0x4}, {0x4, 0x5}, {0x1, 0x4}, {0x2, 0x4}, {0x3, 0x4}, {0x2, 0x8}, {0x0, 0xa}, {0x4, 0x3}, {0x1, 0x5}, {0x1, 0x5}, {0x2, 0x1}, {0x0, 0x6}, {0x0, 0x5}, {0x3, 0x3}, {0x7, 0x2}, {0x6, 0x4}, {0x4, 0x9}, {0x0, 0xa}, {0x7, 0x8}, {0x5, 0x4}, {0x6, 0x3}, {0x0, 0x8}, {0x7, 0x4}, {0x4, 0x3}, {0x4, 0x1}, {0x5, 0x7}, {0x0, 0x9}, {0x3, 0xa}, {0x7, 0x8}, {0x1, 0x6}, {0x1}, {0x3, 0x9}, {0x0, 0x2}, {0x7, 0x2}]}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1f, 0x3, 0x7fff, 0x9f1b, 0x101, 0x9, 0x5, 0x2]}}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x3, 0x4}, {0x5}, {0x6, 0x8}, {0x5, 0x2}, {0x4, 0x3}, {}, {0x4, 0xa}, {0x0, 0x9}, {0x4, 0x1}, {0x1, 0x3}, {0x7, 0x8}, {0x4, 0x8}, {0x0, 0x1}, {0x1, 0x6}, {0x0, 0x3}, {0x1, 0x4}, {0x7, 0x9}, {0x1, 0x3}, {0x7, 0x6}, {0x7}, {0x7, 0x1}, {0x5}, {0x7, 0x3}, {0x7, 0x3}, {0x1, 0x1}, {0x4, 0x7}, {0x7, 0x9}, {0x6, 0x5}, {0x6, 0x1}, {0x5, 0xa}, {0x4, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x2, 0x5}, {0x0, 0x3}, {0x7, 0x2}, {0x0, 0x2}, {0x4, 0x2}, {0x4, 0xa}, {0x3, 0x2}, {0x5, 0x3}, {0x3, 0x8}, {0x5, 0x6}, {0x7, 0xa}, {0x0, 0x2}, {0x5, 0x8}, {0x1, 0x7}, {0x4, 0x4}, {0x3, 0x3}, {0x3, 0x9}, {0x1, 0x2}, {0x0, 0x2}, {0x3, 0x1}, {0x1, 0x9}, {0x4, 0x7}, {0x2, 0x6}, {0x7, 0x5}, {0x0, 0x3}, {0x5, 0x1}, {0x3, 0x5}, {0x7, 0x3}, {0x5}, {0x3, 0x1}, {0x0, 0x2}, {}, {0x6, 0x7}, {0x6}, {0x7, 0x9}, {0x4, 0x3}, {0x7, 0x9}, {0x0, 0x3}, {0x5, 0x5}, {0x3, 0x1}, {0x3, 0x4}, {0x1, 0x2}]}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x1, 0x5}, {0x4, 0x8}, {0x5, 0x6}, {0x6, 0xa}, {0x1, 0x3}, {0x0, 0x5}, {0x7, 0x1}, {0x7, 0x6}, {0x3, 0x2}, {0x3, 0x5}, {0x4, 0x8}, {0x5}, {}, {0x7, 0x8}, {0x5, 0x7}, {0x0, 0xa}, {0x2, 0x5}, {0x0, 0xa}, {0x2, 0x2}, {0x2, 0x5}, {0x4, 0xa}, {0x3, 0x9}, {0x6, 0x1}, {0x7, 0x8}, {0x6, 0x4}, {0x1, 0x8}, {0x0, 0x6}, {0x1, 0x8}, {}, {0x2, 0x2}, {0x2, 0x3}, {0x2, 0x1}, {0x6, 0x7}, {0x1}, {0x6, 0xa}, {0x3, 0x5}, {0x6, 0x1}, {0x5, 0x6}, {}, {0x4, 0x3}, {0x7, 0xa}, {0x3, 0x1}, {0x2, 0x9}, {0x2, 0x1}, {0x4, 0x3}, {0x1, 0x9}, {0x5, 0x3}, {0x3, 0x1}, {0x6, 0x7}, {0x3, 0x5}, {0x1, 0x8}, {0x1, 0xa}, {0x5, 0x5}, {0x6, 0x1}, {0x7, 0x9}, {0x0, 0x6}, {0x1, 0x8}, {0x3, 0x1}, {0x4, 0x7}, {0x6, 0x3}, {0x0, 0xa}, {0x5, 0x7}, {0x5, 0xa}]}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x2, 0x0, 0x7, 0x1, 0x1, 0x7ff, 0x6]}}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x5, 0x2}, {0x2, 0x8}, {0x5, 0x3}, {0x1, 0x4}, {0x7, 0x1}, {0x1, 0xa}, {0x7, 0x1}, {0x3, 0x4}, {0x2, 0x7}, {0x7, 0x7}, {0x4, 0x8}, {0x3, 0x2}, {0x1, 0x7}, {0x6, 0x5}, {0x1}, {0x0, 0x7}, {0x2, 0x7}, {0x3, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x12, 0x60, 0x2, 0x3, 0x60, 0x6, 0x16, 0x4, 0x24, 0x30, 0x9, 0x30, 0xc, 0x12, 0x48, 0x1b, 0x6, 0x36, 0x48, 0x24, 0x0, 0x1b, 0x4, 0x36, 0x3, 0x30, 0x6c, 0x16, 0x60, 0x30, 0xe]}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x6, 0x5, 0x18, 0x12, 0x60, 0x1, 0x48, 0x1]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x48, 0x1, 0x60, 0x6c, 0x2, 0x6, 0x2, 0x44, 0x16]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x8, 0x0, 0xd703, 0x2bd, 0x5b5e, 0x9, 0x1ff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x1, 0x6}, {0x5}, {0x1}, {0x1, 0x5}, {0x1, 0x8}, {0x7, 0x1}, {0x3, 0x9}, {0x4, 0xa}, {0x6, 0x7}, {0x0, 0x8}]}]}, @NL80211_BAND_6GHZ={0xd8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x2, 0x7}, {0x1, 0x9}, {0x6, 0x1}, {0x4, 0x2}, {0x0, 0x5}, {0x4, 0x3}, {0x2, 0x1}, {0x5}, {0x1}, {0x1, 0x4}, {0x7, 0xa}, {0x1, 0x5}, {0x4, 0x2}, {0x5, 0x6}, {0x0, 0x5}, {0x1, 0x2}, {0x5, 0x1}, {0x5, 0x3}, {}, {0x0, 0x2}, {}, {0x2, 0x6}, {0x0, 0xa}, {0x4, 0x7}, {0x1, 0x6}, {0x0, 0x7}, {0x0, 0x3}, {0x6, 0x9}, {0x3, 0x6}, {0x7, 0x2}, {0x0, 0x3}, {0x7, 0x5}, {0x1, 0x5}, {0x2, 0x9}, {0x4, 0x4}, {0x4, 0xa}, {0x2}, {0x4, 0x3}, {0x6, 0x2}, {0x5, 0x9}, {0x0, 0x5}, {0x1, 0x2}, {0x4, 0x8}, {0x2, 0x1}, {0x7, 0x5}, {0x6, 0x8}, {0x3}, {0x3, 0x5}, {0x7, 0x3}, {0x2, 0x2}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x2}, {0x7, 0x8}, {0x4, 0x1}, {0x1, 0x9}, {0x2, 0x2}, {0x0, 0x5}, {0x4, 0x9}, {0x7, 0x1}, {0x4, 0x4}, {0x6}, {0x6, 0x5}, {0x5, 0x8}, {0x7, 0x1}, {0x2, 0x5}, {0x2, 0x2}, {0x1, 0x6}, {0x6, 0x7}, {0x1, 0x9}, {0x4, 0x3}, {0x7, 0x2}, {0x5}, {0x1, 0x6}, {0x1, 0x1}, {0x4, 0x9}]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0xa, 0x1b, 0x9, 0x2, 0x12, 0x26, 0x9, 0x24, 0x12, 0x48, 0x60, 0x5, 0x2, 0x16, 0x16, 0x36, 0x18, 0x12, 0x4, 0x0, 0x2, 0x5, 0x36, 0x36, 0x6c, 0x2, 0x36, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x7, 0xa}, {0x5, 0x7}, {0x3, 0x8}, {0x1, 0x7}, {0x0, 0xa}, {0x3, 0x1}, {0x1, 0x3}, {0x1, 0x3}, {0x6, 0x9}, {0x3, 0x5}, {0x4, 0x3}, {0x4, 0x7}, {0x0, 0x6}, {0x4, 0x4}, {0x4, 0x2}, {0x7, 0x5}, {0x6, 0x6}, {0x0, 0x8}, {0x1}, {0x2, 0x2}, {0x3, 0x8}, {0x1, 0xa}, {0x0, 0x7}, {0x3, 0x5}, {0x6, 0x9}, {0x5, 0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x2}, {0x0, 0x1}, {0x7, 0x3}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x6}, {0x2, 0x7}, {0x2, 0x9}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0x2}, {0x2, 0x6}, {}, {0x7, 0x1}, {0x0, 0x5}, {0x0, 0x9}, {0x1, 0x1}, {0x0, 0x8}, {0x3, 0x6}, {0x6, 0x5}, {0x6, 0x2}, {0x5}, {0x6, 0x7}, {0x7, 0x8}, {0x2, 0x6}, {0x3, 0x5}, {0x0, 0x8}, {0x4, 0x5}]}]}, @NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1c, 0x2, [{0x6, 0xa}, {0x0, 0x6}, {0x4, 0x4}, {0x1, 0x9}, {0x0, 0x7}, {0x0, 0x2}, {0x0, 0x4}, {0x3, 0x6}, {0x2, 0x6}, {0x1, 0x5}, {0x4}, {0x1, 0x6}, {0x5, 0x5}, {0x2, 0xa}, {0x0, 0x3}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_HT={0x21, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x9, 0x2, [{}, {}, {}, {}, {}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x160, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x94, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_HT={0x45, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x54, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HE_LTF={0x5}]}]}]}, 0xebc}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) syz_genetlink_get_family_id$l2tp(&(0x7f0000006900), 0xffffffffffffffff) 16:59:14 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x2, &(0x7f0000000040)=@raw=[@initr0], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 671.052443][ T40] audit: type=1804 audit(1655225954.850:874): pid=14620 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/892/file1/bus" dev="loop0" ino=1049027 res=1 errno=0 16:59:14 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0xb, 0x0, 0x0) [ 671.124208][T14631] loop2: detected capacity change from 0 to 87 [ 671.126415][T14631] FAT-fs (loop2): invalid media value (0x00) [ 671.126430][T14631] FAT-fs (loop2): Can't find a valid FAT filesystem [ 671.179305][ T40] audit: type=1804 audit(1655225954.980:875): pid=14631 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir1742540418/syzkaller.Qym0Qm/78/file1/bus" dev="sda1" ino=1152 res=1 errno=0 [ 671.179760][ T40] audit: type=1804 audit(1655225954.980:876): pid=14631 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir1742540418/syzkaller.Qym0Qm/78/file1/bus" dev="sda1" ino=1152 res=1 errno=0 16:59:15 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x10, 0x1402, 0x1}, 0x10}}, 0x0) 16:59:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@ipv4_newnexthop={0x1c, 0x68, 0x1, 0x0, 0x0, {0xa}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) 16:59:15 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200", 0x12}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:59:15 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(0x0, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) [ 671.646933][T14636] loop0: detected capacity change from 0 to 87 16:59:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@ipv4_newnexthop={0x1c, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x4000000) 16:59:15 executing program 1: pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x2, 0xe8, &(0x7f0000000080)=""/232, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0), 0x10}, 0x80) 16:59:15 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), 0xfffffffffffffffe) 16:59:15 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1, &(0x7f00000001c0)=@raw=[@func], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 671.690078][ T40] audit: type=1804 audit(1655225955.490:877): pid=14636 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/893/file1/bus" dev="loop0" ino=1049028 res=1 errno=0 16:59:15 executing program 1: mq_open(&(0x7f0000000400)='[\'{%T*-{\x00', 0x0, 0x0, 0x0) 16:59:15 executing program 3: mq_open(&(0x7f0000000080)='*/\x00', 0x0, 0x0, 0x0) [ 671.742740][T14648] loop2: detected capacity change from 0 to 87 [ 671.744595][T14648] FAT-fs (loop2): invalid media value (0x00) [ 671.744609][T14648] FAT-fs (loop2): Can't find a valid FAT filesystem [ 671.782729][ T40] audit: type=1804 audit(1655225955.580:878): pid=14648 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir1742540418/syzkaller.Qym0Qm/79/file1/bus" dev="sda1" ino=1147 res=1 errno=0 [ 671.787089][ T40] audit: type=1804 audit(1655225955.580:879): pid=14648 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir1742540418/syzkaller.Qym0Qm/79/file1/bus" dev="sda1" ino=1147 res=1 errno=0 16:59:16 executing program 3: r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000100)=[{}], 0x1, 0x7) 16:59:16 executing program 1: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001040), 0x0, 0x0) readv(r0, &(0x7f0000001440)=[{&(0x7f00000014c0)=""/241, 0xf1}], 0x1) 16:59:16 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200", 0x12}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:59:16 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(0x0, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) [ 672.216372][T14659] loop0: detected capacity change from 0 to 87 16:59:16 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x2, 0x0, 0x0, 0x457, 0x0, 0x1}, 0x48) 16:59:16 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x3, 0x0, 0x8, 0x0, 0x1}, 0x48) 16:59:16 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x5, 0x0, 0x0) 16:59:16 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1796c}], &(0x7f0000000040)='GPL\x00', 0x7, 0xd8, &(0x7f0000000080)=""/216, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 672.242729][ T40] audit: type=1804 audit(1655225956.040:880): pid=14659 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/894/file1/bus" dev="loop0" ino=1049029 res=1 errno=0 16:59:16 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x3, &(0x7f0000000000)=@framed={{}, [@jmp, @ldst, @cb_func, @jmp]}, &(0x7f0000001140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0xc6) 16:59:16 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x18, 0x0, 0x17c}) [ 672.317195][T14673] loop2: detected capacity change from 0 to 87 [ 672.323617][T14673] FAT-fs (loop2): invalid media value (0x00) [ 672.323633][T14673] FAT-fs (loop2): Can't find a valid FAT filesystem [ 672.371742][T13400] blk_print_req_error: 46 callbacks suppressed [ 672.371756][T13400] I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 672.371816][T13400] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 672.371852][T13400] I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 672.371894][T13400] I/O error, dev loop2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 672.371929][T13400] I/O error, dev loop2, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 672.371962][T13400] I/O error, dev loop2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 672.372004][T13400] I/O error, dev loop2, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 672.373946][ T40] audit: type=1804 audit(1655225956.170:881): pid=14673 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir1742540418/syzkaller.Qym0Qm/80/file1/bus" dev="sda1" ino=1152 res=1 errno=0 16:59:16 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x19, 0x1, &(0x7f0000000000)=@raw=[@kfunc], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:59:16 executing program 1: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000023c0), 0x0, &(0x7f0000002480)={[{@fat=@dmask={'dmask', 0x3d, 0x80000001}}]}) 16:59:16 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x0, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:59:16 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400", 0x15}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:59:16 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x0, 0x900}, 0x48) [ 672.818886][T14679] loop0: detected capacity change from 0 to 87 16:59:16 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x12, 0x0, 0x0) 16:59:16 executing program 1: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000023c0), 0x0, &(0x7f0000002480)={[{@fat=@dmask={'dmask', 0x3d, 0x80000001}}]}) 16:59:16 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x7, r0, &(0x7f0000000000)={0xd0000018}) 16:59:16 executing program 1: delete_module(&(0x7f0000000040)='\xa5\xd7\x96\xeeC\xbf\xca\"r>\x15ON\xa5\xa3\xa3\xde\xb6i\x8a\xb0\xe1;\x02$\xa3\xd6(\b\x17*\b\\\xed\x8b\x9f\x02m\x8a\x87\x10\x94n\xc1\xb2N\xcd\x13\xd8\xe4\xb0\xc9\xec?k\xc7\v\xca\xc4\rB/\xfa\xf6\x16A\x83\x9cn\x93\xa4\x0fh\xe9k\xdaP\xd3\x18\x8a]\x90\xe7M\xae\xf7\x0f\xb0P\xbb\xf8\x9a\xdaD\x8e\x1dU(\xacVQ \x7f\x0eP\r:yQ\xf0\x97S\xc0\xfbS\x9c\x85#q2\xc5\xd5\"\x9b\xcc\x97\xd3\xa9&\xbd\x006;\x19\xc3\x05\"\x91O\xb5h\xeblT\xf8\xdd\xf6\xa0\xd2\'\\\f\xaf', 0x0) 16:59:16 executing program 1: bpf$PROG_LOAD_XDP(0x12, 0x0, 0x0) [ 672.925366][T14692] loop2: detected capacity change from 0 to 87 [ 672.927921][ T3136] loop2: [POWERTEC] p1 [ 672.928067][ T3136] loop2: p1 start 7627110 is beyond EOD, truncated [ 672.936596][T14692] FAT-fs (loop2): invalid media value (0x00) [ 672.936610][T14692] FAT-fs (loop2): Can't find a valid FAT filesystem 16:59:16 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x0, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) [ 672.973633][T14696] loop0: detected capacity change from 0 to 87 [ 672.990899][T13420] I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 672.990983][T13420] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 672.991040][T13420] I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 16:59:17 executing program 3: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000600)={[{@dmode={'dmode', 0x3d, 0x7000000000000000}}]}) 16:59:17 executing program 1: syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x8c640) 16:59:17 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x0, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:59:17 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400", 0x15}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) [ 673.428510][T14702] loop0: detected capacity change from 0 to 87 16:59:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r1, 0x5c5fe33e6dac8f6d, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x2c}}, 0x0) 16:59:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@ipv4_newnexthop={0x1c, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_FDB={0xa0}]}, 0x1c}}, 0x0) 16:59:17 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x41c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5}, 0x48) [ 673.494520][T14707] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 16:59:17 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000000c0)={@mcast2}, 0x14) 16:59:17 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xf4240, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:59:17 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000b40)={&(0x7f00000007c0)={0xa, 0x4e22, 0x0, @private2, 0x80000001}, 0x1c, 0x0}, 0x0) 16:59:17 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, 0x0) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r3, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) [ 673.566437][T14717] loop2: detected capacity change from 0 to 87 [ 673.567752][T14717] loop2: [POWERTEC] p1 [ 673.567968][T14717] loop2: p1 start 7627110 is beyond EOD, truncated [ 673.568907][T14717] FAT-fs (loop2): invalid media value (0x00) [ 673.568921][T14717] FAT-fs (loop2): Can't find a valid FAT filesystem [ 673.577162][T14719] loop0: detected capacity change from 0 to 87 16:59:17 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x1a8dfc, &(0x7f0000000000)=@raw=[@kfunc], &(0x7f0000000040)='GPL\x00', 0x0, 0xd8, &(0x7f0000000080)=""/216, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:59:17 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000080)=@framed={{}, [@func, @call]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:59:17 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400", 0x15}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:59:17 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, 0x0) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r3, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) [ 674.110793][T14726] loop0: detected capacity change from 0 to 87 16:59:17 executing program 1: clock_gettime(0x0, &(0x7f0000000080)) r0 = io_uring_setup(0x9f9, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x65492ef000, 0x0, 0x12, r0, 0x0) 16:59:17 executing program 3: bpf$PROG_LOAD(0x23, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:59:17 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x100010, r0, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 16:59:17 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x10000000}) 16:59:17 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x49, 0x0, 0x0) 16:59:18 executing program 1: r0 = timerfd_create(0x1, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) [ 674.232192][T14740] loop2: detected capacity change from 0 to 87 [ 674.233592][T14740] loop2: [POWERTEC] p1 [ 674.233702][T14740] loop2: p1 start 7627110 is beyond EOD, truncated [ 674.234358][T14740] FAT-fs (loop2): invalid media value (0x00) [ 674.234371][T14740] FAT-fs (loop2): Can't find a valid FAT filesystem 16:59:18 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xf4240, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x2, 0xe8, &(0x7f0000000080)=""/232, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0), 0x10}, 0x80) 16:59:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x890c, 0x0) 16:59:18 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, 0x0) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r3, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:59:18 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f8", 0x16}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:59:18 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x4, 0x0, 0x4) [ 674.782719][T14747] loop0: detected capacity change from 0 