f9ac7ff0b3b72bdc4fa02fdba42d508a12520af1183b0d15bcad09f25b5cd7358985f01282c60b75dbc6c22eecb99502f0a3f1eb6a2e6", 0x8a}], 0x1, &(0x7f00000009c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, r1, r2]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @rights={{0x30, 0x1, 0x1, [r1, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, r7, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x120, 0x40}}, {{&(0x7f0000000b00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000b80)="108e6b2cb74fb06dfd4ff558231d3c612024d94203848302a11ccf0731ac16a38e0642ff5ae2f82773bac273acd2d4283fceca4b0a153f157054459075e18ceb78240e36fcaf81bcaef2080f8a2cbb02e045a70f33142cd8a2e8adcd96fdaa96ce5a7429dd0e28c084d5510ec98bee8504cdfb2fd80e4782", 0x78}], 0x1, &(0x7f0000001380)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [r8, r0, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee00}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r4, r6, r1, r5, r7, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0x138, 0x1}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000014c0)="541570fcd07fe51a6d257563f0f0dc2f99093065a8ff0df2f23bae1725a4acd28e235a1526268947e389ffdb2a736116c51f62cdee5d2d13b3e7e89c0ede98869f07dfbd1b9f257e06358ca65b1e6e6289be6dab5648f2d0b86b021c164b9c95252f96d3e2a1300bdec300e05479e4acd692f69e05254ccdf19c6f1bfd788cbb3e1fb61cd192d4a34447f9f0569e79b33a1ba37954d4ec9fee72f5d6d5019eddfebb5bdad97718122897b7c87096a31b256f9cd3e497af45392a2a1cd78e8a64eb2a7da50fbb72f69f8bbdf5036b6de80f441cc3743df85408e67a85a45f16d7dc", 0xe1}, {&(0x7f00000015c0)="134aebd1fb314210a123db7e17e99a5971873e07ccbdb3b2c93c50e36820a18d9f0f9729257a723f8615c3bdabc173a97307454a83dacd884a307779f334c6a67bfc5505c62ff0934a7e9aa29674d3da69416880c30f8ce3b2954689616275233d97df339bbddde3f4cfeee251a5b2099f4129dc2b3d10e736bea5", 0x7b}, {&(0x7f0000001640)="027c045f97a1257c793d2856eb7c6d9a6f80c6e322c0a029f9b5119a51d77833b462afdc72dc09617b059dd97ccd77d5e9670214d747cf14e2feb2ad57f403b82261a2e100bda5bfb74f080600d4a922a3ff261c2c1ed5d22ba1cededde8ad2457446a7f48fb8d49b3c8992c9f5c3552953077afda0794cd7b3fdf134f8af100eb9dca33972ce1ab5fc168853b7ea9ad2b187f4b613ef1e1f980f42c61c8c8b9df032ef959a1e71a6ec162", 0xab}, {&(0x7f0000001700)="5308710dd6915f5529d2629de596150ef2f283", 0x13}, {&(0x7f0000001740)="58174d87006731c2774b74f3c25801b17df7e0c7bf43face9230de3b258f7ccb9cfa244853fefadd", 0x28}], 0x5, &(0x7f0000001840)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38, 0x20008000}}, {{&(0x7f0000001880)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001900), 0x0, &(0x7f0000001ac0)=[@rights={{0x20, 0x1, 0x1, [r7, r3, r6, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, r5, r3, 0xffffffffffffffff, r8, 0xffffffffffffffff, r1, r6]}}], 0x78, 0x20000010}}, {{&(0x7f0000001b40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001c40)=[{&(0x7f0000001bc0)="b1304bb6e580b291a5afb76b9607dabee8e499d8da4da1a217cfd858c85c926d19cb12e028067f2ff73ad66369404a0f01949e86417c2f596ca0da21828fa35ab96328b19d6b", 0x46}], 0x1, &(0x7f0000002140)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x34, 0x1, 0x1, [r5, r2, 0xffffffffffffffff, r2, r8, r8, 0xffffffffffffffff, r0, r0]}}], 0x98, 0x20000010}}, {{&(0x7f0000002200)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000002340)=[{&(0x7f0000002280)="8e7da69ef9b42583ae3c201aae6ecc79f9c122aadd878ea0d8e39c6afb117e1a518836cebf65c7ba56f9aa3b37947b6d3cc97ae53f1201780a94ab9a114f8523abcb4e1407ba10a69c34c3e2b44244c837048f80065befb41c31981246b2c7d8ffbea0514b3c2288081cae522f20b9dda9384a07facc71777b9a523b1518dae5fe96b69ad951ef4396e9905bab827951e9a2f0598cf481a04e3023bb", 0x9c}], 0x1, &(0x7f0000002580)=[@rights={{0x24, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r3, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4]}}, @rights={{0x30, 0x1, 0x1, [r7, 0xffffffffffffffff, 0xffffffffffffffff, r5, r5, r3, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0, 0x200408d0}}, {{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000002640)="5e7a78060fa19150e557d4055db33897bfbdb1e8dc6a48d36fc0efc56f8c1782ac8ac4e2a22f5355b2f102a6746b98824d19ea34a1be205ea10224a2cb1b85f8a05e09fa06904cd373fe364287", 0x4d}, {&(0x7f00000026c0)="78e025fa5286b83ac79ce6f08020a2290005cf27623e07da3c53a98e1f1c96adf27ec51c5df9ccca2b01f9a71730fc645ad38da86bc3535b0ed7b84d72dbf95c3e161d1670457b83131b6d8a7e30c534cd4318acb903f040df65726f1365afc09466d4c9ca48f71d81c86b0376758867", 0x70}], 0x2, &(0x7f00000027c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, r7, r7, 0xffffffffffffffff, r9]}}], 0x30, 0x80}}], 0x7, 0x804) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r7, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000080bb7821c14e39ed2c9e972b3e3586812eef07a87bc8f33f84a973c8a70100a121a127d69465fe401fef7038b86b894d7d9ae13bd01c13c52d8188d55f8d037050cbfb66ce890f114a36d2b0e61c251f9890d3680386ec3b6ed36996a905734181c1d2b34abedf83b4c362c4f6ce26f02cdb654155201e84fc000000000000", @ANYRES16=r10, @ANYBLOB="000225bd7000fddbdf2572000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x44090) 17:18:53 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001c00), 