to 87 16:59:18 executing program 1: bpf$PROG_LOAD_XDP(0xc, 0x0, 0x0) 16:59:18 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000000)=@framed={{0x2}}, &(0x7f0000000040)='GPL\x00', 0x2, 0xe8, &(0x7f0000000080)=""/232, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:59:18 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x1d, 0x3, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 674.893820][T14757] loop2: detected capacity change from 0 to 87 [ 674.896237][T14757] FAT-fs (loop2): bogus number of FAT sectors [ 674.896249][T14757] FAT-fs (loop2): Can't find a valid FAT filesystem 16:59:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000200)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TX_RATES={0x324, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xb8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x25, 0x2, [{0x5, 0x9}, {0x0, 0x8}, {0x1, 0x9}, {0x5}, {0x0, 0x7}, {0x0, 0xa}, {0x5, 0x9}, {0x1, 0xa}, {0x4, 0x9}, {0x6}, {0x0, 0x9}, {0x2, 0x8}, {0x4}, {0x4, 0x6}, {0x3}, {0x3, 0x6}, {0x6, 0x2}, {0x4, 0x6}, {0x1, 0x5}, {0x4, 0x1}, {0x7, 0x2}, {0x4, 0x7}, {}, {0x3, 0x3}, {0x2, 0x9}, {0x5, 0x7}, {0x1, 0x7}, {0x2, 0x5}, {0x4, 0x4}, {0x4}, {0x7, 0x7}, {0x2, 0x2}, {0x4, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x4, 0x49, 0x9, 0x16, 0xb, 0x5, 0xb, 0x2, 0x6, 0xb, 0x0, 0x0, 0x28, 0x36, 0x30, 0xb, 0x5, 0x6, 0x12, 0x6, 0x5, 0x24, 0x60, 0x18, 0x60, 0x5, 0x18, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x31, 0x4, 0x3, 0x7fff, 0x8, 0x0, 0xfffd, 0x3]}}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x4, 0x2}, {0x1, 0x2}, {0x7, 0x6}, {0x7, 0x7}, {0x1, 0x8}, {0x0, 0xa}, {0x3, 0xa}, {0x0, 0x3}, {0x2, 0x8}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x5, 0x7}, {0x2, 0x2}, {0x0, 0xa}, {0x5, 0x6}, {0x1, 0x1}, {0x4, 0xa}, {0x4, 0x7}, {0x1, 0x9}, {0x1, 0x5}, {0x5, 0x7}, {0x1, 0xa}, {0x2, 0x7}, {0x1, 0x6}, {0x3, 0x2}, {0x4, 0x8}, {0x7, 0x4}, {0x6, 0x2}, {0x7, 0x1b}, {0x1, 0x4}, {0x0, 0x2}, {0x3, 0xa}, {0x3, 0xa}, {0x6, 0x8}, {0x1, 0x3}, {0x4, 0x4}, {0x1, 0x8}, {0x3, 0x3}, {0x6, 0x9}, {0x7, 0x2}, {0x4, 0x8}, {0x6, 0x8}, {0x4, 0x2}, {0x5, 0x5}, {0x2, 0x1}, {0x1, 0x5}, {0x3, 0x2}, {0x1, 0x4}, {0x6, 0xa}, {0x1, 0x5}, {0x1, 0x4}, {0x3, 0x2}, {0x1, 0x3}, {0x7, 0x9}, {0x0, 0x6}, {0x1}, {0x0, 0x6}, {0x0, 0x4}, {0x6, 0x1}, {0x4, 0x1}, {0x7, 0x6}, {0x1, 0x1}, {0x6, 0x1}, {0x4, 0x3}, {0x2}, {0x3, 0x5}, {0x0, 0xa}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x39, 0x2, [{0x6, 0xa}, {0x6, 0x6}, {0x2, 0x9}, {0x1, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1, 0x1}, {}, {0x1, 0x4}, {0x3, 0x2}, {0x3, 0x6}, {0x7, 0x1}, {0x6, 0x6}, {0x4, 0x6}, {0x6, 0x6}, {0x0, 0x3}, {0x4, 0x4}, {0x1, 0x6}, {0x2, 0x9}, {0x5, 0x4}, {0x4}, {0x4, 0x8}, {0x1, 0x1}, {0x3}, {0x0, 0x4}, {0x7, 0x9}, {0x2, 0x2}, {0x7, 0x5}, {0x3, 0x8}, {0x6, 0x5}, {0x0, 0x8}, {0x2}, {0x4, 0x4}, {0x1, 0x2}, {0x5, 0x2}, {0x3}, {0x6, 0x6}, {0x1, 0x8}, {0x1, 0x3}, {0x7, 0x1}, {0x2, 0x1}, {0x7, 0x4}, {0x3, 0x8}, {0x3, 0x1}, {0x1, 0x5}, {0x4, 0x6}, {0x2, 0x8}, {0x5}, {0x2, 0x4}, {0x5, 0x9}, {0x5, 0x3}, {0x4, 0x9}, {0x7, 0x2}]}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6c, 0x12, 0x12, 0x24, 0x16, 0x0]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x101, 0x5, 0x83f, 0x0, 0x1ff, 0x6, 0x24]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x6, 0x4}, {0x7, 0x3}, {0x5, 0x6}, {0x0, 0x2}, {0x2, 0x7}, {0x0, 0x1b}, {0x1}, {0x6, 0x2}, {0x7, 0x1}, {0x5}, {0x3, 0x9}, {0x5, 0xa}, {0x5, 0x7}, {0x5, 0x5}, {0x3, 0xa}, {0x2, 0x7}, {0x6, 0x3}, {0x5}, {0x7, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0x5, 0x2, 0x3, 0x2, 0x0, 0x5, 0xffff]}}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x2, 0xb, 0x12, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_6GHZ={0xac, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0xd, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x49, 0x2, [{}, {}, {}, {0x7, 0x6}, {0x4, 0x6}, {0x5, 0x7}, {0x3, 0x8}, {0x6}, {0x1, 0x9}, {0x4, 0x6}, {0x7, 0x9}, {0x6, 0x7}, {0x0, 0x8}, {0x0, 0x9}, {0x1, 0x5}, {0x4, 0xa}, {0x3, 0x3}, {0x5, 0x2}, {0x1, 0x9}, {0x7, 0x8}, {0x5, 0x8}, {0x7}, {0x1, 0x8}, {0x6, 0x8}, {0x0, 0x3}, {0x5, 0x2}, {0x7, 0x2}, {0x7, 0x4}, {0x0, 0x6}, {0x2, 0x8}, {0x4}, {0x7, 0x9}, {0x2, 0x3}, {0x3, 0x1}, {0x5, 0x8}, {0x1, 0x5}, {0x1, 0x6}, {0x1, 0xa}, {0x1}, {0x4, 0xa}, {0x0, 0x5}, {0x1, 0x7}, {0x0, 0x3}, {0x7, 0x8}, {0x3, 0x1}, {0x3, 0x8}, {0x4, 0x1}, {0x7, 0x8}, {0x6, 0x3}, {0x7, 0x8}, {0x2, 0x4}, {0x0, 0x5}, {0x7, 0x5}, {0x6, 0x5}, {0x1, 0x6}, {0x6, 0xa}, {0x1, 0x2}, {0x1}, {0x7, 0x3}, {0x6, 0x7}, {0x6, 0x6}, {0x3, 0x5}, {0x1, 0x6}, {0x2, 0x5}, {0x4, 0x1}, {0x0, 0x6}, {0x5, 0x8}, {0x5, 0x3}, {0x4, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x240, 0x9c5, 0xd73c, 0xb5a7, 0x4000, 0xfe00, 0xef30, 0x50]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xed3a, 0x8, 0x2, 0x0, 0x9, 0x1, 0x1, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x4, 0x3, 0x2, 0x5, 0x400, 0x8001, 0x24]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x18, 0x12, 0x5, 0x24, 0x1, 0x1b, 0xc, 0x0, 0x2, 0x5, 0x36, 0x36, 0x6c, 0x60, 0x1, 0xb, 0x6d91f8cff226f97d, 0x6c, 0x24, 0x1b, 0x6c, 0x0, 0x0, 0x3]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x5, 0x9, 0x5, 0xc, 0x5, 0x3, 0x1, 0x16, 0x60, 0x30, 0x1b, 0x61, 0x6, 0x48, 0xc, 0x6, 0x30, 0x12, 0x24, 0x18, 0x2, 0x18, 0x16, 0x1, 0x60, 0x30, 0x18, 0x4, 0x5, 0x4, 0x48]}]}]}, @NL80211_ATTR_TX_RATES={0x354, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x4, 0x8}, {0x0, 0x4}, {0x6, 0x8}, {0x1, 0x3}, {0x2, 0x3}, {0x6, 0x9}, {0x1, 0xa}, {0x2, 0x7}, {0x3, 0x1}, {0x7, 0x1}, {0x1, 0x6}, {0x6, 0x6}, {0x5, 0x8}, {0x0, 0x1}, {0x1, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x9, 0x9, 0x2, 0x0, 0x6, 0x4, 0x80]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0xb8, 0x8000, 0x3ec7, 0x6, 0x4, 0x100, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xff, 0xc58e, 0x4, 0x98, 0x2, 0xffff, 0x1000]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xffff, 0x4, 0x3, 0x5, 0x5, 0x2, 0x4]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x1, 0x36, 0x3, 0x0, 0x3, 0x4, 0x16, 0x5, 0x60, 0x6, 0x60, 0x5, 0x2, 0x48]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x10c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7, 0x9a, 0x0, 0x237, 0x400, 0x4, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x3ff, 0xffff, 0x2, 0x2, 0x7f, 0x4, 0x2d]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x36, 0x18, 0x1b, 0x18, 0x1b, 0x30, 0x1b, 0x16, 0x0, 0x3, 0x6, 0x1, 0x0, 0x60, 0x1, 0x18, 0x6c, 0x3, 0x1, 0x18, 0x0, 0x2e301866849c7dcd, 0x1b, 0x2]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x5, 0x1000, 0xffff, 0x0, 0x7f, 0x3, 0xffd3]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x36, 0x1, 0x60, 0x0, 0x8952f3c8f6ba6bf5, 0x30, 0x6, 0x16, 0x12, 0x2, 0xb, 0x60, 0x1b]}, @NL80211_TXRATE_HT={0x51, 0x2, [{}, {0x2, 0x9}, {0x2, 0x7}, {0x3, 0x6}, {0x0, 0x2}, {0x3, 0x5}, {0x1, 0x4}, {0x1}, {0x5, 0x5}, {0x1, 0x2}, {0x0, 0x6}, {0x5, 0x7}, {0x2, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x5, 0xa}, {0x6, 0x8}, {0x2, 0x8}, {0x3, 0x6}, {0x1, 0x5}, {0x3, 0x6}, {0x2, 0x4}, {0x7, 0x9}, {0x1, 0x7}, {0x1, 0x2}, {0x0, 0x6}, {0x1, 0x3}, {0x0, 0x8}, {0x1, 0xa}, {0x5, 0x8}, {0x3, 0x7}, {0x6, 0x3}, {0x3, 0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x1, 0x9}, {0x7, 0x1}, {0x1, 0x7}, {0x0, 0x6}, {0x0, 0x2}, {0x0, 0x7}, {0x6, 0x8}, {0x7, 0x9}, {0x5, 0x3}, {0x2, 0x6}, {0x1, 0x3}, {0x4, 0x9}, {0x1, 0x9}, {0x4, 0x8}, {0x2, 0xa}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x7, 0x5}, {0x6, 0x5}, {0x7, 0x5}, {0x6, 0x3}, {0x7, 0xa}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x3}, {0x0, 0x9}, {0x1, 0x3}, {0x7, 0x5}, {0x2, 0x1}, {0x0, 0x6}, {0x1, 0x5}, {0x2, 0x5}, {0x5, 0x4}, {0x2, 0x8}, {0x3, 0x9}, {0x1, 0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x6}, {0x1, 0xa}, {0x6, 0x9}]}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x6, 0x4}, {0x5, 0x5}, {0x1, 0x2}, {0x5, 0x9}, {0x4, 0x6}, {0x1}, {0x3, 0x4}, {0x1, 0x2}, {0x1, 0x1}, {0x0, 0x9}, {0x5, 0x7}, {0x7, 0x1}, {0x2, 0x1}, {0x1, 0x4}, {0x3}, {}, {0x5, 0x5}, {}, {0x2, 0x1}, {0x6, 0x5}, {0x1, 0x9}, {0x2, 0x4}, {0x3, 0x9}, {0x3}, {0x0, 0x3}, {0x4, 0x8}, {0x6, 0x4}, {0x3, 0x2}, {0x0, 0x5}, {0x3, 0x2}, {0x7, 0x1}, {0x1, 0x3}, {0x2, 0x1}, {0x4, 0x4}, {0x1, 0x9}, {0x3, 0xa}, {0x3, 0x2}, {0x1, 0x2}, {0x2, 0x3}, {0x3, 0xa}, {0x1, 0x4}, {0x5, 0x6}, {0x4, 0x8}, {0x3, 0x7}, {0x1, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x16, 0x24, 0x24, 0xb, 0x2, 0x5, 0x36, 0x48, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x101, 0x1000, 0x800, 0xd4, 0x2, 0xc56, 0x7f]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0xc8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0x87d3, 0x1, 0x5, 0x1000, 0x3e, 0x1, 0x8]}}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x1, 0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x2}, {0x3, 0x6}, {0x3}, {0x4, 0x1}, {0x2, 0x9}, {0x1, 0x1}, {0x1}, {0x0, 0x9}, {0x7, 0x7}, {0x4, 0x7}, {0x5, 0x6}, {0x2, 0x5}, {0x3, 0x8}, {0x0, 0x6}, {0x5, 0x9}, {0x1, 0x3}, {0x5, 0x5}, {0x5, 0x8}, {0x7, 0xa}, {0x4, 0x4}, {0x0, 0x1}, {0x1, 0x6}, {0x2, 0x1}, {0x4, 0xa}, {0x2, 0x4}, {0x6, 0x9}, {0x3, 0x4}, {0x0, 0xa}, {0x7, 0x1}, {0x6, 0x6}, {}, {0x7, 0x1}, {0x4, 0x9}, {0x1, 0x6}, {0x2, 0x4}, {0x7, 0x6}, {0x6, 0x4}, {0x1, 0x8}, {0x2, 0x3}, {0x2, 0x3}, {0x4, 0x4}, {0x5, 0x8}, {0x5, 0x4}, {0x3, 0x4}, {0x3, 0x3}, {0x3, 0x6}, {0x7, 0x8}, {0x4, 0x8}, {0x0, 0x9}, {0x7, 0x5}, {0x0, 0x1}, {0x4}, {0x2, 0x6}, {0x2, 0xa}, {0x2, 0x3}, {0x6}, {0x7, 0x2}, {0x2, 0xa}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x18, 0x60, 0xc, 0x36, 0x18, 0x5, 0x36, 0x2, 0xdb2bce05fc39ab25, 0x5, 0x18, 0x4, 0x36, 0x9, 0x6c, 0x1, 0x3, 0x6c, 0x9, 0x3, 0x48, 0xb, 0x1b, 0x16, 0x16, 0x1, 0x6c, 0x9, 0x1, 0x19, 0x4, 0x12]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x6, 0xbb88, 0x1, 0x6, 0x7, 0x0, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x75, 0x0, 0x6, 0xeb, 0x7ff, 0x9, 0x0, 0xf279]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xd8a, 0x6, 0x7, 0x7fff, 0xffff, 0x37ae, 0x1, 0x1ff]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x5}, {0x7, 0xa}, {0x5, 0x7}, {0x0, 0x9}, {0x7, 0x9}, {0x6, 0x5}, {0x0, 0x3}, {0x5, 0x7}, {0x4, 0x6}, {0x0, 0x3}, {0x3, 0x6}, {0x7, 0xa}, {0x7, 0xa}, {0x5, 0x9}, {0x7, 0xa}, {0x0, 0x4}, {0x4, 0xa}, {0x0, 0x8}, {0x1, 0x3}, {0x1}, {0x7, 0x4}, {0x7}, {0x6, 0x7}, {0x3, 0x5}, {0x5, 0xa}, {0x6, 0x8}, {0x6, 0x3}, {0x4, 0x4}, {0x6, 0x4}]}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x6c, 0x12, 0x36, 0x18, 0x60, 0x3, 0x12, 0x30, 0x60, 0xb, 0x4, 0x18, 0x9, 0xc, 0xc, 0x4, 0x12, 0x5, 0x12, 0x18, 0x2, 0x6c, 0x18, 0x36, 0x37]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x12, 0x36, 0xa5f2a85903f2b0ed, 0x24, 0x6c, 0x48, 0x6, 0x18, 0x48, 0x18, 0x18, 0x48, 0xb, 0x4, 0x18, 0x16, 0x36, 0x18]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x138, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x14, 0x2, [{0x1, 0x5}, {0x0, 0x3}, {0x0, 0xa}, {0x3, 0x5}, {0x4}, {0x2, 0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x1, 0x3}, {0x3, 0x9}, {0x3, 0x7}, {0x1, 0x1}, {0x6}, {0x2, 0x8}, {0x7, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x4, 0x1, 0x48e0, 0xb7, 0x4, 0x9]}}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x36, 0x60, 0x2, 0x0, 0x25, 0xc, 0x36, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x15, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x0, 0x39, 0xb, 0x24, 0x1, 0x60, 0x2, 0x3, 0x30, 0x60, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa4db, 0x0, 0x64fd, 0x6, 0x808, 0x7f, 0x0, 0x401]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7, 0x9, 0x4, 0x7, 0x1000, 0x1ff, 0xfff]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x6, 0x36, 0x60, 0x36, 0x12, 0x2, 0x18, 0x48, 0x5, 0x5, 0x36, 0x1b]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x351c, 0x0, 0x8, 0x5, 0x0, 0x200, 0x20, 0x1ff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x538, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x36, 0x1b, 0x4, 0x6c, 0x39, 0x0, 0x1b, 0x1b, 0x3, 0xc, 0xc]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x400, 0xffff, 0xaa56, 0x4, 0x20, 0x7, 0x4]}}]}, @NL80211_BAND_5GHZ={0xf4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x6, 0x7}, {0x1, 0x4}, {0x5, 0x7}, {0x5, 0x6}, {0x3, 0x5}, {0x1, 0x4}, {0x2, 0x7}, {0x7}, {0x0, 0x9}, {0x1, 0x6}, {0x7, 0x8}, {0x2, 0x6}, {0x3, 0x1}, {0x5, 0x9}, {0x6, 0x4}, {0x4, 0x3}, {0x0, 0x3}, {0x6, 0x3}, {0x0, 0x9}, {0x2, 0x8}, {0x4, 0x8}, {0x1, 0x3}, {0x5, 0x8}, {0x5, 0x8}, {0x7, 0x8}, {0x2, 0x2}, {0x1, 0x1}, {0x0, 0xa}, {0x7, 0x2}, {0x0, 0x5}, {0x4, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_HT={0x4d, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7}, {0x7, 0x8}, {0x4, 0xa}, {0x3, 0x1}, {0x0, 0x7}, {0x0, 0x9}, {0x7, 0x3}, {0x4}, {0x6, 0x3}, {0x1, 0x7}, {0x6, 0x6}, {0x3, 0x6}, {0x5, 0x3}, {0x7, 0x2}, {0x6, 0x1}, {0x6}, {0x0, 0x1}, {0x1, 0xa}, {0x0, 0x3}, {0x4, 0xa}, {0x7, 0x6}, {0x1, 0x7}, {0x0, 0x1}, {0x1, 0x2}, {0x0, 0x9}, {0x3, 0x8}, {0x1, 0xa}, {0x6}, {0x2, 0x5}, {0x2}, {0x0, 0x1}, {0x2, 0x2}, {0x1, 0xa}, {0x6, 0x3}, {0x7, 0x2}, {0x2}, {0x7, 0x4}, {0x1, 0x5}, {0x4, 0x3}, {0x4, 0x9}, {0x3, 0x3}, {0x5, 0x7}, {0x4, 0x6}, {0x0, 0x7}, {0x3, 0x2}, {0x4, 0x7}, {0x0, 0x5}, {0x4, 0x5}, {0x1, 0x6}, {0x3, 0xa}, {0x1}, {0x3, 0x4}, {0x1, 0xa}, {0x0, 0x6}, {0x6}, {0x3, 0x4}, {0x4, 0x1}, {0x6, 0x9}]}]}, @NL80211_BAND_5GHZ={0xb4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x5, 0x8, 0x1, 0x8, 0x4, 0xda, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3f, 0x9, 0x80, 0x2, 0x400, 0x7ff, 0x1000]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x9, 0x1, 0x3f, 0xfc01, 0xfff9, 0x5, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x30, 0xb, 0x2, 0x1b, 0x3, 0xb, 0x12, 0xb, 0x0, 0x24]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x165a, 0x7, 0x3, 0x0, 0x5, 0x698f, 0x2, 0x5]}}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x6, 0x8}, {0x3, 0x2}, {0x2, 0x8}, {0x0, 0x9}, {0x0, 0x4}, {0x3, 0xa}, {0x2}, {0x3, 0x3}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0x9}, {0x3, 0xa}, {0x0, 0x3}, {0x3}, {0x1, 0xa}, {0x2, 0x3}, {0x1, 0x1}, {0x6, 0x7}, {0x1, 0x4}, {0x4, 0x5}, {0x1, 0x4}, {0x2, 0x4}, {0x3, 0x4}, {0x2, 0x8}, {0x0, 0xa}, {0x4, 0x3}, {0x1, 0x5}, {0x1, 0x5}, {0x2, 0x1}, {0x0, 0x6}, {0x0, 0x5}, {0x3, 0x3}, {0x7, 0x2}, {0x6, 0x4}, {0x4, 0x9}, {0x0, 0xa}, {0x7, 0x8}, {0x5, 0x4}, {0x6, 0x3}, {0x0, 0x8}, {0x7, 0x4}, {0x4, 0x3}, {0x4, 0x1}, {0x5, 0x7}, {0x0, 0x9}, {0x3, 0xa}, {0x7, 0x8}, {0x1, 0x6}, {0x1}, {0x3, 0x9}, {0x0, 0x2}, {0x7, 0x2}]}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1f, 0x3, 0x7fff, 0x9f1b, 0x101, 0x9, 0x5, 0x2]}}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x3, 0x4}, {0x5}, {0x6, 0x8}, {0x5, 0x2}, {0x4, 0x3}, {}, {0x4, 0xa}, {0x0, 0x9}, {0x4, 0x1}, {0x1, 0x3}, {0x7, 0x8}, {0x4, 0x8}, {0x0, 0x1}, {0x1, 0x6}, {0x0, 0x3}, {0x1, 0x4}, {0x7, 0x9}, {0x1, 0x3}, {0x7, 0x6}, {0x7}, {0x7, 0x1}, {0x5}, {0x7, 0x3}, {0x7, 0x3}, {0x1, 0x1}, {0x4, 0x7}, {0x7, 0x9}, {0x6, 0x5}, {0x6, 0x1}, {0x5, 0xa}, {0x4, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x2, 0x5}, {0x3, 0x3}, {0x7, 0x2}, {0x0, 0x2}, {0x4, 0x2}, {0x4, 0xa}, {0x3, 0x2}, {0x5, 0x3}, {0x3, 0x8}, {0x5, 0x6}, {0x7, 0xa}, {0x0, 0x2}, {0x5, 0x8}, {0x1, 0x7}, {0x4, 0x4}, {0x3, 0x3}, {0x3, 0x9}, {0x1, 0x2}, {0x0, 0x2}, {0x3, 0x1}, {0x1, 0x9}, {0x4, 0x7}, {0x2, 0x6}, {0x7, 0x5}, {0x0, 0x3}, {0x5, 0x1}, {0x3, 0x5}, {0x7, 0x3}, {0x5}, {0x3, 0x1}, {0x0, 0x2}, {}, {0x6, 0x7}, {0x6}, {0x7, 0x9}, {0x4, 0x3}, {0x7, 0x9}, {0x0, 0x3}, {0x5, 0x5}, {0x3, 0x1}, {0x3, 0x4}, {0x1, 0x2}]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x1, 0x5}, {0x4, 0x8}, {0x5}, {0x6, 0xa}, {0x1, 0x3}, {0x0, 0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3, 0x5}, {0x1, 0x8}, {0x1, 0xa}, {0x5, 0x5}, {0x6, 0x1}, {0x7, 0x9}, {0x0, 0x6}, {0x1, 0x8}, {0x3, 0x1}, {0x4, 0x7}, {0x6, 0x3}, {0x0, 0xa}, {0x5, 0x7}, {0x5, 0xa}]}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x2, 0x0, 0x7, 0x1, 0x1, 0x7ff, 0x6]}}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x5, 0x2}, {0x2, 0x8}, {0x5, 0x3}, {0x1, 0x4}, {0x7, 0x1}, {0x1, 0xa}, {0x7, 0x1}, {0x3, 0x4}, {0x2, 0x7}, {0x7, 0x7}, {0x4, 0x8}, {0x3, 0x2}, {0x1, 0x7}, {0x6, 0x5}, {0x1}, {0x0, 0x7}, {0x2, 0x7}, {0x3, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x12, 0x60, 0x2, 0x3, 0x60, 0x6, 0x16, 0x4, 0x24, 0x30, 0x9, 0x30, 0xc, 0x12, 0x48, 0x1b, 0x6, 0x36, 0x48, 0x24, 0x48, 0x1b, 0x4, 0x36, 0x3, 0x30, 0x6c, 0x16, 0x60, 0x30, 0xe]}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x6, 0x5, 0x18, 0x12, 0x60, 0x1, 0x48, 0x1]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x48, 0x1, 0x60, 0x6c, 0x2, 0x6, 0x2, 0x44, 0x16]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x8, 0x0, 0xd703, 0x2bd, 0x5b5e, 0x9, 0x1ff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x1, 0x6}, {0x5}, {0x1}, {0x1, 0x5}, {0x1, 0x8}, {0x7, 0x1}, {0x3, 0x9}, {0x4, 0xa}, {0x6, 0x7}, {0x0, 0x8}]}]}, @NL80211_BAND_6GHZ={0xdc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x2, 0x7}, {0x1, 0x9}, {0x6, 0x1}, {0x4, 0x2}, {0x0, 0x5}, {0x4, 0x3}, {0x2, 0x1}, {0x5}, {0x1}, {0x1, 0x4}, {0x7, 0xa}, {0x1, 0x5}, {0x4, 0x2}, {0x5, 0x6}, {0x0, 0x5}, {0x1, 0x2}, {0x5, 0x1}, {0x5, 0x3}, {}, {0x0, 0x2}, {}, {0x2, 0x6}, {0x0, 0xa}, {0x4, 0x7}, {0x1, 0x6}, {0x0, 0x7}, {0x0, 0x3}, {0x6, 0x9}, {0x3, 0x6}, {0x7, 0x2}, {0x0, 0x3}, {0x7, 0x5}, {0x1, 0x5}, {0x2, 0x9}, {0x4, 0x4}, {0x4, 0xa}, {0x2}, {0x4, 0x3}, {0x6, 0x2}, {0x5, 0x9}, {0x0, 0x5}, {0x1, 0x2}, {0x4, 0x8}, {0x2, 0x1}, {0x7, 0x5}, {0x6, 0x8}, {0x3}, {0x3, 0x5}, {0x7, 0x3}, {0x2, 0x2}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x2}, {0x7, 0x8}, {0x4, 0x1}, {0x1, 0x9}, {0x2, 0x2}, {0x0, 0x5}, {0x4, 0x9}, {0x7, 0x1}, {0x4, 0x4}, {0x6}, {0x6, 0x5}, {0x5, 0x8}, {0x7, 0x1}, {0x2, 0x5}, {0x2, 0x2}, {0x1, 0x6}, {0x6, 0x7}, {0x1, 0x9}, {0x4, 0x3}, {0x7, 0x2}, {0x5}, {0x1, 0x6}, {0x1, 0x1}, {0x4, 0x9}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0xa, 0x1b, 0x9, 0x2, 0x12, 0x26, 0x9, 0x24, 0x12, 0x48, 0x60, 0x5, 0x2, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x39, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1d, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_HT={0x21, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x9, 0x2, [{}, {}, {}, {}, {}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x160, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x94, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_HT={0x45, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x54, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HE_LTF={0x5}]}]}]}, 0xec4}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) 16:59:19 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x24, 0x0, 0x7000000) 16:59:19 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r3, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) [ 675.335737][T14762] loop0: detected capacity change from 0 to 87 16:59:19 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f8", 0x16}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:59:19 executing program 3: syz_io_uring_setup(0x52c, &(0x7f0000000180), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6ead, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 16:59:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="3d5e4e9d4e7e5fffc5ec2f4817d823a337b6a5f5fe2d6d02b6a26e129c3cdf79bb5f3aa327f14d514ff057683c1c5fcda82583078e72927617af7070", 0x3c}, {&(0x7f0000000040)="47167e4e93775e57dae83d6ea618d77a627fa349e29a63c21bd9a7f5aa555107b269ad0be5c350271b505b", 0x2b}, {&(0x7f0000000600)="cfda75bca00e748d382eeb1058bb80911320d925b9b3a63496d1cb271e14bb39a17788b34c768fff3907f0006a9e6cd733ccf385012c102905f981c2833c5a6acdc262e40862b1c8cd2279caafc413208f551907363701d8d515b8372b818f64627575aa476aeb18dbbd9350b7b550849b20178b116cb1169b50f336fc30df712db7aa6b25a8527d61d48ad9577d7952788e33e7111fba8c3bb809f167e5d778a55894dc12b02ecdda6f85ba1b5e3ac23df74de5feacd241647e4181c42cc616e8a10f961edbbb4c3afdb4c46cb02f01cae0fe36359400868f42686b544b35b0bfc10895eda45debbdec17565ba6df170d19316a654b9ff4f3e33980f74ccb281dd14e663c9eff99d6288a336e24664589ddbeca7000b620ea40d531f7b5f6cf8cb172a5a6ee2a48ae99c1c31ac0d0678a7feb35e3167e8c3b29341f3060e04ab1d444a997d2b5e5d25635662e4955b53c635086cc83eba32c9f492c8cea9e810fb90b1fc2f7a76bc870e1206e0294038cc14a7f612db7f2dfdf637264ff726b87715c2a45a56ffd1842c21cee5175584103f10fb7b0770ea2e806a3b6932195df1231da1227bcf1594fb7075faae8d15ac57e31d833feb326e81fac9e1882296f4da993aacb3d667bed10d8317b1646f84c36619babc12a71f5495b981949ea80948d93d1ad8ffe88ab491897d3de4728fbff66e48af3db4bbdb10486a3beb73ab151e80f5b49cd62f699dcee09e80808978daea1e0c6f1e727787a8bd76182a45785e34d788e28b3605785a26736e1fad4c8f1f33a66899f8882fe32c0d8a8e1ecfe8e7fc5b1e14e5702db15dbb63152643df1b47c96060deea6909909b0248fb11ff194411023d117b0a1e70c7bb2a1e8dfc5d3692c3e3d9397ff34293c367b147497f5f12df0fad0e0cd11d1d6a5377bf75e5756cf74f79a04465948bc421ba4e7fa71687845301cb2b668cab4b0eaf91a6712140092061186e288ef0f4b46cf6fc69cc44bd971ba39d762ef9c1e4987d9baff5be2d8b76f240d0910ec43fea2b85b09ed2922fffbcfa0d9126bc278b47c9eb28b3acbb7919db1fd6e4c83a0bcd811171258ce4bd077cd62c065fbaf88964f95e29dae4ca3775e08b420d1aa172dab8a5d2c00ef9cebe42bbbd82b62a38dba774dff1e6a1ccbabd0d718f5a2036ab59650252375b7dfdda511d7e6c2135764da1fb9a4c488d7fa28e103d402a0cb7a90b4166c2f972115b4004e39014d7b90f24a61fb63a749a757dedc0763148d85b4fdb1dbd8fe57b1bf0590c6b5664a58ae737d69192ef0102df11b88797c248e300d3ca2cb2c01328faefef8a56c2ab47d5c0ba5e579493ea0074bc36af619dd5fba80c902e732f4e41df39b0c914ed1f353b62bb9d42d9ed7d45a248fa6b21e606f59fb1a7a8c125f7e692e46f0b26f0c81fccb0a059f8534faa84ad4aa8e8fc66f7c931b6e98fd5be640a6491eedb04415c57fb76a7d16e5e5ead549581b411bd249199c5c7ca8d91efb191ee078c8574b879df638f784fe74a559c0ef365e68074c87cab434637faf1f40f0a2694e40892c70e027bc658163c9129713fb67bf23ec1c9a5e64c60410e90b6b8f4f6c5a56a5fd93a712adec1682f3908731c9098072155bbb2dec0f8dbfd7dc2c0681bf1a8751635afd897298ae72b3b3f5c91d5f55ccc01c0a05ece4226eecb76dd80bc613499071bd9b3c3fd28eaac55ebff58e7fddbd951b304b1bb9edac49bbec468bf8be5d9ae7661e21536fb0812844c32144b0fc99a13e6fad7a929f860409752fe350951fc0e55b1bc084d22eea23d784c72ce8bdbc0750e8ab9343ee11a1a3c70182a5a25021ed6b318675b9e4897490ef373af042df058203335c22131b9dfdab0188c06985b9c661f9bcd63b82b6806d8699c5d9d09769361e0d3c8ee8eaa3d30319676532d2cc33c0fcc9b480609858774158f41f26e65f789a2e63914a5dd238c012bc6c7b25e29323993bd9c9865694997f8c3d68c541e4961d41a917089fdd312767fec4278262da46e19cd1e53dfc084338a29b4a7e70860a17cfe8d7031954981732e7efb8250fb831fd8d223242e0b187729b8a78d4dc265650095789e385063d730e28231d023acf6fe9f766d0bdb54ca76cafe709d5fad9d6b8408a5ddfecaacf2f8b36f30ec3153416b1d1ae7c97514f935a1466f0fde26780e32aaca631fc5d0e9bac15895ccb715b2490046ad797353ee0063e17c48bd8dd2bbca80b678f19b45fa693da0e41738af6f8c57b15d3c80422f4a8e96e464703b24c788c384b0dcb3fb40ac89ccb55586636ef71b264c01812727ddeea79f89626170fe1be6ed90410bba8d0b66f7f6394766e943cbb968a763e00739b61932551234ccc91048ab20d1f01d4cd7caab0638f6991668ae7aee468730444952225fd561e23c4a8b906645d16848172d7f3d5f39e77b85f1b43d0fb24b45e248c54331fc6eaf35e74881d7e095b0df05fd17c6ce59eb3f24c00ce00004908bb8f897048ca2bba3fbf401a219abdcbc4f7350d0c4b7ae9f296b352f923ab7c9c20fb2afa622039328d8f66e8bf2b4fbcd8f600c1e742c2624879c889585f444811fc54e2ee9f523eb556924fb6c040094ef921dcb842aca5fec72ef1451ade18b6a26e478ee43bfa2fe4c4a7c6d6d4921ecccadf353649409bf676d3f8f9da3e6f1d5ae9db91c2d3512c4a98e836c373ee89855d5100249e735b084318cbe3d10d7c0e95ff2efec2755cec6ffad7af1d181393d8bd11a6629bf4e82b2d3e63b6674d8467a9d0f6985cb3e1a4643cb8c5f5ba7e74987618e3cea065dcf744e812bc34c60db4b13424da4025641ebdf038ee12aac7b9467630c739c90215279db60767705a9e0c06b1b6748330db462ba48d75c76d510e645dda09be8ba7a5d49badce392760e4911cd9866c7708dbdd7a29422e6ddb13a7accd18083bc4e6829fc6307fe347ed7f3571709ce58b922fb3320963259fa3ecf9aa653e9b25b19916c18e837fbba4ec7cd589fd22ff082f132e67741cc425368b8e89f92b98c3b93c1202f677856733a64f36a28c5c55c54b9a94ad5e54b229f812323289b0adc29b511a462d68b98f3d53d2029b1e270d575b0375d4101402c6c797509459691df721ca600c65f55cb32ddba8f3f4ca09b90ecd8473d95b35b7b16e265f834fb6b15b1cd28d5656e4f2e8de5c0eadadb4677650ab34a2f06dcbaf507f25d8ba1f835e3f36f6944b4a01e3d559cbd7e2a348676bf7daec0496ed5f9adcf7351fdb4dca8acce59116b61d643e66d4102917ac8f82c2d89f1843ad5faa81912c660069ce5c62f557ce721b34eb961197d2d6e170439c6582fae0cb353f709c2f934dbe3da3522e515ae2ab39c586d959f076914ccf9bcff9a596832f278221ce7ca44f0f5962d63dfe57c31bf571b857e780923213c3deb948c97b1f17bffaeba09ed648ef779bfea6f1df4fa481e949f0b6109572f6fe6f155e8d0582c447b6fd3fc4faca4b03b94c0f31ab8c3f176b2dfb3cc3ecaa9543ae35f7a9a4aea0edce0879d668b75f059b2e86e3fc070f9646c2a53be07a248e7af5584df02274da917fc1e385e6aa63a0b3e2279bc079fd88d83897f118f3083aade6f5cb0186093a990b95ecd2a0aae29df2a1413f4134eee4d10848ff645ca9f985beca1b5e19f83cd3e055907689d33d1ded850f9f4f1d9fee7b78241c3bceff3a55fdedab383589dd48e19d3b7189ab9740b9704be35a37da340411a43cb5b7bcb4f8512e7e2d8b235f86f6fbb38bc270099c9f8afcabf6ce923dc63deae5aa25dc2330369ed98646c2b2f60bcc387d3becbcfd4b8c1a54d0e0ac14163eea9f9b448d40a79be306779f19f1b2a35c91331703a5c350e5116e2b6ee70f29efd89dbba4b7d7db25690e3eba6330fc7655842e4b300af5b21aa20d84c70b122f9441b91685b7bc58e214c0810ee3dd1db8482b508c419ce7e8dbc55959f6be66677a7a783019e31a7ff903f7fe7de965eedac29dbff55013f4a7d81a60abfbe09a4e60c7a0c290eba040eddad556ba419be1641ad8c90ccd5fb2248b8a3267f69fec6e6cabe75a6ea0fd2eb26fb86786d0e20faec8c48edc7df04840bb893f07760b321cb0a66bbfa8016500eaa2baf3d31bfb1bcd615896da1aa6225e9514f638221a8a2dccf1fd14c42af4331d0c5d01de107235c70974baf7895e177905ac04b37a5d592cdedad9917433db66712195d961cb679997117453463ae8eb583adfc15b9a24733ff53520c78e45240d81b3f3922d5c0ebe5bb79b2102991d78c6f2759cee461cab93896392841fc6b2030ee3e63a00cfa773697886b6807ef83babbecaef98423edbabe2a5105d1243ce971206b9909c47df5743e6ad8c412c1e5c987e703eacc4588cca10907a65472a677e4a68d637095390dc2068fe64d0af99e9d2878fb35a8b8e43370a36eed31bd8c7882ee6a87032a638ef46a678f3146dc5ae1035d1ff27e713dd1be1666cdcf9174c715ee5955091b0496564464cb47991e51779e6599469bb703699e769521326a7292a7cea91eb903d4e106fec0c9756dcfe1e6efd925203d9279a8802b044456ceba93d8716b50e9685d7181b28dd4ad1b2f9e5c72335d4d93d369c761aaae85efb25211f36c3c75e8dcb3009b8a68f16c363fbe845a2794e180d6555f501de319939d3370064690fa79b5eb0519f527127e19bb3aeeb0891776924da8a6fc3c170b3e8284f49d7518c2086021c6b52b6be906bc1b0ed96fd49dd89b781a38be3af7b335edffb9a4ed79c8c94dc6b2094d01f938feb67505e2f4bdc8289f8c4395ec82b9a4267539d9101f5543a95533fb948cac3ef2baa2fedc48fdde2ef2f636e0685e4f4cfc02d3dc7dc46062b5adfed34eed035907f8b1fbb1f87e795ddacbee086b4b9478e47fa6900de083f8193531184eb8a8f1a43ad0778f6bcefa705a4c3ad4b7a839b4495b0d99079bb76611d9214fc2f181b0e8128920bef44d9669e14517ba23edbf737d34a92ae3cc5738cc8161e34faeebc91abd88e0a96b7014c8b6c70a33d2cd8659213115aa97c3c8bc518ae1192d89deb0d0d80462b011dd8c179ad280232437a62c15eba4ccb5de6e3f3de5d70106596b02e07b50ffe7f13cd4fc7784c0f999666554faaf73f7a2acb27c7e7428d1f6e9e4e90a3bf525b949fc706f863ed07dead43172e48c3b3d2a1070746240c64faa344c3eb4d9c0cd0558fa91a321157bc2ef0ad3a7a6ea0a21acade71bedf51a7a30f07ae8575c2b6243d426111b1e789848ccf21d168643b713a1142fd7f987de83c1bb7cfc7b07afb81b692c27e61e925fb8d63829eb83a76c3d4338e60b725fb1db68a9008e8c00227658ee0628072c8744684802af0e0856ee6e55dae12901f3c9ca6d5e4ee9d09b2a8", 0xf00}], 0x3, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @local}}}, @ip_pktinfo={{0xf, 0x0, 0x8, {0x0, @multicast2, @loopback}}}], 0x40}, 0x0) 16:59:19 executing program 3: syz_io_uring_setup(0x52c, &(0x7f0000000180), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6ead, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 16:59:19 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x39, 0x0, 0x0) 16:59:19 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r3, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:59:19 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x1c, 0x3, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:59:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000080), 0x2, &(0x7f0000000180)={&(0x7f00000000c0)=@getroute={0x0, 0x1a, 0x0, 0x0, 0x0, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x0) [ 675.470686][T14776] loop0: detected capacity change from 0 to 87 [ 675.539610][T14780] loop2: detected capacity change from 0 to 87 [ 675.541723][T14780] FAT-fs (loop2): bogus number of FAT sectors [ 675.541736][T14780] FAT-fs (loop2): Can't find a valid FAT filesystem [ 675.598950][ T40] kauditd_printk_skb: 25 callbacks suppressed [ 675.598967][ T40] audit: type=1804 audit(1655225959.400:907): pid=14780 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir1742540418/syzkaller.Qym0Qm/85/file1/bus" dev="sda1" ino=1155 res=1 errno=0 [ 675.599660][ T40] audit: type=1804 audit(1655225959.400:908): pid=14780 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir1742540418/syzkaller.Qym0Qm/85/file1/bus" dev="sda1" ino=1155 res=1 errno=0 16:59:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8914, 0x0) 16:59:19 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000140), 0x1, 0x1) writev(r0, &(0x7f0000001680)=[{&(0x7f0000000000)="86", 0x5}, {&(0x7f0000000180)="a1b17da2246a0bcf6eff1a006794fdc8bb35c42ac82e7a5bc505c5e359b652ec80dd2285d3bf23025768c0a84270b8436b2bcf77bd449af94cc3491ec59525e8d489d04263f4c8ce6fb20615c102e5d4abdf8fee6885f2b94a71b501f2ebbfc5356fef9ca1a4d9300fcbf2cafef2a6977040765e3160028c1436e07f3f926b64bcb603623f76548151dbb862c3af4aef4ae571ddb17af8c8be88bf3fe33f472881bd813f5477976a3a7530809fa5eb0805a68ae2620a094ed1ca85812adf346a03e9ea9aad525d100f9275f2ebe22fb27ae0801d", 0xd4}, {&(0x7f0000000280)="89a600", 0x3}], 0x3) 16:59:19 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r3, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:59:19 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f8", 0x16}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:59:19 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x17c}) [ 676.085359][T14787] loop0: detected capacity change from 0 to 87 16:59:19 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x3b, 0x0, 0x0) [ 676.093162][ T40] audit: type=1804 audit(1655225959.890:909): pid=14787 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/903/file1/bus" dev="loop0" ino=1049038 res=1 errno=0 16:59:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="100000004e7e5fffc5ec2f4817d823a3", 0x10}], 0x1}, 0x0) 16:59:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 676.093702][ T40] audit: type=1804 audit(1655225959.890:910): pid=14787 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/903/file1/bus" dev="loop0" ino=1049038 res=1 errno=0 16:59:19 executing program 3: bpf$PROG_LOAD_XDP(0x1d, &(0x7f0000000640)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:59:19 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x74) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x38}}, 0x10048001) [ 676.194836][T14801] loop2: detected capacity change from 0 to 87 [ 676.197130][T14801] FAT-fs (loop2): bogus number of FAT sectors [ 676.197142][T14801] FAT-fs (loop2): Can't find a valid FAT filesystem 16:59:20 executing program 3: syz_io_uring_setup(0x14e5, &(0x7f0000000000)={0x0, 0xa635}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000fea000/0x14000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 676.241711][ T40] audit: type=1804 audit(1655225960.040:911): pid=14801 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir1742540418/syzkaller.Qym0Qm/86/file1/bus" dev="sda1" ino=1152 res=1 errno=0 [ 676.242347][ T40] audit: type=1804 audit(1655225960.040:912): pid=14801 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir1742540418/syzkaller.Qym0Qm/86/file1/bus" dev="sda1" ino=1152 res=1 errno=0 16:59:20 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) 16:59:20 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r3, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:59:20 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:59:20 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="183500000300000000000000000000008510000002"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:59:20 executing program 1: r0 = io_uring_setup(0x9f9, &(0x7f0000000000)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1) [ 676.723237][T14808] loop0: detected capacity change from 0 to 87 16:59:20 executing program 1: r0 = io_uring_setup(0x9f9, &(0x7f0000000000)) io_uring_setup(0x6449, &(0x7f0000000080)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, r0}) 16:59:20 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x13, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 16:59:20 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000240)={&(0x7f0000000040), 0x9b, &(0x7f00000002c0)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_INTERVAL]}, 0x1c}}, 0x0) [ 676.750456][ T40] audit: type=1804 audit(1655225960.550:913): pid=14808 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/904/file1/bus" dev="loop0" ino=1049039 res=1 errno=0 16:59:20 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x13, 0x0, 0x45) [ 676.758380][ T40] audit: type=1804 audit(1655225960.560:914): pid=14808 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/904/file1/bus" dev="loop0" ino=1049039 res=1 errno=0 [ 676.819326][T14822] loop2: detected capacity change from 0 to 87 [ 676.821690][ T40] audit: type=1804 audit(1655225960.620:915): pid=14822 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir1742540418/syzkaller.Qym0Qm/87/file1/bus" dev="sda1" ino=1152 res=1 errno=0 [ 676.822248][ T40] audit: type=1804 audit(1655225960.620:916): pid=14822 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir1742540418/syzkaller.Qym0Qm/87/file1/bus" dev="sda1" ino=1152 res=1 errno=0 16:59:20 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r3, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) [ 676.889594][T14825] loop0: detected capacity change from 0 to 87 16:59:21 executing program 3: epoll_pwait2(0xffffffffffffffff, &(0x7f00000003c0)=[{}, {}, {}], 0x3, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0), 0xfffffffffffffdb4) 16:59:21 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xf4240, &(0x7f0000000140)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:59:21 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:59:21 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r3, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:59:21 executing program 3: syz_io_uring_setup(0x52c, &(0x7f0000000180), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000200), 0x0) syz_io_uring_setup(0x6ead, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) [ 677.337893][T14831] loop0: detected capacity change from 0 to 87 16:59:21 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x0, 0x0, 0x0, 0x0, 0x284, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x48) 16:59:21 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x100010, r0, 0x0) 16:59:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="3d5e4e9d4e7e5fffc5ec2f4817d823a337b6a5f5fe2d6d02b6a26e129c3cdf79bb5f3aa327f14d514ff057683c1c5fcda82583078e72927617af7070", 0x3c}, {&(0x7f0000000040)="47167e4e93775e57dae83d6ea618d77a627fa349e29a63c21bd9a7f5aa555107b269ad0be5c350271b505b", 0x2b}, {&(0x7f0000000600)="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", 0xf00}], 0x3, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @loopback}}}], 0x5000}, 0x0) 16:59:21 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x0, &(0x7f0000000540)) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r3, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) [ 677.460156][T14841] loop0: detected capacity change from 0 to 87 [ 677.474970][T14843] loop2: detected capacity change from 0 to 87 16:59:21 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xf4240, &(0x7f0000000140)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:59:21 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @btf_id], &(0x7f0000000040)='GPL\x00', 0x3, 0xe7, &(0x7f0000000080)=""/231, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:59:21 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:59:21 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x0, &(0x7f0000000540)) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r3, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) [ 677.955862][T14849] loop0: detected capacity change from 0 to 87 16:59:21 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001040)='/proc/tty/drivers\x00', 0x0, 0x0) read$msr(r0, &(0x7f0000001280)=""/47, 0x2f) 16:59:21 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001040)='/proc/tty/drivers\x00', 0x0, 0x0) read$msr(r0, &(0x7f0000001280)=""/47, 0x2f) 16:59:21 executing program 3: bpf$PROG_LOAD(0x7, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:59:21 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000000)=@framed={{0x5}}, &(0x7f0000000040)='GPL\x00', 0x2, 0xe8, &(0x7f0000000080)=""/232, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 678.134033][T14860] loop2: detected capacity change from 0 to 87 16:59:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@ipv4_newnexthop={0x1c, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x0) 16:59:21 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x43, 0x0, 0x7000000) 16:59:22 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x0, &(0x7f0000000540)) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r3, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:59:22 executing program 3: request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0) 16:59:22 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:59:22 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0xb, 0x0, 0x7000000) [ 678.616973][T14869] loop0: detected capacity change from 0 to 87 16:59:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000440)={0xfffffffffffffffe, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0xc621}, 0x0) 16:59:22 executing program 1: syz_io_uring_setup(0x14c7, &(0x7f0000000080), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 16:59:22 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) inotify_add_watch(r0, 0x0, 0xa0000e37) 16:59:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000440)={0xfffffffffffffffe, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x300}, 0x0) 16:59:22 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/pid_for_children\x00') 16:59:22 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[0x0]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r3, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) [ 678.788862][T14883] loop2: detected capacity change from 0 to 87 [ 678.803064][T14885] loop0: detected capacity change from 0 to 87 16:59:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01"], 0x14}}, 0x0) 16:59:23 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x42, 0x0, 0x7000000) 16:59:23 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:59:23 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[0x0]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r3, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:59:23 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1a, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x48) [ 679.290511][T14892] loop0: detected capacity change from 0 to 87 16:59:23 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000040)=""/182) 16:59:23 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1b, 0x0, 0x0, 0x0, 0x400}, 0x48) 16:59:23 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000003c0), 0x0, 0x0) ioctl$EVIOCSABS3F(r0, 0x401845ff, 0x0) 16:59:23 executing program 3: r0 = epoll_create1(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)) 16:59:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000440)={0xfffffffffffffffe, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0xc0}}, 0x0) [ 679.396708][T14906] loop2: detected capacity change from 0 to 87 16:59:23 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:59:23 executing program 3: rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f00000000c0)={0x0, 0x0, 0x9}) 16:59:23 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x2}, 0x0) 16:59:23 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[0x0]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r3, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) [ 679.887201][T14911] loop0: detected capacity change from 0 to 87 16:59:23 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x7000000) 16:59:23 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) sendmsg$inet6(r0, &(0x7f0000000900)={&(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x58}, 0x1c, 0x0}, 0x0) 16:59:23 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x1b, 0x3, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:59:23 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="95"], &(0x7f0000000040)='GPL\x00', 0x7, 0xd8, &(0x7f0000000080)=""/216, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 679.996360][T14923] loop2: detected capacity change from 0 to 87 16:59:24 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x101482, 0x0) write$vhost_msg_v2(r0, 0x0, 0x0) 16:59:24 executing program 3: r0 = socket(0xa, 0x3, 0x9) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={0x0}}, 0x0) 16:59:24 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:59:24 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(0x0, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:59:24 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x101482, 0x0) write$vhost_msg_v2(r0, 0x0, 0x0) 16:59:24 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x101482, 0x0) write$vhost_msg_v2(r0, 0x0, 0x0) [ 680.496504][T14930] loop0: detected capacity change from 0 to 87 16:59:24 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x8, 0x1, &(0x7f0000000000)=@raw=[@kfunc], &(0x7f0000000040)='GPL\x00', 0x0, 0xd6, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:59:24 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x2, 0x0, 0x0) 16:59:24 executing program 1: bpf$PROG_LOAD(0x2, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 16:59:24 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1200}], &(0x7f0000000040)='GPL\x00', 0x7, 0xd8, &(0x7f0000000080)=""/216, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:59:24 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) [ 680.640534][T14944] loop2: detected capacity change from 0 to 87 [ 680.662788][T14946] loop0: detected capacity change from 0 to 87 [ 680.674376][ T40] kauditd_printk_skb: 28 callbacks suppressed [ 680.674393][ T40] audit: type=1804 audit(1655225964.470:945): pid=14946 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/914/file1/bus" dev="loop0" ino=1049050 res=1 errno=0 [ 680.677550][ T40] audit: type=1804 audit(1655225964.470:946): pid=14946 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/914/file1/bus" dev="loop0" ino=1049050 res=1 errno=0 16:59:24 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x19, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 16:59:24 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(0x0, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:59:24 executing program 3: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0xe}]) 16:59:24 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) [ 680.836532][T14950] loop3: detected capacity change from 0 to 87 16:59:24 executing program 1: syz_open_dev$MSR(&(0x7f0000000000), 0xffffffffffffffff, 0x0) [ 680.849429][T14952] loop2: detected capacity change from 0 to 87 16:59:24 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000140), 0x1, 0x1) writev(r0, &(0x7f0000001680)=[{&(0x7f0000000000)="86", 0x1}, {&(0x7f0000000180)="a1b17da2246a0bcf6eff1a006794fdc8bb35c42ac82e7a5bc505c5e359b652ec80dd2285d3bf23025768c0a84270b8436b2bcf77bd449af94cc3491ec59525e8d489d04263f4c8ce6fb20615c102e5d4abdf8fee6885f2b94a71b501f2ebbfc5356fef9ca1a4d9300fcbf2cafef2a6977040765e3160028c1436e07f3f926b64bcb603623f76548151dbb862c3af4aef4ae571ddb17af8c8be88bf3fe33f472881bd813f5477976a3a7530809fa5eb0805a68ae2620a094ed1ca85812adf346a03e9ea9aad525d100f9275f2ebe22fb27ae0801d", 0xd4}, {&(0x7f0000000280)="89a600", 0x3}], 0x3) [ 680.865602][T14956] loop0: detected capacity change from 0 to 87 [ 680.872459][ T40] audit: type=1804 audit(1655225964.670:947): pid=14950 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir2656775508/syzkaller.06PJ6v/1482/file1/bus" dev="loop3" ino=1049052 res=1 errno=0 [ 680.872491][ T40] audit: type=1804 audit(1655225964.670:948): pid=14950 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/syzkaller-testdir2656775508/syzkaller.06PJ6v/1482/file1/bus" dev="loop3" ino=1049052 res=1 errno=0 16:59:24 executing program 1: request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='$+!}.)\x00', 0x0) [ 680.904653][ T40] audit: type=1804 audit(1655225964.690:949): pid=14956 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/915/file1/bus" dev="loop0" ino=1049053 res=1 errno=0 16:59:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 680.904688][ T40] audit: type=1804 audit(1655225964.700:950): pid=14956 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/915/file1/bus" dev="loop0" ino=1049053 res=1 errno=0 16:59:24 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000140)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0xc, &(0x7f00000002c0)=""/12, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:59:24 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(0x0, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:59:24 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa202, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x5009}) write$tun(r0, &(0x7f0000000180)={@void, @val={0x3, 0x4, 0x0, 0x1f}, @ipv6=@gre_packet={0x0, 0x6, "c6281f", 0x44, 0x2f, 0x0, @mcast1, @local}}, 0x76) [ 680.994760][T14966] loop2: detected capacity change from 0 to 87 16:59:24 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r3, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:59:24 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x7, &(0x7f0000000080)=@framed={{}, [@func, @call, @cb_func]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:59:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8934, 0x0) [ 681.027306][T14973] loop0: detected capacity change from 0 to 87 16:59:24 executing program 1: bpf$PROG_LOAD(0x18, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 681.039867][ T40] audit: type=1804 audit(1655225964.840:951): pid=14973 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/916/file1/bus" dev="loop0" ino=1049055 res=1 errno=0 16:59:24 executing program 1: mq_open(&(0x7f00000003c0)='gtp\x00', 0x40, 0x0, &(0x7f0000000400)={0x1, 0x7fff, 0x6, 0x10001}) [ 681.040516][ T40] audit: type=1804 audit(1655225964.840:952): pid=14973 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/916/file1/bus" dev="loop0" ino=1049055 res=1 errno=0 16:59:24 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:59:24 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa202, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x5009}) write$tun(r0, &(0x7f0000000180)={@void, @val={0x3, 0x4, 0x0, 0x1f}, @ipv6=@gre_packet={0x0, 0x6, "c6281f", 0x44, 0x2f, 0x0, @mcast1, @local}}, 0x76) 16:59:24 executing program 1: r0 = socket(0x28, 0x1, 0x0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20040011) [ 681.133661][T14983] loop2: detected capacity change from 0 to 87 16:59:24 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r3, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:59:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv4_getnexthop={0x20, 0x6a, 0xb0b, 0x0, 0x0, {}, [@NHA_MASTER={0x8}]}, 0x20}}, 0x0) 16:59:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv4_getnexthop={0x20, 0x6a, 0xb0b, 0x0, 0x0, {}, [@NHA_MASTER={0x8}]}, 0x20}}, 0x0) [ 681.171669][T14989] loop0: detected capacity change from 0 to 87 16:59:24 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa202, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x5009}) write$tun(r0, &(0x7f0000000180)={@void, @val={0x3, 0x4, 0x0, 0x1f}, @ipv6=@gre_packet={0x0, 0x6, "c6281f", 0x44, 0x2f, 0x0, @mcast1, @local}}, 0x76) 16:59:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv4_getnexthop={0x20, 0x6a, 0xb0b, 0x0, 0x0, {}, [@NHA_MASTER={0x8}]}, 0x20}}, 0x0) [ 681.200602][ T40] audit: type=1804 audit(1655225965.000:953): pid=14989 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/917/file1/bus" dev="loop0" ino=1049057 res=1 errno=0 [ 681.200918][ T40] audit: type=1804 audit(1655225965.000:954): pid=14989 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/917/file1/bus" dev="loop0" ino=1049057 res=1 errno=0 16:59:25 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:59:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv4_getnexthop={0x20, 0x6a, 0xb0b, 0x0, 0x0, {}, [@NHA_MASTER={0x8}]}, 0x20}}, 0x0) 16:59:25 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv4_getnexthop={0x20, 0x6a, 0xb0b, 0x0, 0x0, {}, [@NHA_MASTER={0x8}]}, 0x20}}, 0x0) 16:59:25 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r3, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) [ 681.293258][T14999] loop2: detected capacity change from 0 to 87 [ 681.316497][T15003] loop0: detected capacity change from 0 to 87 16:59:25 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv4_getnexthop={0x20, 0x6a, 0xb0b, 0x0, 0x0, {}, [@NHA_MASTER={0x8}]}, 0x20}}, 0x0) 16:59:25 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa202, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x5009}) write$tun(r0, &(0x7f0000000180)={@void, @val={0x3, 0x4, 0x0, 0x1f}, @ipv6=@gre_packet={0x0, 0x6, "c6281f", 0x44, 0x2f, 0x0, @mcast1, @local}}, 0x76) 16:59:25 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv4_getnexthop={0x20, 0x6a, 0xb0b, 0x0, 0x0, {}, [@NHA_MASTER={0x8}]}, 0x20}}, 0x0) 16:59:25 executing program 1: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv4_getnexthop={0x20, 0x6a, 0xb0b, 0x0, 0x0, {}, [@NHA_MASTER={0x8}]}, 0x20}}, 0x0) 16:59:25 executing program 1: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv4_getnexthop={0x20, 0x6a, 0xb0b, 0x0, 0x0, {}, [@NHA_MASTER={0x8}]}, 0x20}}, 0x0) 16:59:25 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:59:25 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa202, 0x0) write$tun(r0, &(0x7f0000000180)={@void, @val={0x3, 0x4, 0x0, 0x1f}, @ipv6=@gre_packet={0x0, 0x6, "c6281f", 0x44, 0x2f, 0x0, @mcast1, @local}}, 0x76) [ 681.423173][T15016] loop2: detected capacity change from 0 to 87 16:59:25 executing program 1: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv4_getnexthop={0x20, 0x6a, 0xb0b, 0x0, 0x0, {}, [@NHA_MASTER={0x8}]}, 0x20}}, 0x0) 16:59:25 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, 0x0}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:59:25 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa202, 0x0) write$tun(r0, &(0x7f0000000180)={@void, @val={0x3, 0x4, 0x0, 0x1f}, @ipv6=@gre_packet={0x0, 0x6, "c6281f", 0x44, 0x2f, 0x0, @mcast1, @local}}, 0x76) 16:59:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 16:59:25 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa202, 0x0) write$tun(r0, &(0x7f0000000180)={@void, @val={0x3, 0x4, 0x0, 0x1f}, @ipv6=@gre_packet={0x0, 0x6, "c6281f", 0x44, 0x2f, 0x0, @mcast1, @local}}, 0x76) [ 681.485743][T15023] loop0: detected capacity change from 0 to 87 16:59:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 16:59:25 executing program 3: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'\x00', 0x5009}) write$tun(0xffffffffffffffff, &(0x7f0000000180)={@void, @val={0x3, 0x4, 0x0, 0x1f}, @ipv6=@gre_packet={0x0, 0x6, "c6281f", 0x44, 0x2f, 0x0, @mcast1, @local}}, 0x76) 16:59:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 16:59:25 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(0x0, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) [ 681.562596][T15035] loop2: detected capacity change from 0 to 87 16:59:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 16:59:25 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, 0x0}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:59:25 executing program 3: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'\x00', 0x5009}) write$tun(0xffffffffffffffff, &(0x7f0000000180)={@void, @val={0x3, 0x4, 0x0, 0x1f}, @ipv6=@gre_packet={0x0, 0x6, "c6281f", 0x44, 0x2f, 0x0, @mcast1, @local}}, 0x76) 16:59:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 16:59:25 executing program 3: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'\x00', 0x5009}) write$tun(0xffffffffffffffff, &(0x7f0000000180)={@void, @val={0x3, 0x4, 0x0, 0x1f}, @ipv6=@gre_packet={0x0, 0x6, "c6281f", 0x44, 0x2f, 0x0, @mcast1, @local}}, 0x76) [ 681.604113][T15041] loop0: detected capacity change from 0 to 87 16:59:25 executing program 3: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xa202, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x5009}) write$tun(r0, &(0x7f0000000180)={@void, @val={0x3, 0x4, 0x0, 0x1f}, @ipv6=@gre_packet={0x0, 0x6, "c6281f", 0x44, 0x2f, 0x0, @mcast1, @local}}, 0x76) 16:59:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 16:59:25 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(0x0, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:59:25 executing program 3: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xa202, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x5009}) write$tun(r0, &(0x7f0000000180)={@void, @val={0x3, 0x4, 0x0, 0x1f}, @ipv6=@gre_packet={0x0, 0x6, "c6281f", 0x44, 0x2f, 0x0, @mcast1, @local}}, 0x76) [ 681.692974][T15053] loop2: detected capacity change from 0 to 87 16:59:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 16:59:25 executing program 3: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xa202, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x5009}) write$tun(r0, &(0x7f0000000180)={@void, @val={0x3, 0x4, 0x0, 0x1f}, @ipv6=@gre_packet={0x0, 0x6, "c6281f", 0x44, 0x2f, 0x0, @mcast1, @local}}, 0x76) 16:59:25 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, 0x0}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:59:25 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x5009}) write$tun(r0, &(0x7f0000000180)={@void, @val={0x3, 0x4, 0x0, 0x1f}, @ipv6=@gre_packet={0x0, 0x6, "c6281f", 0x44, 0x2f, 0x0, @mcast1, @local}}, 0x76) 16:59:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) [ 681.775464][T15059] loop0: detected capacity change from 0 to 87 16:59:25 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(0x0, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:59:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) [ 681.819961][T15065] loop2: detected capacity change from 0 to 87 16:59:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv4_getnexthop={0x20, 0x6a, 0x0, 0x0, 0x0, {}, [@NHA_MASTER={0x8}]}, 0x20}}, 0x0) 16:59:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv4_getnexthop={0x20, 0x6a, 0x0, 0x0, 0x0, {}, [@NHA_MASTER={0x8}]}, 0x20}}, 0x0) 16:59:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv4_getnexthop={0x20, 0x6a, 0x0, 0x0, 0x0, {}, [@NHA_MASTER={0x8}]}, 0x20}}, 0x0) 16:59:25 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:59:25 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x5009}) write$tun(r0, &(0x7f0000000180)={@void, @val={0x3, 0x4, 0x0, 0x1f}, @ipv6=@gre_packet={0x0, 0x6, "c6281f", 0x44, 0x2f, 0x0, @mcast1, @local}}, 0x76) 16:59:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv4_getnexthop={0x18, 0x6a, 0xb0b}, 0x18}}, 0x0) [ 681.928861][T15079] loop0: detected capacity change from 0 to 87 16:59:25 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x0, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:59:25 executing program 1: r0 = io_uring_setup(0x9f9, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x8000000) 16:59:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6d8f27bd7000000000000500000008002b000400000008003a000000000008000300", @ANYRES32], 0x2c}}, 0x0) [ 681.961143][T15083] loop2: detected capacity change from 0 to 87 16:59:25 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x5009}) write$tun(r0, &(0x7f0000000180)={@void, @val={0x3, 0x4, 0x0, 0x1f}, @ipv6=@gre_packet={0x0, 0x6, "c6281f", 0x44, 0x2f, 0x0, @mcast1, @local}}, 0x76) 16:59:25 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x1e, 0x0, 0x0) 16:59:25 executing program 1: init_module(&(0x7f0000000100)='\x1b.\x892\xb7\"[\x1a\x8ep\xcd\x17]|\xd0\x18S\xa3\xac\xa1\xd9c\x00\xe8!W\v\\\\\xbb\xdb\x86\xd9\f\xa7V\xb5H\xf5\x0e\xc3\xf7\'\x01T2H7\xffV\x14\xb1\xb5I\x91\xd1\xe3\xe3b\x12e\xa5\x11\x00\x00\x00\x00\x00\x00\xc7', 0x46, 0x0) 16:59:25 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:59:25 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x0, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) [ 682.084859][T15091] Invalid ELF header magic: != ELF 16:59:25 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3}, 0x80) [ 682.095934][T15093] loop2: detected capacity change from 0 to 87 16:59:25 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa202, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'\x00', 0x5009}) write$tun(r0, &(0x7f0000000180)={@void, @val={0x3, 0x4, 0x0, 0x1f}, @ipv6=@gre_packet={0x0, 0x6, "c6281f", 0x44, 0x2f, 0x0, @mcast1, @local}}, 0x76) 16:59:25 executing program 1: syz_io_uring_setup(0x52c, &(0x7f0000000180), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000200), 0x0) syz_io_uring_setup(0x6ead, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) [ 682.118358][T15096] loop0: detected capacity change from 0 to 87 16:59:25 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa202, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'\x00', 0x5009}) write$tun(r0, &(0x7f0000000180)={@void, @val={0x3, 0x4, 0x0, 0x1f}, @ipv6=@gre_packet={0x0, 0x6, "c6281f", 0x44, 0x2f, 0x0, @mcast1, @local}}, 0x76) 16:59:25 executing program 1: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder-control\x00', 0x0, 0x0) 16:59:25 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa202, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'\x00', 0x5009}) write$tun(r0, &(0x7f0000000180)={@void, @val={0x3, 0x4, 0x0, 0x1f}, @ipv6=@gre_packet={0x0, 0x6, "c6281f", 0x44, 0x2f, 0x0, @mcast1, @local}}, 0x76) 16:59:26 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:59:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@ipv4_newnexthop={0x18, 0x68, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x2}}, 0x18}}, 0x0) 16:59:26 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x0, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:59:26 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa202, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) write$tun(r0, &(0x7f0000000180)={@void, @val={0x3, 0x4, 0x0, 0x1f}, @ipv6=@gre_packet={0x0, 0x6, "c6281f", 0x44, 0x2f, 0x0, @mcast1, @local}}, 0x76) 16:59:26 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa202, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) write$tun(r0, &(0x7f0000000180)={@void, @val={0x3, 0x4, 0x0, 0x1f}, @ipv6=@gre_packet={0x0, 0x6, "c6281f", 0x44, 0x2f, 0x0, @mcast1, @local}}, 0x76) 16:59:26 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x3c, 0x0, 0x0) [ 682.274831][T15113] loop0: detected capacity change from 0 to 87 [ 682.285564][T15115] loop2: detected capacity change from 0 to 87 16:59:26 executing program 1: syz_io_uring_setup(0x6ead, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x14c7, &(0x7f0000000080), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 16:59:26 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa202, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) write$tun(r0, &(0x7f0000000180)={@void, @val={0x3, 0x4, 0x0, 0x1f}, @ipv6=@gre_packet={0x0, 0x6, "c6281f", 0x44, 0x2f, 0x0, @mcast1, @local}}, 0x76) 16:59:26 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000840)={'sit0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @loopback}}) 16:59:26 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x0) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:59:26 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, 0x0) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r3, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:59:26 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa202, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)) write$tun(r0, &(0x7f0000000180)={@void, @val={0x3, 0x4, 0x0, 0x1f}, @ipv6=@gre_packet={0x0, 0x6, "c6281f", 0x44, 0x2f, 0x0, @mcast1, @local}}, 0x76) 16:59:26 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x22, 0x0, 0x7) [ 682.439871][T15129] loop2: detected capacity change from 0 to 87 [ 682.443192][T15131] loop0: detected capacity change from 0 to 87 16:59:26 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa202, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)) write$tun(r0, &(0x7f0000000180)={@void, @val={0x3, 0x4, 0x0, 0x1f}, @ipv6=@gre_packet={0x0, 0x6, "c6281f", 0x44, 0x2f, 0x0, @mcast1, @local}}, 0x76) 16:59:26 executing program 1: r0 = io_uring_setup(0x9f9, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x2000) 16:59:26 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa202, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)) write$tun(r0, &(0x7f0000000180)={@void, @val={0x3, 0x4, 0x0, 0x1f}, @ipv6=@gre_packet={0x0, 0x6, "c6281f", 0x44, 0x2f, 0x0, @mcast1, @local}}, 0x76) 16:59:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x5c5fe33e6dac8f6d}, 0x14}}, 0x0) 16:59:26 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x0) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:59:26 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa202, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x5009}) write$tun(0xffffffffffffffff, &(0x7f0000000180)={@void, @val={0x3, 0x4, 0x0, 0x1f}, @ipv6=@gre_packet={0x0, 0x6, "c6281f", 0x44, 0x2f, 0x0, @mcast1, @local}}, 0x76) 16:59:26 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x10000000) 16:59:26 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, 0x0) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r3, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:59:26 executing program 1: syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x240) [ 682.579281][T15148] loop0: detected capacity change from 0 to 87 [ 682.580167][T15149] loop2: detected capacity change from 0 to 87 16:59:26 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x14, 0x3, &(0x7f0000000140)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:59:26 executing program 1: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x82307202, &(0x7f0000000100)) [ 682.634946][T15155] loop1: detected capacity change from 0 to 264192 16:59:26 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x38}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r1) 16:59:26 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa202, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x5009}) write$tun(0xffffffffffffffff, &(0x7f0000000180)={@void, @val={0x3, 0x4, 0x0, 0x1f}, @ipv6=@gre_packet={0x0, 0x6, "c6281f", 0x44, 0x2f, 0x0, @mcast1, @local}}, 0x76) 16:59:26 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x0) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:59:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x5c5fe33e6dac8f6d, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x3}]}, 0x1c}}, 0x0) 16:59:26 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, 0x0) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r3, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:59:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet6(r0, &(0x7f0000000200)={&(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x68}, 0x20000005) [ 682.723125][T15162] loop0: detected capacity change from 0 to 87 16:59:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="3d5e4e9d4e7e5fffc5ec2f4817d823a337b6a5f5fe2d6d02b6a26e129c3cdf79bb5f3aa327f14d514ff057683c1c5fcda82583078e72927617af7070", 0x3c}, {&(0x7f0000000040)="47167e4e93775e57dae83d6ea618d77a627fa349e29a63c21bd9a7f5aa555107b269ad0be5c350271b505b", 0x2b}, {&(0x7f0000000600)="cfda75bca00e748d382eeb1058bb80911320d925b9b3a63496d1cb271e14bb39a17788b34c768fff3907f0006a9e6cd733ccf385012c102905f981c2833c5a6acdc262e40862b1c8cd2279caafc413208f551907363701d8d515b8372b818f64627575aa476aeb18dbbd9350b7b550849b20178b116cb1169b50f336fc30df712db7aa6b25a8527d61d48ad9577d7952788e33e7111fba8c3bb809f167e5d778a55894dc12b02ecdda6f85ba1b5e3ac23df74de5feacd241647e4181c42cc616e8a10f961edbbb4c3afdb4c46cb02f01cae0fe36359400868f42686b544b35b0bfc10895eda45debbdec17565ba6df170d19316a654b9ff4f3e33980f74ccb281dd14e663c9eff99d6288a336e24664589ddbeca7000b620ea40d531f7b5f6cf8cb172a5a6ee2a48ae99c1c31ac0d0678a7feb35e3167e8c3b29341f3060e04ab1d444a997d2b5e5d25635662e4955b53c635086cc83eba32c9f492c8cea9e810fb90b1fc2f7a76bc870e1206e0294038cc14a7f612db7f2dfdf637264ff726b87715c2a45a56ffd1842c21cee5175584103f10fb7b0770ea2e806a3b6932195df1231da1227bcf1594fb7075faae8d15ac57e31d833feb326e81fac9e1882296f4da993aacb3d667bed10d8317b1646f84c36619babc12a71f5495b981949ea80948d93d1ad8ffe88ab491897d3de4728fbff66e48af3db4bbdb10486a3beb73ab151e80f5b49cd62f699dcee09e80808978daea1e0c6f1e727787a8bd76182a45785e34d788e28b3605785a26736e1fad4c8f1f33a66899f8882fe32c0d8a8e1ecfe8e7fc5b1e14e5702db15dbb63152643df1b47c96060deea6909909b0248fb11ff194411023d117b0a1e70c7bb2a1e8dfc5d3692c3e3d9397ff34293c367b147497f5f12df0fad0e0cd11d1d6a5377bf75e5756cf74f79a04465948bc421ba4e7fa71687845301cb2b668cab4b0eaf91a6712140092061186e288ef0f4b46cf6fc69cc44bd971ba39d762ef9c1e4987d9baff5be2d8b76f240d0910ec43fea2b85b09ed2922fffbcfa0d9126bc278b47c9eb28b3acbb7919db1fd6e4c83a0bcd811171258ce4bd077cd62c065fbaf88964f95e29dae4ca3775e08b420d1aa172dab8a5d2c00ef9cebe42bbbd82b62a38dba774dff1e6a1ccbabd0d718f5a2036ab59650252375b7dfdda511d7e6c2135764da1fb9a4c488d7fa28e103d402a0cb7a90b4166c2f972115b4004e39014d7b90f24a61fb63a749a757dedc0763148d85b4fdb1dbd8fe57b1bf0590c6b5664a58ae737d69192ef0102df11b88797c248e300d3ca2cb2c01328faefef8a56c2ab47d5c0ba5e579493ea0074bc36af619dd5fba80c902e732f4e41df39b0c914ed1f353b62bb9d42d9ed7d45a248fa6b21e606f59fb1a7a8c125f7e692e46f0b26f0c81fccb0a059f8534faa84ad4aa8e8fc66f7c931b6e98fd5be640a6491eedb04415c57fb76a7d16e5e5ead549581b411bd249199c5c7ca8d91efb191ee078c8574b879df638f784fe74a559c0ef365e68074c87cab434637faf1f40f0a2694e40892c70e027bc658163c9129713fb67bf23ec1c9a5e64c60410e90b6b8f4f6c5a56a5fd93a712adec1682f3908731c9098072155bbb2dec0f8dbfd7dc2c0681bf1a8751635afd897298ae72b3b3f5c91d5f55ccc01c0a05ece4226eecb76dd80bc613499071bd9b3c3fd28eaac55ebff58e7fddbd951b304b1bb9edac49bbec468bf8be5d9ae7661e21536fb0812844c32144b0fc99a13e6fad7a929f860409752fe350951fc0e55b1bc084d22eea23d784c72ce8bdbc0750e8ab9343ee11a1a3c70182a5a25021ed6b318675b9e4897490ef373af042df058203335c22131b9dfdab0188c06985b9c661f9bcd63b82b6806d8699c5d9d09769361e0d3c8ee8eaa3d30319676532d2cc33c0fcc9b480609858774158f41f26e65f789a2e63914a5dd238c012bc6c7b25e29323993bd9c9865694997f8c3d68c541e4961d41a917089fdd312767fec4278262da46e19cd1e53dfc084338a29b4a7e70860a17cfe8d7031954981732e7efb8250fb831fd8d223242e0b187729b8a78d4dc265650095789e385063d730e28231d023acf6fe9f766d0bdb54ca76cafe709d5fad9d6b8408a5ddfecaacf2f8b36f30ec3153416b1d1ae7c97514f935a1466f0fde26780e32aaca631fc5d0e9bac15895ccb715b2490046ad797353ee0063e17c48bd8dd2bbca80b678f19b45fa693da0e41738af6f8c57b15d3c80422f4a8e96e464703b24c788c384b0dcb3fb40ac89ccb55586636ef71b264c01812727ddeea79f89626170fe1be6ed90410bba8d0b66f7f6394766e943cbb968a763e00739b61932551234ccc91048ab20d1f01d4cd7caab0638f6991668ae7aee468730444952225fd561e23c4a8b906645d16848172d7f3d5f39e77b85f1b43d0fb24b45e248c54331fc6eaf35e74881d7e095b0df05fd17c6ce59eb3f24c00ce00004908bb8f897048ca2bba3fbf401a219abdcbc4f7350d0c4b7ae9f296b352f923ab7c9c20fb2afa622039328d8f66e8bf2b4fbcd8f600c1e742c2624879c889585f444811fc54e2ee9f523eb556924fb6c040094ef921dcb842aca5fec72ef1451ade18b6a26e478ee43bfa2fe4c4a7c6d6d4921ecccadf353649409bf676d3f8f9da3e6f1d5ae9db91c2d3512c4a98e836c373ee89855d5100249e735b084318cbe3d10d7c0e95ff2efec2755cec6ffad7af1d181393d8bd11a6629bf4e82b2d3e63b6674d8467a9d0f6985cb3e1a4643cb8c5f5ba7e74987618e3cea065dcf744e812bc34c60db4b13424da4025641ebdf038ee12aac7b9467630c739c90215279db60767705a9e0c06b1b6748330db462ba48d75c76d510e645dda09be8ba7a5d49badce392760e4911cd9866c7708dbdd7a29422e6ddb13a7accd18083bc4e6829fc6307fe347ed7f3571709ce58b922fb3320963259fa3ecf9aa653e9b25b19916c18e837fbba4ec7cd589fd22ff082f132e67741cc425368b8e89f92b98c3b93c1202f677856733a64f36a28c5c55c54b9a94ad5e54b229f812323289b0adc29b511a462d68b98f3d53d2029b1e270d575b0375d4101402c6c797509459691df721ca600c65f55cb32ddba8f3f4ca09b90ecd8473d95b35b7b16e265f834fb6b15b1cd28d5656e4f2e8de5c0eadadb4677650ab34a2f06dcbaf507f25d8ba1f835e3f36f6944b4a01e3d559cbd7e2a348676bf7daec0496ed5f9adcf7351fdb4dca8acce59116b61d643e66d4102917ac8f82c2d89f1843ad5faa81912c660069ce5c62f557ce721b34eb961197d2d6e170439c6582fae0cb353f709c2f934dbe3da3522e515ae2ab39c586d959f076914ccf9bcff9a596832f278221ce7ca44f0f5962d63dfe57c31bf571b857e780923213c3deb948c97b1f17bffaeba09ed648ef779bfea6f1df4fa481e949f0b6109572f6fe6f155e8d0582c447b6fd3fc4faca4b03b94c0f31ab8c3f176b2dfb3cc3ecaa9543ae35f7a9a4aea0edce0879d668b75f059b2e86e3fc070f9646c2a53be07a248e7af5584df02274da917fc1e385e6aa63a0b3e2279bc079fd88d83897f118f3083aade6f5cb0186093a990b95ecd2a0aae29df2a1413f4134eee4d10848ff645ca9f985beca1b5e19f83cd3e055907689d33d1ded850f9f4f1d9fee7b78241c3bceff3a55fdedab383589dd48e19d3b7189ab9740b9704be35a37da340411a43cb5b7bcb4f8512e7e2d8b235f86f6fbb38bc270099c9f8afcabf6ce923dc63deae5aa25dc2330369ed98646c2b2f60bcc387d3becbcfd4b8c1a54d0e0ac14163eea9f9b448d40a79be306779f19f1b2a35c91331703a5c350e5116e2b6ee70f29efd89dbba4b7d7db25690e3eba6330fc7655842e4b300af5b21aa20d84c70b122f9441b91685b7bc58e214c0810ee3dd1db8482b508c419ce7e8dbc55959f6be66677a7a783019e31a7ff903f7fe7de965eedac29dbff55013f4a7d81a60abfbe09a4e60c7a0c290eba040eddad556ba419be1641ad8c90ccd5fb2248b8a3267f69fec6e6cabe75a6ea0fd2eb26fb86786d0e20faec8c48edc7df04840bb893f07760b321cb0a66bbfa8016500eaa2baf3d31bfb1bcd615896da1aa6225e9514f638221a8a2dccf1fd14c42af4331d0c5d01de107235c70974baf7895e177905ac04b37a5d592cdedad9917433db66712195d961cb679997117453463ae8eb583adfc15b9a24733ff53520c78e45240d81b3f3922d5c0ebe5bb79b2102991d78c6f2759cee461cab93896392841fc6b2030ee3e63a00cfa773697886b6807ef83babbecaef98423edbabe2a5105d1243ce971206b9909c47df5743e6ad8c412c1e5c987e703eacc4588cca10907a65472a677e4a68d637095390dc2068fe64d0af99e9d2878fb35a8b8e43370a36eed31bd8c7882ee6a87032a638ef46a678f3146dc5ae1035d1ff27e713dd1be1666cdcf9174c715ee5955091b0496564464cb47991e51779e6599469bb703699e769521326a7292a7cea91eb903d4e106fec0c9756dcfe1e6efd925203d9279a8802b044456ceba93d8716b50e9685d7181b28dd4ad1b2f9e5c72335d4d93d369c761aaae85efb25211f36c3c75e8dcb3009b8a68f16c363fbe845a2794e180d6555f501de319939d3370064690fa79b5eb0519f527127e19bb3aeeb0891776924da8a6fc3c170b3e8284f49d7518c2086021c6b52b6be906bc1b0ed96fd49dd89b781a38be3af7b335edffb9a4ed79c8c94dc6b2094d01f938feb67505e2f4bdc8289f8c4395ec82b9a4267539d9101f5543a95533fb948cac3ef2baa2fedc48fdde2ef2f636e0685e4f4cfc02d3dc7dc46062b5adfed34eed035907f8b1fbb1f87e795ddacbee086b4b9478e47fa6900de083f8193531184eb8a8f1a43ad0778f6bcefa705a4c3ad4b7a839b4495b0d99079bb76611d9214fc2f181b0e8128920bef44d9669e14517ba23edbf737d34a92ae3cc5738cc8161e34faeebc91abd88e0a96b7014c8b6c70a33d2cd8659213115aa97c3c8bc518ae1192d89deb0d0d80462b011dd8c179ad280232437a62c15eba4ccb5de6e3f3de5d70106596b02e07b50ffe7f13cd4fc7784c0f999666554faaf73f7a2acb27c7e7428d1f6e9e4e90a3bf525b949fc706f863ed07dead43172e48c3b3d2a1070746240c64faa344c3eb4d9c0cd0558fa91a321157bc2ef0ad3a7a6ea0a21acade71bedf51a7a30f07ae8575c2b6243d426111b1e789848ccf21d168643b713a1142fd7f987de83c1bb7cfc7b07afb81b692c27e61e925fb8d63829eb83a76c3d4338e60b725fb1db68a9008e8c00227658ee0628072c8744684802af0e0856ee6e55dae12901f3c9ca6d5e4ee9d09b2a8", 0xf00}], 0x3, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @loopback}}}], 0xf}, 0x0) [ 682.747063][T15167] loop2: detected capacity change from 0 to 87 16:59:26 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000ebed00000000000008000000851000000500000018140000", @ANYRES32, @ANYBLOB="000000000000000018270000", @ANYRES32, @ANYBLOB="0000000004000000950000000000000018260000", @ANYBLOB="0000000009000000185500000e"], &(0x7f0000000240)='syzkaller\x00', 0x1, 0xe1, &(0x7f0000000d80)=""/225, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:59:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0) 16:59:26 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa202, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x5009}) write$tun(0xffffffffffffffff, &(0x7f0000000180)={@void, @val={0x3, 0x4, 0x0, 0x1f}, @ipv6=@gre_packet={0x0, 0x6, "c6281f", 0x44, 0x2f, 0x0, @mcast1, @local}}, 0x76) 16:59:26 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(0xffffffffffffffff, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:59:26 executing program 1: syz_emit_ethernet(0x2e, &(0x7f0000000000)={@random="ef2f75143c1f", @dev, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, {[@generic={0x44, 0x4, "f43e"}]}}, {0x0, 0x0, 0x8}}}}}, 0x0) 16:59:26 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r3, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:59:26 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x5, &(0x7f0000000100)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 682.865082][T15179] loop0: detected capacity change from 0 to 87 16:59:26 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x74) bind(r0, 0x0, 0x0) 16:59:26 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa202, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x5009}) write$tun(r0, 0x0, 0x0) [ 682.897557][T15183] loop2: detected capacity change from 0 to 87 16:59:26 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$cgroup_pressure(r0, 0x0, 0x0) 16:59:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x18, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x0) 16:59:26 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(0xffffffffffffffff, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) [ 682.981428][T15193] loop0: detected capacity change from 0 to 87 16:59:26 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/29, 0x1d}], 0x1, 0x0, 0x0) 16:59:26 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r3, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:59:26 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa202, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x5009}) write$tun(r0, 0x0, 0x0) [ 683.024471][T15199] loop2: detected capacity change from 0 to 87 16:59:26 executing program 1: syz_emit_ethernet(0x22, &(0x7f0000000000)={@remote, @broadcast, @val={@void}, {@can={0x8847, {{}, 0x0, 0x0, 0x0, 0x0, "37d7a9ce94369144"}}}}, 0x0) 16:59:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="3d5e4e9d4e7e5fffc5ec2f4817d823a337b6a5f5fe2d6d02b6a26e129c3cdf79bb5f3aa327f14d514ff057683c1c5fcda82583078e72927617af7070", 0x3c}, {&(0x7f0000000040)="47167e4e93775e57dae83d6ea618d77a627fa349e29a63c21bd9a7f5aa555107b269ad0be5c350271b505b", 0x2b}, {&(0x7f0000000600)="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", 0xf00}], 0x3, &(0x7f0000000480)=[@ip_pktinfo={{0xfffffffffffffc90, 0x0, 0x8, {0x0, @broadcast, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @loopback}}}], 0x40}, 0x0) 16:59:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}}, 0x0) 16:59:26 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa202, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x5009}) write$tun(r0, 0x0, 0x0) 16:59:26 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(0xffffffffffffffff, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:59:26 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000580), 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) [ 683.122194][T15212] loop0: detected capacity change from 0 to 87 16:59:26 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 16:59:26 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r3, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:59:26 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000000)={@local, 0x10007809}) [ 683.162733][T15216] loop2: detected capacity change from 0 to 87 16:59:26 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/schedstat\x00', 0x0, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/118, 0x76}, {&(0x7f0000000140)=""/119, 0xfffffffffffffe75}, {&(0x7f0000000240)=""/127, 0x7f}], 0x3) 16:59:26 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa202, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x5009}) write$tun(r0, &(0x7f0000000180)={@void, @val={0x0, 0x4, 0x0, 0x1f}, @ipv6=@gre_packet={0x0, 0x6, "c6281f", 0x44, 0x2f, 0x0, @mcast1, @local}}, 0x76) 16:59:27 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:59:27 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x13, 0x3, &(0x7f00000005c0)=@framed, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 16:59:27 executing program 1: syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 16:59:27 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa202, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x5009}) write$tun(r0, &(0x7f0000000180)={@void, @val={0x0, 0x4, 0x0, 0x1f}, @ipv6=@gre_packet={0x0, 0x6, "c6281f", 0x44, 0x2f, 0x0, @mcast1, @local}}, 0x76) [ 683.274081][T15228] loop0: detected capacity change from 0 to 87 16:59:27 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r3, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:59:27 executing program 1: syz_io_uring_setup(0x52c, &(0x7f0000000180), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000200), 0x0) syz_io_uring_setup(0x6ead, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) [ 683.312991][T15232] loop2: detected capacity change from 0 to 87 16:59:27 executing program 1: r0 = epoll_create1(0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 16:59:27 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x8, 0x3, 0x7ff, 0x48, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) 16:59:27 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa202, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x5009}) write$tun(r0, &(0x7f0000000180)={@void, @val={0x0, 0x4, 0x0, 0x1f}, @ipv6=@gre_packet={0x0, 0x6, "c6281f", 0x44, 0x2f, 0x0, @mcast1, @local}}, 0x76) 16:59:27 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:59:27 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r3, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) [ 683.395376][T15242] loop0: detected capacity change from 0 to 87 16:59:27 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x11, 0x0, 0x7000000) [ 683.417976][T15244] loop2: detected capacity change from 0 to 87 16:59:27 executing program 1: r0 = syz_open_dev$MSR(&(0x7f00000006c0), 0x0, 0x0) r1 = dup(r0) readv(r1, &(0x7f0000000700)=[{&(0x7f0000000100)=""/12, 0xc}], 0x1) 16:59:27 executing program 1: syslog(0x2, &(0x7f0000000000)=""/8, 0x8) 16:59:27 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa202, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x5009}) write$tun(r0, &(0x7f0000000180)={@void, @val={0x3, 0x0, 0x0, 0x1f}, @ipv6=@gre_packet={0x0, 0x6, "c6281f", 0x44, 0x2f, 0x0, @mcast1, @local}}, 0x76) 16:59:27 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:59:27 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r3, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) [ 683.538566][T15254] loop0: detected capacity change from 0 to 87 16:59:27 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa202, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x5009}) write$tun(r0, &(0x7f0000000180)={@void, @val={0x3, 0x0, 0x0, 0x1f}, @ipv6=@gre_packet={0x0, 0x6, "c6281f", 0x44, 0x2f, 0x0, @mcast1, @local}}, 0x76) [ 683.565507][T15256] loop2: detected capacity change from 0 to 87 16:59:27 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa202, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x5009}) write$tun(r0, &(0x7f0000000180)={@void, @val={0x3, 0x0, 0x0, 0x1f}, @ipv6=@gre_packet={0x0, 0x6, "c6281f", 0x44, 0x2f, 0x0, @mcast1, @local}}, 0x76) 16:59:27 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x0, &(0x7f0000000540)) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r3, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:59:27 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x0, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) [ 683.701039][T15262] loop0: detected capacity change from 0 to 87 [ 683.706548][T15264] loop2: detected capacity change from 0 to 87 16:59:28 executing program 1: syslog(0x2, &(0x7f0000000000)=""/8, 0x8) 16:59:28 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x0, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:59:28 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa202, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x5009}) write$tun(r0, &(0x7f0000000180)={@void, @val={0x3, 0x4}, @ipv6=@gre_packet={0x0, 0x6, "c6281f", 0x44, 0x2f, 0x0, @mcast1, @local}}, 0x76) 16:59:28 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x0, &(0x7f0000000540)) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r3, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) [ 684.344746][T15268] loop2: detected capacity change from 0 to 87 [ 684.346953][T15270] loop0: detected capacity change from 0 to 87 16:59:28 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa202, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x5009}) write$tun(r0, &(0x7f0000000180)={@void, @val={0x3, 0x4}, @ipv6=@gre_packet={0x0, 0x6, "c6281f", 0x44, 0x2f, 0x0, @mcast1, @local}}, 0x76) 16:59:28 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x0, &(0x7f0000000540)) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r3, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:59:28 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x0, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) [ 684.495886][T15276] loop0: detected capacity change from 0 to 87 [ 684.503662][T15278] loop2: detected capacity change from 0 to 87 16:59:28 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa202, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x5009}) write$tun(r0, &(0x7f0000000180)={@void, @val={0x3, 0x4}, @ipv6=@gre_packet={0x0, 0x6, "c6281f", 0x44, 0x2f, 0x0, @mcast1, @local}}, 0x76) 16:59:28 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, 0x0) io_submit(0x0, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) [ 684.630521][T15283] loop0: detected capacity change from 0 to 87 16:59:29 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x10, 0x3, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:59:29 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x22, 0x0, 0x0) 16:59:29 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[0x0]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r3, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:59:29 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, 0x0) io_submit(0x0, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) [ 685.208042][T15288] loop2: detected capacity change from 0 to 87 [ 685.212348][T15289] loop0: detected capacity change from 0 to 87 16:59:29 executing program 3: bpf$PROG_LOAD_XDP(0x1e, &(0x7f0000000640)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:59:29 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x2c, 0x0, 0x7000000) 16:59:29 executing program 3: request_key(&(0x7f0000000680)='user\x00', &(0x7f00000006c0)={'syz', 0x3}, 0x0, 0xfffffffffffffffc) 16:59:29 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x8, 0x1, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2007}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:59:29 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x8, 0x1, &(0x7f0000000440)=@raw=[@jmp], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:59:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000700)={&(0x7f0000000500), 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r1, 0x1}, 0x14}}, 0x0) 16:59:29 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[0x0]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r3, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:59:29 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="9520"], &(0x7f0000000040)='GPL\x00', 0x7, 0xd8, &(0x7f0000000080)=""/216, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:59:29 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, 0x0) io_submit(0x0, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:59:29 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xef4865af9981e7ad, &(0x7f0000000380)=@raw=[@map_idx, @ldst, @ldst, @btf_id, @map_val, @cb_func], &(0x7f0000000400)='GPL\x00', 0x0, 0x90, &(0x7f0000000440)=""/144, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180), 0x8, 0x10, &(0x7f0000000580), 0x10}, 0x80) [ 685.330957][T15307] loop0: detected capacity change from 0 to 87 16:59:29 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) sendmsg$inet6(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 16:59:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@ipv4_newnexthop={0x1c, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0xb00) [ 685.351761][T15311] loop2: detected capacity change from 0 to 87 16:59:29 executing program 1: bpf$PROG_LOAD_XDP(0x19, 0x0, 0x0) 16:59:29 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5e00}], &(0x7f0000000040)='GPL\x00', 0x7, 0xd8, &(0x7f0000000080)=""/216, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:59:29 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[0x0]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r3, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:59:29 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000b40)={&(0x7f00000007c0)={0xa, 0x4e22, 0x0, @private2, 0x80000001}, 0x1c, 0x0, 0x0, &(0x7f0000000940)=[@hoplimit_2292={{0x14}}, @hoplimit_2292={{0x14}}, @rthdr_2292={{0x18}}], 0x48}, 0x0) [ 685.450576][T15323] loop2: detected capacity change from 0 to 87 16:59:29 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x4b, 0x0, 0x7000000) 16:59:29 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)) io_submit(0x0, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:59:29 executing program 1: bpf$PROG_LOAD_XDP(0x3, 0x0, 0x0) 16:59:29 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind(r0, &(0x7f0000000040)=@isdn, 0x80) [ 685.494552][T15329] loop0: detected capacity change from 0 to 87 16:59:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x5c5fe33e6dac8f6d, 0x0, 0x0, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}}, 0x0) 16:59:29 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x10}, 0x48) 16:59:29 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x1, &(0x7f0000000000)=@raw=[@kfunc], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 16:59:29 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:59:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x5c5fe33e6dac8f6d, 0x0, 0x0, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}}, 0x0) [ 685.594307][T15341] loop2: detected capacity change from 0 to 87 16:59:29 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0xffffffff00000000}, 0x0) 16:59:29 executing program 3: socket(0x2, 0x3, 0x3f) 16:59:29 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)) io_submit(0x0, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:59:29 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2f317f08c58cf36a, 0x0) [ 685.683401][T15347] loop0: detected capacity change from 0 to 87 16:59:29 executing program 1: syz_open_dev$evdev(&(0x7f0000000000), 0xffffffffffffffff, 0x200000) 16:59:29 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0) [ 685.707040][ T40] kauditd_printk_skb: 87 callbacks suppressed [ 685.707058][ T40] audit: type=1804 audit(1655225969.500:1042): pid=15347 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/941/file1/bus" dev="loop0" ino=1049105 res=1 errno=0 16:59:29 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) [ 685.724507][ T40] audit: type=1804 audit(1655225969.520:1043): pid=15347 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/941/file1/bus" dev="loop0" ino=1049105 res=1 errno=0 16:59:29 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x3, 0x0, 0x4) 16:59:29 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000140), 0x1, 0x1) write$binfmt_aout(r0, &(0x7f0000000440), 0x338a) 16:59:29 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x74) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @empty}}) [ 685.762578][T15357] loop2: detected capacity change from 0 to 87 [ 685.778547][ T40] audit: type=1804 audit(1655225969.570:1044): pid=15357 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir1742540418/syzkaller.Qym0Qm/121/file1/bus" dev="loop2" ino=1049106 res=1 errno=0 [ 685.783151][ T40] audit: type=1804 audit(1655225969.580:1045): pid=15357 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir1742540418/syzkaller.Qym0Qm/121/file1/bus" dev="loop2" ino=1049106 res=1 errno=0 16:59:29 executing program 3: syz_emit_ethernet(0x99, 0x0, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000000)={@remote, @broadcast, @val={@void}, {@can={0xc, {{}, 0x0, 0x0, 0x0, 0x0, "37d7a9ce94369144"}}}}, 0x0) 16:59:29 executing program 1: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/mnt\x00') ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) 16:59:29 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)) io_submit(0x0, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x4000}]) 16:59:29 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xbd) [ 685.882214][T15368] loop0: detected capacity change from 0 to 87 16:59:29 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:59:29 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = dup(r0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000000c0)={'b', ' *:* ', 'wm\x00'}, 0x3) 16:59:29 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x4, 0x2, &(0x7f00000000c0)=@raw=[@map_fd], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) [ 685.891337][ T40] audit: type=1804 audit(1655225969.690:1046): pid=15368 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/942/file1/bus" dev="loop0" ino=1049107 res=1 errno=0 [ 685.892128][ T40] audit: type=1804 audit(1655225969.690:1047): pid=15368 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/942/file1/bus" dev="loop0" ino=1049107 res=1 errno=0 16:59:29 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xf4240, &(0x7f0000000000)=@raw=[@kfunc], &(0x7f0000000040)='GPL\x00', 0x0, 0xd8, &(0x7f0000000080)=""/216, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:59:29 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = dup(r0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000000c0)={'b', ' *:* ', 'wm\x00'}, 0x3) [ 685.942872][T15376] loop2: detected capacity change from 0 to 87 16:59:29 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = dup(r0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000000c0)={'b', ' *:* ', 'wm\x00'}, 0x3) [ 685.960505][ T40] audit: type=1804 audit(1655225969.760:1048): pid=15376 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir1742540418/syzkaller.Qym0Qm/122/file1/bus" dev="loop2" ino=1049108 res=1 errno=0 [ 685.960914][ T40] audit: type=1804 audit(1655225969.760:1049): pid=15376 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir1742540418/syzkaller.Qym0Qm/122/file1/bus" dev="loop2" ino=1049108 res=1 errno=0 16:59:29 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0x0, 0x0) 16:59:29 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = dup(r0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000000c0)={'b', ' *:* ', 'wm\x00'}, 0x3) 16:59:29 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x100010, r0, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) 16:59:29 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r3, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:59:29 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) dup(r0) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)={'b', ' *:* ', 'wm\x00'}, 0x3) [ 686.043928][T15386] loop0: detected capacity change from 0 to 87 16:59:29 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x48) [ 686.066310][T15392] loop2: detected capacity change from 0 to 87 16:59:29 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) dup(r0) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)={'b', ' *:* ', 'wm\x00'}, 0x3) [ 686.071688][ T40] audit: type=1804 audit(1655225969.870:1050): pid=15386 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/943/file1/bus" dev="loop0" ino=1049109 res=1 errno=0 16:59:29 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240), 0x4f) [ 686.073766][ T40] audit: type=1804 audit(1655225969.870:1051): pid=15386 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir1210100635/syzkaller.sGMVOj/943/file1/bus" dev="loop0" ino=1049109 res=1 errno=0 16:59:29 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) dup(r0) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)={'b', ' *:* ', 'wm\x00'}, 0x3) 16:59:29 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYRES32], &(0x7f0000000400)='GPL\x00', 0x2, 0x90, &(0x7f0000000440)=""/144, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:59:29 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r3, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:59:29 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0x0, 0x0) 16:59:29 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f00000000c0)={'b', ' *:* ', 'wm\x00'}, 0x3) 16:59:29 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x0, 0x0, 0x0, 0x202}, 0x48) [ 686.181353][T15404] loop2: detected capacity change from 0 to 87 [ 686.195801][T15410] loop0: detected capacity change from 0 to 87 16:59:30 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x19c00, &(0x7f0000000000)=@raw=[@kfunc], &(0x7f0000000040)='GPL\x00', 0x0, 0xd8, &(0x7f0000000080)=""/216, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:59:30 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f00000000c0)={'b', ' *:* ', 'wm\x00'}, 0x3) 16:59:30 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f00000000c0)={'b', ' *:* ', 'wm\x00'}, 0x3) 16:59:30 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = dup(0xffffffffffffffff) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)={'b', ' *:* ', 'wm\x00'}, 0x3) 16:59:30 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r3, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) [ 686.307310][T15420] loop2: detected capacity change from 0 to 87 16:59:30 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0x0, 0x0) 16:59:30 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = dup(0xffffffffffffffff) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)={'b', ' *:* ', 'wm\x00'}, 0x3) 16:59:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet6(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x68}, 0x20000005) 16:59:30 executing program 3: bpf$PROG_LOAD_XDP(0xe, 0x0, 0x0) 16:59:30 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = dup(0xffffffffffffffff) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)={'b', ' *:* ', 'wm\x00'}, 0x3) [ 686.345523][T15426] loop0: detected capacity change from 0 to 87 16:59:30 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) 16:59:30 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = dup(r0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000000c0)={'b', ' *:* ', 'wm\x00'}, 0x3) 16:59:30 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, 0x0}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) [ 686.438261][T15436] loop2: detected capacity change from 0 to 87 16:59:30 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=@base={0xf, 0x0, 0x0, 0x3}, 0x48) 16:59:30 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = dup(r0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000000c0)={'b', ' *:* ', 'wm\x00'}, 0x3) 16:59:30 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0x0, &(0x7f0000000540)) 16:59:30 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = dup(r0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000000c0)={'b', ' *:* ', 'wm\x00'}, 0x3) 16:59:30 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x48) [ 686.492522][T15442] loop0: detected capacity change from 0 to 87 16:59:30 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = dup(r0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000000c0)={'b', ' *:* ', 'wm\x00'}, 0x3) 16:59:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@ipv4_newnexthop={0x18, 0x68, 0x1, 0x0, 0x0, {0x2, 0x2}}, 0x18}}, 0x0) 16:59:30 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, 0x0}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:59:30 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = dup(r0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000000c0)={'b', ' *:* ', 'wm\x00'}, 0x3) 16:59:30 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x74) setsockopt$inet6_mreq(r0, 0x29, 0x2a, 0x0, 0x0) [ 686.544142][T15456] loop2: detected capacity change from 0 to 87 16:59:30 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0x0, &(0x7f0000000540)) 16:59:30 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8901, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) 16:59:30 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = dup(r0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000000c0)={'b', ' *:* ', 'wm\x00'}, 0x3) 16:59:30 executing program 3: syz_open_dev$evdev(&(0x7f0000000000), 0xffffffffffffffff, 0x80440) [ 686.601537][T15462] loop0: detected capacity change from 0 to 87 16:59:30 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = dup(r0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000000c0)={'b', ' *:* ', 'wm\x00'}, 0x3) 16:59:30 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, 0x0}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:59:30 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x74) sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f0000000140)={0x2, 0x0, @empty}, 0x10, 0x0}, 0x0) 16:59:30 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = dup(r0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000000c0)={'b', ' *:* ', 'wm\x00'}, 0x3) [ 686.684800][T15472] loop2: detected capacity change from 0 to 87 16:59:30 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x7, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 16:59:30 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0x0, &(0x7f0000000540)) 16:59:30 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = dup(r0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000000c0)={'b', ' *:* ', 'wm\x00'}, 0x3) 16:59:30 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x0, 0x0, 0x8876}, 0x48) 16:59:30 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r0 = dup(0xffffffffffffffff) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)={'b', ' *:* ', 'wm\x00'}, 0x3) [ 686.748598][T15478] loop0: detected capacity change from 0 to 87 16:59:30 executing program 2: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 16:59:30 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r0 = dup(0xffffffffffffffff) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)={'b', ' *:* ', 'wm\x00'}, 0x3) 16:59:30 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002000), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000000000)="9eda438838743bd4e9720bee57093515dc189a5ea685e9556c1c2c3cfc4df50d66d31a48aa312663b68d18c5826b5b55fb738208863dac0f10f423aee7a5d8ddc45ebdfeb7424bae859d7c37ecfc4b63914d5a56d91017dd22bc84f759a15969951aef9d5c88c96560896988fa18cd946cfcc3a0f1c993348377904eac32c980bdf7976ebca2b499cab63c4e841514277fc71d4620e29a92523402485de0e82896484c0ae497a4d686df23ca7b68c3fd5e624d3510d7f94838e54af877ca58a00c5a672bba11f5aa1ed1980dfef47b9973d0bf456ded5e72f1702b3dc5197fce39cba53a038d8dc0ec783ce70577107dc5e8b299e64a0b7f1191f0926bd25762370191710bab2f44e9069f55f8a3f87e4cb488a2fb3348c0bf3b3874291f83e4776b160ea73aafa3919c7c069c73c0052173a63158db8b65541d161f9c964926ad7f06bdd6cb6a32135b04e35701c2e13c49c1f75dc7a25d623378860692d172ec3f1e1f2d9dc77c015c13721efcb101c2390abb847e871132f472a37cc0163b39b1d575a5444e246a08a1afb1a696cabab29498a314429a3b9f44c43ba29f71fac1fbe0d01c3c16d22730932704bcfb0c1b7a432bc51dd3f5dd5afc3b342cbe6a6ff899039e28f9a51881b1d46fdcf31767cb6f5c5c69ab3c80615d77c4d1664fc4ec831b8cea2e752bbb7a9ce79df875b29f1e232751daf32a1a0c4ff8bd0688e2b8e2d668b8a77e20a9eb6ec2e2c23b94e507baeacbcfa31fb6e1ca3343668f43e3aa6d85e7c29bf0bb4dbdabddc92be7f4a6f5d21b19e6da17bfb6cc926e3847532fae29c7b62fb909130ec372d3c16cfe6aaf3ce2af0fe7610fde7aad61bc80d2f96b999c8ccf6d22cf903ca8ae8b879ec4a416f334982e9810c0140a18d4dc81b5edaae23e9f4abaf40ed71512aebbba5bb251545e188db789558a845a2877b14bdaeec3c738b7d730c0860531bf5517d4f0e8f95ed3571f8a35816d5116fcb8d7cbf42b7d5d5e65541508c898bb2e0fe96297d2ab7135662de39df099ebaed5871111f5346278cee5728cec512e6c0a0d65b51e3d627873195b84103341c2bc83b6c8fdd8ba17f5957413f61c69d618c9b9d0b1f08dc81921b6c662ee1da3bfa019b095e9a03c2db4d645ccb7364e895098cbf7d932c72d80663c7a1694d122f7348393079223c11d36c64a5856eae0397ab9a9d948204b74e56525a9d552dd0916de81cbb5af3c59b3d7f8f9154423ce2cb45a5bc808e24bef13212019a19545fe54ba84d01534358380192b8c7b0eda907810375bb66a578a58fec392b47991271c8367b91d710e8a176bc1a4e96f0e137d4c25fbb03eddc392f9f170dd744472b864fbbae7c93d86e682308b21b73c5652065d72cf02e1152b44024a90a3b52eb0bb3cb412e518d37a68aa4c7f46789c54ab30d3a73d0a8712fde612294cda2aa1ccf164930b9b1d17801d4fbb06e849d39bf2b5141330caa0d2618b616f1c67e1ca57080e79ed9092ba7a55e8121cfc825cd26a0199a479a7ab1b7b23d2a4dd82fa6d04ee41ca680435efc934f0451e865e8632ac2f1115f4cdd33b0fccb7a2326127faf20cba37c828613dba5a98f4e1ad25eb6b91078cf73d873df9ef91531476f64b83559ff7ccdc4c070d478b18196ea05fe8d4ea0216ee5273dfabbd04582f40f064c9781afd2cbf30901f28cd09cc934f1b2d50883778274177e3dba8af0a1b931d80ce1a6c4085780ea2195b65ecfd2953f78a5290fe560d0cd6a5e73890a5a82dc410b92a3ef2be05ec5607820fd4ca6b9c3aa258d59022fdcb21665f1ce4e8aad8fd918c43bd3c2afe3dc223ff9f48831d401c8b6996190793d1dd7551f8511b69283992398d8f9b4bd2b3398d3b8c6f3c5d8b802ca5282b70242df2b7be4b38e70c3065f8da888631375afcc05ce578089c4f783776b286b7a60d1b5e189e2742a3240c1036a953d886885422eef01413c38099b64505fd5a73488acb4e611820674c58ae74d6c64a885d4beda9bd7903bcdc71e3711e2a057c0eab2100c321050ab14c6e453c53182577ad3178603cd9afde40a701120e9a36074fd582428c74e02781318e6c65450f8f020bd22475696fe13b8c59260e53a06d16eabd135e887a0a6bbc8ad21be7661df76fec5b13844f68b8eed1a7379713738beac9f23c7a26520e19797a910cde9fb285179526889b908b7eb49bb06f70f6271fba8712c1a4269ebcf4b7d043e924e3d2c4c753fd7e547d95841e335179836f76424e728810d7f32b78256ea30c79d9238a6588426e1f2d4c0b03d5605bd826ed24f0f11326b4cf958632b86e017aa80e142db1580c44f76d9c98196f3f6852ab2bfc6a01a3553a130c2d171957f5a45c3550fbbc990ef8742a98a86b280a57b9f198ff436bc01161ada50e6f23026c3254adf2321bff7e20aa54080bbb57d8d52c6a6df6107706a2e5bc6da68f17b474c0edd39401d765086e885cf7992405f856557915603cbe8894676e996bbadbb649a5e7498b91f9bd2f697dd9ebbe4d386050258b9f4c94781e61c660651c3f1e3ae51f8c035eca365bf15d6db48ea9ce183515f4a208d010f7c23dcacbd6e225490d7e9c133525f5c9018d752b21b4897bf18b64b6a9936f538a0a8958fc934440aeeaad2b68ac844d76f0900a6c95bd0b353d85d4fb62eb88360112237fd8c636a80e3130b21d66ae8ec58a4b76cba0602f96da919f7e84fd37e3ec2379f58e389a39c78d2482e03c379e3c4649ad63a76e3707ecff07d2fcb0c9dfc524cab49e69a09c92e4f88714335cb57d3f6184d07bef9657280fb5c9fd2d8f940f7ac6c5407e3077aa2e4ba8e217e0ee19e302d6d90e3be05a86dade35d2e454e511afb5cf5936f1d11f2fa6be6ceaa817dbdc7a6aabf2fad8ff3efa8382a25099f0c5989d2ad56ae0f4968b2cfcfc67b4f1c161c75900b4848f59a3c0376dfcb7997bf28e9e85d6dd942a360516de38e1c1a038a796f9a77ff2b0c7e5e8f4932391a0e58e76dacc6f9764178a211dfde3e75d367d2911ff398126ffdf83cf2fbdf1ad5232bed9155f7a168638a572094a9e934d4969b358cf6e121d7fd2aeae2f499068b42c152f0e3403a230885d6f92f038ddaa23499f804ffb06abdbabb51f6c38c92fb1a6271a4b13d6d11125b8ec12efa5907dc65062797fb9cca15e2f254e76b182d3fcdb4e96ac4de36d6df7e7bba5c32f422286b1be3b79bffb6fd693761952d195a84ad9ceb07287a0fbefab9e0347b513c5f60233ccd4b52d90ec144a2f896d9dc7f279f8aa93038f3efa286e1c3006933a4d7183d952f8d28b141b28b2af355b5bd8198dfde1ffb8d09202aff0d16ca3fec194662892a49f829813970a4520f1228aa03d211a45bed3b2e05bf1f10b1a152761e7b6c6ddea863a3c02224256092c70ca70dc185c4c385dd98b09e2682661e1e66f71d9c4037048eb70e8a1cbe57de87ec43713abf5fdcf63b9c482f318e3bec37e878dadbae15a02d731e6c8574eb14c059d72f73be5174add786d06b585a28a06d349d8e434a491b34897b3c1ad786ec8280d7f57edd4fbc6aea5485d659b59d393e331cf91e6ed76f340fcf7cf460892fa7318fc42b883f61d888ad982a751accb613c66661fba5f3d6de751a6a9ef8a4700316aaad04e991aab7903f4ef012ec2a8c092234e74ef335daf360ae47bbd2bbc6ad8c1a4f81efe8bbd703cb55ef36b32b4e30cb5a3b165c02ba295d0e1c40ce6ff8f479a74f01275f113ebfa8ade37a59ce70e6ca2a6f48f1be085f61bf772e2c2da523a2cfe63e99c57bdb1ff23139d4fca49eff7547e9880eefd3f7511a677efa23b52098ba89037c48dfcda2e8c1cfb9f892161049e53f8cee55256279512aecab8c441600dae0fd957883273047cf5c66ba209f830aa2ce0cbe41ca08c0cef4aed7f4324009200661a7ce680e5a8df2d051c1d8b2f63d25d8d74d05c75c46c8f3f24d625539e63459650960498a54ec3b16225bbbf4d3930009df265839d72611f5332a904cdebada108236e4414a2909ad01ec44b9d7f75de4385ad7ca5152e890a0919b3639fd1bcbca3b737ebb8d9ae541b1271cf2166ba15830e66f3d3afd3b754a7f81ad4f0999704ae99c114907c5be4a4797f13b80564f234723a34dbe137dabfd7fa23562df679f54a6ab54def6d63deae9844f72fd73efd0413551f5c4b9ee826eb3b7faf92a59ea34a16723b4fea14d1c8815a4e2d39fc48d1dbce526a7c53f5a96d0ef6463a0cee73fd3505f5c764a264b83c4a21f80e8b61c82d24442d13da99d18dc1b2538e7a510f6093d9ef2bc5cc777d4f98411e93919eddfd69d6e20d227cb61c50f358ea227f4de941fb080c1cf6b1f6e25533768fe133dbfc3f9d29c603bed38aa3c5af5b81a706b0067b40b88f992610d04c7cc36b8f649697cd6a93fae51138161891ae75a7147780fc59af5a6e18c54f9d2a4fe7fa92314b399afba9a40d0cc24f70a2593acf8d179215e06b7a9a88224bafcb2cbf60caf5fe4ff38208a70793b5dc33cd572956260e1c86312d3ba9b3a4b2b44376f2e78c616a6c0880ac8dcbaa30b9f761d500fd03a8518dd0509157b184a2d95e0caf3ffc8ac2db6c54d80c71a1e5b9ea3bf51071e2118af204123daceeb04e4f6f31f32a4d3fbb76ee49440cabda2c121c1b99acab5b87cecc37c3f9066af34ab29d6598bbfd91047a2ac7ce3a8f3027ff5e6d743506f161087278896a98ed37122ba208b61cf54d3929555ab06b564cd5e4f46f4755a6cfa2ef2b30d29ea66f2749d4060d411fa9160c91b6f55cf071ac8222c6313df18759e2958cddfe3db4cbeb9cd39abcf5f0beaecae8437813995cb7ed0b87d42ca942ff7245ece204798d01361c5f008e0d82bdf76660515bc78f7f8f409ccf68614b2cb50f5af2615661326fd971bc57eeeade60ea906b8df1cb0dfafd318cd2c396309c329d0469ca192aa8f51d7c4227685440f073983255baf054b97b9d7be1d1470d7eabd5c09b2116b4e86b0567b7e97e088717a4fe3dbdd310a1c39136ea4d2c47492001f9885dba03bf97e7da376171d666441cdc2f999db137603d57df32b4260fa0165e82917bb1631ea314e7a7437e66fc68cef22cda8f456d6e583f6e3237e0bc79987a9103f7cf0918e26881f67ea582e1ff3a49177599d385bf6e42572a2547933aeddb826530e9adf30dd84c3a7fae5c4c26f6c6f3a9f0906decd314e2407825abef959c5416d18a92ff34e6c521a16e8a0a29937c77d4ee99b41d530a732acbe0bf5d274df9d496b47a9a624546bdcf9976cde12ec989cb2a70b33a7c8a3a77652023164695f9db30dfcf587f0cd4f73e385730bcbdd688f6dcb08ba0efbb9f579220afefa4acfea522e864fce9b1782ce9f14824d16e9d33a2609c23ba3c5a1af02549357a0dcc12e37819d778021762cf895abeac1125b744c8b8225a091e7be9ded9993cfa3ca9abb83e25c8f559009977a2ed9374a89619fae5ef6d164bb73d242004dc8428e44689b33ee3bbe88bb4962ab0a32a90e7aea044f08410752cb2d7aeaf3196648a3a99092665b478bb394b48f79b36db0efc7f50d6a5179c945f5298cfaac5e5dea715296f92abce7281d48a0c9c6b785a35ef5f1697c047ddb254fe9a8ab9f498b0c1ae09ffd01a3d8d427fee7e36c51e0e5c2fee2245fb8464626ab5c9857ebce91f7d22bf024d10c2d71021cd69268472de419e6cefd970cc3a8e4d1bbe6496799aa7f100411766e712aff08b731460f14f9d7356db12cf8e1c6121968dc68b1d81c086b325ca4ce6fe1f476707e08fa913144b757c6be17cf93150db29544d207f09a896f33b7335d9339215da751e7af2c6bdd19db6f521af2c8a5998dc607f97026d07111488741134c1c86eba123273d1fd5ee4b471e86f9ae9478a04c7482076ab34a1eca5c64f89e5106eed44bceec019c67c12fb4db4fdac153f4ac3b63ffeb6d30de58ec039e2dd3c181e254cd94d0a2b0b44490384cc5915b54ee1db2b6d059879bf8126c9ca976d0f7862da07ecd350930a081810a7afd72b2ad3f65b96ae9c7f91227a2b5513a559f36b90fe01be9ae5ad3ca65e2c26f358fc26b858a3633fda7ae49a5fb705220a5819b3cca41b1ccc21d7c40f5fa9c422288efa5394e4312675899d704a2aab62b8363f58fd4bc12a8bea6ffc45b4414237bf5f019321206dbba439acb5ef26641f30fdac20f964354bce94e4c9d73e137f9806deefaf6f4acaa0e76ad4fef9f6cb7fc01bbabda9612c05adbe46afcf94819e8a4b4b49ff764784fa432d47fb6d4230900043d1b4521cd6839fe8c5df4d1899fdfb13880e207cac73f0a29020bdd563bd9c2f6bcd1ec523b3e03ebf6164fc65af001830c51396f9df2d346f83a59cfc82201cf1150ea57259d579fc2ed199b3fbe42d5188c84e4354610743e5b23a265246313cc63913f17412fa00d98b379b80b96d936969572e11316bc8926cb23115186f3b2387b82c3898fa41bf16a308da62d5a3eb3609af1943fddde08a4036eb2a41b7292caad9eb082614b02a1fa255bc7abd4d0e3b4ec1801e131e68c7aa9da1a0ff10f9de87dec8fad1ad8bfa99caa49e203a7b9c33e044d4544a537471e7a452468b821959bc488c6b8cbf81e90081a26de273ad1203cc06adb6af242ab19f96c1c66b58c37e2c9309704fba63af99a8d9c5efc651afb631fe9f546b938cc3b8e526c4159e5c9f7afb29fd1d55fabf09367ce2a63a35e7a2062d1c772ed981fd77157a847f687a177cf9886ce41df8cc509302b46bc1e2ba896b1c1656a1bbfdf4cd9ac39cf8510d1c823075f16550fd044aacc8d42a56f03718f7b18475cdc3999faeb25ab3dd8a807ee04d8e5d831d08b4e309dff50330685138797e10c6362636f53f22bfc1f3d5090a5d369282d9de36bb4e2505411ccc6ea395afa1567b15a2fb4be2adeea7126b1a8e80034105e0d98bdd78e796ce1cdc06a4ae666fc0baec5c52614340ed997673e26ec47c88846c000bb7c9077337cd44f5c041fdcc64986e5e1c0f488148f0ee6f842c44c0b72e82109270341bba6e9080b70fcf930d0f10be5a36798e70111fed72727b72282ff164fc08319d74f1f57cde71b57cb397a9e753f87b97729bafba017a24cbfdee5dfe7fc296c112e93bb8fce560ca80a3afd8370baaa79ad783b51352b5440b144a47378c9ae22eda5794328e95bcca220fd07bb56915529b155c61858efe89ad36a79288e74c0e251addcfaf797432175a5562b46eff5e3aebeb74623e18beef85389383c604d8884431b07dc4bea0174aadc337ff41f558a63f16690feae47efa2a5d1318b7397e1e4ba398727d286791b71610e1d78d32800e7e113c12abf0f60b6ca4401ecd23b7aacd990633b2b017daf6bfef1b2361ece74b7dbcbb1a73d4bc1f9d2e5c9fb0b7980d25cc44d1b10c09ef5a6a05c84669294a5cadf0cd88ab449f9f0bcdd8c48590d416c5c1feaa494a2145949c2a3373df7c6014225f2745bbeb20ff294d22c0d96ca111e6926946207cab56a03162a49e68968e398f70690188ee3ca847ef421742d60b9a6ad029e8a3d607950b2bf8ad8ff297cb39acc94905635770436e134435e28205140331b5100d9f64469792fffac87bca0835cbc617446ff86a7b50418c305f32e658b32130e491e38709fd3697017ac8084cdf1ed81a28375aed092ab4e32ca88a933154dd3a9e99351acbada926b67b310c7070ac1a414a28c5abfe1f45476249a12f18ca2d981528d881ed3c5072e46a6eff3cdf37dcbc89c7f79c88a1f8d15d15beb66a0e4440c7b93e379c4e2bac1d5c8e85f1852887e2cfeb178fba1c67dc2adb0c87df8ca4444ca7f455509f492effb5001328b8cc696e2933207a2d78bbce8562ca34a248193c914406b161c8141479d891b0c6110ec1e25cad38299b489f2ec437017cadba67dcb58abd4933c95b3526f1d4747b8701a7d71e446e4b62e2941d4281faca0cf22914be5aad80f47100000000ceb24e82508fe55a92fb6db70d03d1c1ec09cfee31639341756a4630a0eaaecac7bfbddf9d30c42cbd45eb181d5bd341307ad26f496bb042e2b655c03ac3dcc587acbf50f79b5c239be9938b62d3251b199f8413b020605d5d0552cfd9c39c9132719d6d0a326b000e12fcb51bc274df79d11430060d05978cdd50583f1bca82c57dbee605e2d00fcb5414af13a596d35cb5ba62de6a28cbccc857d23547b1c7fd5ac8fbf6758d5b8451fa46d9acc00344dc2e565674b1dd3547eb8f8aa5fff99042f8d1d59e6ad2f53379211e6832fcb68f5777eb2db85b28f724f4e4ce6342cf55713ff7b0cb4f7f47dd12a6566b86709eaefae024373267ce72a89e7f3e42ab48edcccc96b5d0403fe93a927e5ccf470014f220b8257393226cd7b996f20e6a34f81206733a9fdce03b701943c1b560d3eab68c2c225cf7f7f2b56123be2bb173e9e5b37f4d3348f6b987764ad07c2acd44514ff264d7eda31e5e517a179414841ad4553d51c08f435e05f10aa82d74b97a9ba3a133e6c9175fdcd4f3dc9c16d3be1d5bbaf13240177081ac1d56681bfa988a93af09868afd608520c0bfd71d857a6661fdaf6f2e166987eb007449dd26334ae932c5003fefc0f983b9e49cbfcea325f2de16a9ae935caa46f5b3433957fb370971ed957f138f08a60fed5b84995e428e7ae7d5c22021ff016baef0e713a118344c016a99ad469313ba7f2452da0dd82e019f64aa229cf80a69b3e08ac5847f10d247179855546313232f23e055c2f74ecef14e0fdcc29a9bf0976fbb249bd5c7903183d2a53c70960a183630e7d4928daa7091a85ad987d2a4a5b8f6be6612fa72d9fbb33c67bb38eff19f2e784f94e0354cf6d35a5b2c62233c039de3734b38e97ec72bd673fef09fd56fec329818cc68cdf12cb52f7d37a8350c16e94208880bfcd3e895d7aa4489e3dd15db4a9026f0d2a46f1e89c35845dbd976a1992b87c15a0c7580e6424b8792a7bb7b933d7c5433d4133ba4dbbcf7995d6ed3feaa32f876a287feeb9cc6107778c1f83e0119d980b9e994c2a3ae3de24a103efb3cacb746b49d1ad85746b233ab4aaf0e988ec2a786bc93f32040d3bdc3008031634cdfded5ac95b2279e096243228296591e7ba53c4a127772cc4620e6b238ccad250629194533d0a669ff3366c52d64928693e0b0cbb0b8e2c6029089d4dfe2b4b6c5dcd85f1a02770611e65001e48a32a8b0431a3b9d77fa3a95be38a0436a704c05a8e0183f3214c25531a63796f679bf72885aa766468d42b2543542d7e82544efc5c5e81e6a91a0f5d4e68000cff687d63e45c9a11d4ef515050daa592c9a828ac7c0488e7cdb3d6fdaef5e9176ee68d981ea50d386d74df3b40660351736deb03bfceb721878cf9894b0302df15964242ab6b9f77f98ba1c7993735983d2b022600ab74a19e3636e1400d08ba45d3a5c2774cb06a1c358bbfc11d27efaf7ca53c2e7757c8c76da24707d91a4a5244262898d68083ff91c514d9b9b1ebaa0cb0b10254fda1b1e82b9a1a47f117b5b280ddbec1f6732d11117ef1a7a674699df87fe795d1243cb9c4527e364e2b711b6562a87fafc130ce0baf1701686639b05f0c8dc708f008b1e6ab89e8d623bb83f3d54b7bcdbdacd055ac4eccbd36bbe0af0f65a00e3d6dd985ae8851d176976cfb5816d1fc2a63d3546aecaa4e712ca6961d1f181315d553de6b53485faed0dcfcf819a1ba3badffe797377d3d1ddaed8e7a0acc0c3d277762262a139f94de49faca167b11bf04f2104a5ab9a73367a6461f7124c91a2c4229ef98e6ebde9aac283c7d029400d71293f488ba169b62c1e94689cf5b248ed4aea62b88d65bb764cfe27d5231a58486e7381df518f4ed81cb905108c54a5050a94ca0e94da20d3794bc5fab9127dc95b6404b1e27b4e28136fc27806f7be798444c33aca88ffd45b860eba0d5033839f5a092863954604f1952bd61dad23b11643fe14f3ade08116aa2c13eee701ccd13e506bd65a1060bf69579aea8c8143cd38c0891a3065f251eba0c20ab9c69ddf28e3bd6400cc203bac8de1882239ad4e1b97b0ae2f1abb7bac7c0d8ef82b97ebfb1f5577f06a3a1377b09ada4db87d342f20ab0eca4b9c206042471307511429cb57a578211f92d3647189861cad9145f5eb26ab696abe50a2a6c1b469df97da28aba4e79b586c348a430f5ea61c4be1032fa61d18581f05a07fb8707c8996e0fff1c3eda59b992687fa12483b9327e10224b20d42e8b3fc4670bf070ced602283273d6818acd1f6da567c44d3f5e1377065d43d87d889843ae48e7fa8ba1634815695b8c480ca271e6e833799c70da80fd79acc09b989667a2294de5da73f0363df9a33ad4dab8d27cf7bed0a06838672e3d07d52b6396e9b5576021d5e925abd533bf161c944795065fdd44e8462e3070c479f1c118276653488dd9b2f1a673f8cad3612ca1fab4388ec9c8f834a01a499adb7b3a9a977672f6d75b41bbdd7f91ceb7e7a88568d17bb432be9e4e96e115075bce197ef4754d2914c2c59e2d7f4c08f0dbe34d31f229428f211bf1d7e8f5c319ed4a8273cb6255eb318851ac4557b0278fac63107a54d407c42f300b843a12abd3b893b46c7efac2e388ab42b87aebe2543bd4c15f459bc50aad10ffe1c1196fb52c26e54bdaa7fbd52451f207ffb073ef4b3f71eedd7da40c89505019739e3fa733bcdc84ff4919e8fe2358129ef28291be1d6426b8bafe88463b1d3cd7273745381c7f65221898e6ad361e88b24c54ccc7ac9a830145b6dc096e2d71ef71ec4f03524cb870b724e08d223bdec2f6fdde6200217a13b5136004d455d66547f5a1793e0cad85677d49e5c558852107007c8136812cf021afaf6f7e8f59883371be46cda412dd9c6fcf187c31252ceb5758901d39cd5355ab386d9a7fe6ea46ebf277aaf809c3023211ea9aa189de4d422080ebb9fec50ffab6b95ba4ae5018accc497e79149ed6047ce561ccc10e9194cdccd5c9fb75175c8dbc9d0a916ad59288f010defbbb50d263041ab37aac0f93253bef6f898cd0825d99d27224f26181f9713b8979da64756c95e7505f25a2688960d6155c3613dcc31b6c337a6dbfc6b12cfde1db22b93bbd5e48534fb0bda8b212577a14dcf665c834b0bd24e5f624d2455fe048dbe930328d7cb632db3b0e244bb5d43390b420b15157a339487fc78976f867d3a361aafdd3f50a93c01882da7c220089a544381db22e2c86b228dc2be01820468460437588952a549d37498e529e62aa62bad1580546bcb1e9a6ed1870b7838d05d12f6e3a041e78b1bdb80894626f20889ccb3a468aa4fb24b9c87cbb28623ce59c6b3c6286db366d08004551a25fe4d8d194a2bb7c52e1c85a5fbe4cb15b171489da121bea1c469a6bb185d63213084e3a81ee54dc03a94dc5ecdda7bfaad1df68021aaf4627c9d529f13e5c81b5ee4dd228949ca16b9a61d186211d153294470907557e5e14ae665013f285fe4d3766e7b3d8ce5e2a14692072d4d8f79354bcc8db8a2a36c8bcd", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000066c0)={0x90, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000002300)={0x53, 0x0, 0x11, 0x0, @scatter={0x1, 0x0, &(0x7f00000037c0)=[{&(0x7f00000020c0)=""/101, 0x65}]}, &(0x7f0000002240)="000000000000d8cacb0b5e32f00bb87f85", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:59:30 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r0 = dup(0xffffffffffffffff) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)={'b', ' *:* ', 'wm\x00'}, 0x3) [ 686.804205][T15488] loop2: detected capacity change from 0 to 87 16:59:30 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[0x0]) 16:59:30 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) dup(r0) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)={'b', ' *:* ', 'wm\x00'}, 0x3) [ 686.863301][T15486] ------------[ cut here ]------------ [ 686.863326][T15486] WARNING: CPU: 0 PID: 15486 at drivers/scsi/scsi_lib.c:1024 scsi_alloc_sgtables+0xc78/0xf70 [ 686.876055][T15486] Modules linked in: [ 686.879816][T15486] CPU: 0 PID: 15486 Comm: syz-executor.3 Not tainted 5.19.0-rc2-syzkaller #0 16:59:30 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) dup(r0) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)={'b', ' *:* ', 'wm\x00'}, 0x3) [ 686.886944][T15486] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 686.896172][T15486] RIP: 0010:scsi_alloc_sgtables+0xc78/0xf70 16:59:30 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) dup(r0) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)={'b', ' *:* ', 'wm\x00'}, 0x3) [ 686.900287][T15486] Code: cc fc 31 ff 44 89 f6 e8 86 14 cc fc 45 85 f6 0f 84 1a f5 ff ff e8 38 18 cc fc 83 c5 01 0f b7 ed e9 0f f5 ff ff e8 28 18 cc fc <0f> 0b 41 bc 0a 00 00 00 e9 2b fb ff ff 41 bc 09 00 00 00 e9 20 fb [ 686.915073][T15486] RSP: 0018:ffffc900251af4f0 EFLAGS: 00010216 [ 686.919128][T15486] RAX: 0000000000000c19 RBX: ffff88801d3d5e20 RCX: ffffc90004629000 [ 686.924180][T15486] RDX: 0000000000040000 RSI: ffffffff84ae59d8 RDI: 0000000000000003 [ 686.929215][T15486] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000000 [ 686.934184][T15486] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888014d70000 [ 686.939187][T15486] R13: ffff88801d3d5d00 R14: 0000000000000000 R15: ffff888042eb6000 [ 686.944099][T15486] FS: 0000000000000000(0000) GS:ffff88802c800000(0063) knlGS:00000000f7fd8b40 [ 686.949532][T15486] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 686.953584][T15486] CR2: 000000002bf2b000 CR3: 0000000076565000 CR4: 0000000000150ef0 [ 686.958607][T15486] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 686.963406][T15486] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 686.968277][T15486] Call Trace: [ 686.970267][T15486] [ 686.972123][T15486] ? scsi_end_request+0x9a0/0x9a0 [ 686.975193][T15486] ? queue_work_node+0x320/0x320 [ 686.978224][T15486] ? init_timer_key+0x150/0x340 [ 686.981348][T15486] scsi_queue_rq+0x2a6f/0x3800 [ 686.984355][T15486] blk_mq_dispatch_rq_list+0x6ea/0x2350 [ 686.988162][T15486] ? target_unblock+0x60/0x60 [ 686.991131][T15486] ? __blk_mq_sched_dispatch_requests+0x1d9/0x3e0 [ 686.995091][T15486] ? blk_insert_cloned_request+0x8b0/0x8b0 [ 686.998877][T15486] ? do_raw_spin_lock+0x120/0x2a0 [ 687.002106][T15486] ? rwlock_bug.part.0+0x90/0x90 [ 687.005201][T15486] __blk_mq_sched_dispatch_requests+0x206/0x3e0 [ 687.009351][T15486] ? lock_release+0x780/0x780 [ 687.012320][T15486] ? blk_mq_do_dispatch_ctx+0x6c0/0x6c0 [ 687.015792][T15486] ? find_held_lock+0x2d/0x110 [ 687.018760][T15486] blk_mq_sched_dispatch_requests+0x101/0x180 [ 687.022556][T15486] __blk_mq_run_hw_queue+0xff/0x350 [ 687.025888][T15486] __blk_mq_delay_run_hw_queue+0x5bc/0x6d0 [ 687.029571][T15486] blk_mq_run_hw_queue+0x321/0x4a0 [ 687.032688][T15486] blk_mq_sched_insert_request+0x340/0x440 [ 687.036373][T15486] ? blk_mq_sched_bio_merge+0x400/0x400 [ 687.039860][T15486] ? lockdep_init_map_type+0x21a/0x7f0 [ 687.043219][T15486] blk_execute_rq+0x16d/0x4b0 [ 687.046114][T15486] ? blk_rq_prep_clone+0x720/0x720 [ 687.049334][T15486] sg_io+0x65a/0xf90 [ 687.051741][T15486] ? put_sg_io_hdr+0x6f0/0x6f0 [ 687.054520][T15486] ? lock_downgrade+0x6e0/0x6e0 [ 687.057608][T15486] scsi_ioctl+0xa66/0x1520 [ 687.060496][T15486] ? scsi_cdrom_send_packet+0x640/0x640 [ 687.063835][T15486] ? scsi_block_when_processing_errors+0x294/0x350 [ 687.068003][T15486] ? blkdev_common_ioctl+0x12b/0x1a50 [ 687.071260][T15486] ? blkdev_bszset+0x1f0/0x1f0 [ 687.074114][T15486] sd_ioctl+0x195/0x2a0 [ 687.076583][T15486] ? sd_eh_action+0x440/0x440 [ 687.079526][T15486] blkdev_compat_ptr_ioctl+0x9e/0xe0 [ 687.082720][T15486] compat_blkdev_ioctl+0x3ac/0x830 [ 687.085845][T15486] ? blk_mq_init_sched+0x6d0/0x6d0 [ 687.089054][T15486] ? blkdev_ioctl+0x800/0x800 [ 687.091864][T15486] ? bpf_lsm_file_ioctl+0x5/0x10 [ 687.095048][T15486] ? blkdev_ioctl+0x800/0x800 [ 687.098149][T15486] __do_compat_sys_ioctl+0x1c7/0x290 [ 687.101436][T15486] __do_fast_syscall_32+0x65/0xf0 [ 687.104807][T15486] do_fast_syscall_32+0x2f/0x70 [ 687.107945][T15486] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 687.111814][T15486] RIP: 0023:0xf7fdd549 [ 687.114337][T15486] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 687.126418][T15486] RSP: 002b:00000000f7fd85cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 687.126454][T15486] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000002285 [ 687.136521][T15486] RDX: 0000000020002300 RSI: 0000000000000000 RDI: 0000000000000000 [ 687.142946][T15486] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 687.149189][T15486] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 687.154116][T15486] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 687.159145][T15486] [ 687.161137][T15486] Kernel panic - not syncing: panic_on_warn set ... [ 687.165103][T15486] CPU: 0 PID: 15486 Comm: syz-executor.3 Not tainted 5.19.0-rc2-syzkaller #0 [ 687.170633][T15486] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 687.176197][T15486] Call Trace: [ 687.178415][T15486] [ 687.180761][T15486] dump_stack_lvl+0xcd/0x134 [ 687.184005][T15486] panic+0x2d7/0x636 [ 687.186753][T15486] ? panic_print_sys_info.part.0+0x10b/0x10b [ 687.190720][T15486] ? __warn.cold+0x1d9/0x2cd [ 687.193673][T15486] ? scsi_alloc_sgtables+0xc78/0xf70 [ 687.197143][T15486] __warn.cold+0x1ea/0x2cd [ 687.200533][T15486] ? scsi_alloc_sgtables+0xc78/0xf70 [ 687.204130][T15486] report_bug+0x1bc/0x210 [ 687.207128][T15486] handle_bug+0x3c/0x60 [ 687.209955][T15486] exc_invalid_op+0x14/0x40 [ 687.212983][T15486] asm_exc_invalid_op+0x1b/0x20 [ 687.216079][T15486] RIP: 0010:scsi_alloc_sgtables+0xc78/0xf70 [ 687.220324][T15486] Code: cc fc 31 ff 44 89 f6 e8 86 14 cc fc 45 85 f6 0f 84 1a f5 ff ff e8 38 18 cc fc 83 c5 01 0f b7 ed e9 0f f5 ff ff e8 28 18 cc fc <0f> 0b 41 bc 0a 00 00 00 e9 2b fb ff ff 41 bc 09 00 00 00 e9 20 fb [ 687.233102][T15486] RSP: 0018:ffffc900251af4f0 EFLAGS: 00010216 [ 687.237055][T15486] RAX: 0000000000000c19 RBX: ffff88801d3d5e20 RCX: ffffc90004629000 [ 687.243034][T15486] RDX: 0000000000040000 RSI: ffffffff84ae59d8 RDI: 0000000000000003 [ 687.248244][T15486] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000000 [ 687.253218][T15486] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888014d70000 [ 687.258105][T15486] R13: ffff88801d3d5d00 R14: 0000000000000000 R15: ffff888042eb6000 [ 687.263715][T15486] ? scsi_alloc_sgtables+0xc78/0xf70 [ 687.267144][T15486] ? scsi_end_request+0x9a0/0x9a0 [ 687.270421][T15486] ? queue_work_node+0x320/0x320 [ 687.273623][T15486] ? init_timer_key+0x150/0x340 [ 687.276797][T15486] scsi_queue_rq+0x2a6f/0x3800 [ 687.280316][T15486] blk_mq_dispatch_rq_list+0x6ea/0x2350 [ 687.284346][T15486] ? target_unblock+0x60/0x60 [ 687.288007][T15486] ? __blk_mq_sched_dispatch_requests+0x1d9/0x3e0 [ 687.292648][T15486] ? blk_insert_cloned_request+0x8b0/0x8b0 [ 687.297125][T15486] ? do_raw_spin_lock+0x120/0x2a0 [ 687.300952][T15486] ? rwlock_bug.part.0+0x90/0x90 [ 687.304275][T15486] __blk_mq_sched_dispatch_requests+0x206/0x3e0 [ 687.307722][T15486] ? lock_release+0x780/0x780 [ 687.310504][T15486] ? blk_mq_do_dispatch_ctx+0x6c0/0x6c0 [ 687.313898][T15486] ? find_held_lock+0x2d/0x110 [ 687.316866][T15486] blk_mq_sched_dispatch_requests+0x101/0x180 [ 687.321406][T15486] __blk_mq_run_hw_queue+0xff/0x350 [ 687.324797][T15486] __blk_mq_delay_run_hw_queue+0x5bc/0x6d0 [ 687.328552][T15486] blk_mq_run_hw_queue+0x321/0x4a0 [ 687.331808][T15486] blk_mq_sched_insert_request+0x340/0x440 [ 687.335504][T15486] ? blk_mq_sched_bio_merge+0x400/0x400 [ 687.339707][T15486] ? lockdep_init_map_type+0x21a/0x7f0 [ 687.343869][T15486] blk_execute_rq+0x16d/0x4b0 [ 687.347493][T15486] ? blk_rq_prep_clone+0x720/0x720 [ 687.350590][T15486] sg_io+0x65a/0xf90 [ 687.352860][T15486] ? put_sg_io_hdr+0x6f0/0x6f0 [ 687.355590][T15486] ? lock_downgrade+0x6e0/0x6e0 [ 687.358847][T15486] scsi_ioctl+0xa66/0x1520 [ 687.362333][T15486] ? scsi_cdrom_send_packet+0x640/0x640 [ 687.366550][T15486] ? scsi_block_when_processing_errors+0x294/0x350 [ 687.371148][T15486] ? blkdev_common_ioctl+0x12b/0x1a50 [ 687.374411][T15486] ? blkdev_bszset+0x1f0/0x1f0 [ 687.377290][T15486] sd_ioctl+0x195/0x2a0 [ 687.380129][T15486] ? sd_eh_action+0x440/0x440 [ 687.383431][T15486] blkdev_compat_ptr_ioctl+0x9e/0xe0 [ 687.386580][T15486] compat_blkdev_ioctl+0x3ac/0x830 [ 687.389826][T15486] ? blk_mq_init_sched+0x6d0/0x6d0 [ 687.393434][T15486] ? blkdev_ioctl+0x800/0x800 [ 687.396957][T15486] ? bpf_lsm_file_ioctl+0x5/0x10 [ 687.400469][T15486] ? blkdev_ioctl+0x800/0x800 [ 687.404027][T15486] __do_compat_sys_ioctl+0x1c7/0x290 [ 687.407717][T15486] __do_fast_syscall_32+0x65/0xf0 [ 687.411673][T15486] do_fast_syscall_32+0x2f/0x70 [ 687.415473][T15486] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 687.420409][T15486] RIP: 0023:0xf7fdd549 [ 687.423601][T15486] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 687.438238][T15486] RSP: 002b:00000000f7fd85cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 687.444494][T15486] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000002285 [ 687.450599][T15486] RDX: 0000000020002300 RSI: 0000000000000000 RDI: 0000000000000000 [ 687.456434][T15486] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 687.462194][T15486] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 687.468370][T15486] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 687.474539][T15486] [ 687.478304][T15486] Kernel Offset: disabled [ 687.481803][T15486] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:59:31 Registers: info registers vcpu 0 RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff845feb5c RDI=ffffffff9121a2e0 RBP=ffffffff9121a2a0 RSP=ffffc900251aeeb0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=ffffffff9121a2a0 R14=ffffffff9121a518 R15=ffffffff9121a2f0 RIP=ffffffff845feb83 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802c800000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000002bf2b000 CR3=0000000076565000 CR4=00150ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000000000000000000000000001a4 XMM01=5038df0e987e74b85e025300b26f21d5 XMM02=6ff7b474225e70a3257854a4ff3b427d XMM03=2e9990c8b3b87adfc6a1b2bd0da8d6db XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=0d0c0f0e09080b0a0504070601000302 XMM07=0e0d0c0f0a09080b0605040702010003 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=00000000003737c3 RBX=ffff888012118000 RCX=ffffffff89771a41 RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000000 RBP=0000000000000001 RSP=ffffc9000046fe00 R8 =0000000000000001 R9 =ffff88802c93af13 R10=ffffed10059275e2 R11=0000000000000001 R12=ffffed1002423000 R13=0000000000000001 R14=ffffffff8dbb7850 R15=0000000000000000 RIP=ffffffff897a12eb RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c900000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f6e62510 CR3=000000000ba8e000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=2c2c2c2c2c2c2c2c2c2c2c2c2c2c2c2c XMM01=0000000000000000000000000000ff00 XMM02=0000000000000000000000000000ff00 XMM03=000000000000000000000000ff000000 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=ffff000000000000ffff000000000000 XMM06=ffffffffffff0000ffffffffffffffff XMM07=00000000000000000000000000000000 XMM08=7974706d6520676e697070696b530065 XMM09=00000000000000000000000000000000 XMM10=73730c9628ec29a373732602be0a7973 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 2 RAX=0000000000000000 RBX=00000000f7fea549 RCX=dc35eb236d638d9d RDX=1ffff110035498ab RSI=0000000000000000 RDI=0000000000000000 RBP=00000000f7fea549 RSP=ffffc90002e07348 R8 =0000000000000000 R9 =ffffffff9067b907 R10=fffffbfff20cf720 R11=0000000000000001 R12=ffffc90002e07478 R13=0000000000000000 R14=ffff88801aa4bb00 R15=0000000000000000 RIP=ffffffff815e5be7 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802ca00000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7e952bd CR3=000000006f665000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000000000000000000000000001a4 XMM01=aee60432db26fa1a3b987ac98b51cb53 XMM02=a594144877a5bf2d54301fd20c5ceb7f XMM03=25554d92022e7cdde49e276d1cae0cc2 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=0d0c0f0e09080b0a0504070601000302 XMM07=0e0d0c0f0a09080b0605040702010003 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 3 RAX=00000172d5e819dd RBX=0000000000000000 RCX=00000000000006e0 RDX=0000000000000172 RSI=ffff88802cb27200 RDI=00000000001b3c58 RBP=ffff88802cb27200 RSP=ffffc900005e8ed0 R8 =0000000000000005 R9 =000000000000003f R10=0000000000000019 R11=0000000000000001 R12=00000000001b3c58 R13=0000000000000019 R14=0000000000000000 R15=ffff88802cb2a500 RIP=ffffffff813320f1 RFL=00000007 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802cb00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000c00c495000 CR3=000000006f90f000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000000000000000000000000001a4 XMM01=83b5217c71ac84995187a59143988a77 XMM02=bc704cd0f62ea00934ec62b29ba8a1e1 XMM03=507c1ba5a3709ab07f488ee4594b1a32 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=0d0c0f0e09080b0a0504070601000302 XMM07=0e0d0c0f0a09080b0605040702010003 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000