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r0, 0x0) llistxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) 17:18:53 executing program 3: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x17) [ 794.484297] loop2: detected capacity change from 0 to 274 [ 794.502012] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 794.502599] FAT-fs (loop2): Filesystem has been set read-only 17:18:53 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) setresuid(0x0, r0, 0x0) llistxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000005, 0x20010, 0xffffffffffffffff, 0x10000000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@mcast1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @remote}}, 0x0, @in=@loopback}}, &(0x7f00000000c0)=0xe8) syz_mount_image$nfs4(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x1412, 0x4, &(0x7f00000004c0)=[{&(0x7f0000000140)="ea6a8c8801c31ada4f660b2998b6b2f1a68ac7dfe45d67f0dc3aef627dd47b2e595627a7ef20d6ce0bef530e449058984b978384f0f68a8e3970ba05983c37ec2069c6b1c65c2babaf4f7438903de3a4e2b5938bc939b8b907e42fc03453838e01a61653aa", 0x65, 0x4}, {&(0x7f00000001c0)="f8328920121fe47927d4dc1d5698586cb24758dfbfe5532feb3175752a38a5d3f85888845fcf5bf690cf49599a52ee3d28d159f086507e9d6967539d44a846e5e1d5073485f57a7b18116f41b937b4d6b0dad72c2319a2e8a82987e71db349cfc314849ca4ba5f6f12c015155e6bb01017656ef4584dd8386ea83793b6aaef5c8f5912c4cbc1a67b51c1c67330de58514f2258ae9b89a531ce622c9874b6433be3eeacac446de54e6bfe984bda0db63aefdb2ddf003c967fcbdf479d95ca6d89e239cac357fe722422c7c31f2db848dd2d952a5d7f6db22b0fb94200d9b7e6a744", 0xe1, 0x6}, {&(0x7f00000003c0)="57e00f46e1c685617385949eea542f63674627def04d5230167055a5db49f77e4b89247b8b10a02bccd272669bfa58d23c454da074bd5beb0d3fd4a8b9bfe7a60bd46d82aac09d3e234407c03c50cd77db5da2db4d002ef7d09cec418285eceb477f3cc0516dab6e04f362f6eef66bd305b2bb0b538f1fda716b2dd40f63ecd954d77112ef84e2db706bd87ba314b12d2ad1d81e25f48fbc74d26668d1090ad920c9d0b072cf40f22857e9f7268e0b84b598aaf0800923b07af53489479a156b84d5669bf0683379e0dae65060cd8d7abe049c61942b3d2500e466c35dea53dc4e2c26aed7b4c7ae0f12feb284d9e58fdd", 0xf1, 0x1}, {&(0x7f00000002c0)="12342123ee797098c7eff357d6d53472f4bbfbe9f5066d8db472bb5fadedf01d1725773b28b23313c1cf360318dfafcf05919faefc02f0e69f2257306bde1ee5bc246abdfd1f7f49c9c6d386102fc2f328452cf4118070ae0236801dd21ef82e7c07e9", 0x63, 0x1ff}], 0x10000, &(0x7f0000000640)={[{'\x00'}, {'trusted.overlay.redirect\x00'}, {'\x00'}, {'trusted.overlay.redirect\x00'}, {'.%#%#'}, {'trusted.overlay.redirect\x00'}, {'trusted.overlay.redirect\x00'}, {'\x00'}], [{@fowner_lt={'fowner<', r2}}, {@hash}]}) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xfffffffa) [ 794.533162] loop4: detected capacity change from 0 to 274 [ 794.547175] FAT-fs (loop4): invalid media value (0x00) [ 794.548033] FAT-fs (loop4): Can't find a valid FAT filesystem 17:18:53 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:18:53 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x17) 17:18:53 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x3000, 0x8, &(0x7f0000ffb000/0x3000)=nil) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) [ 794.605296] loop2: detected capacity change from 0 to 274 [ 794.656742] loop6: detected capacity change from 0 to 10 17:18:53 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:18:53 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec703251", 0x5a, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 794.694023] loop6: detected capacity change from 0 to 10 17:18:53 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x10, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:18:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) sendmsg$AUDIT_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3e8, 0x8, 0x70bd2b, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048840) r2 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:18:53 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = fork() process_vm_readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/211, 0xd3}, {&(0x7f0000000100)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/30, 0x1e}, {&(0x7f00000011c0)=""/4096, 0x1000}], 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x7, 0xfc, 0x6, 0x3, 0x0, 0x3, 0x44810, 0x7, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xca, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x0, 0xffff, 0x5, 0x7, 0xefa, 0x1, 0x2, 0x0, 0x9, 0x0, 0x401}, r1, 0x5, r0, 0xa) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) [ 794.743427] loop2: detected capacity change from 0 to 274 [ 794.755709] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 794.756272] FAT-fs (loop2): Filesystem has been set read-only 17:18:53 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x65) sigaltstack(&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000)) 17:18:53 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x17) [ 794.796770] loop4: detected capacity change from 0 to 274 [ 794.823105] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 794.824335] FAT-fs (loop4): Filesystem has been set read-only 17:19:04 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001c00), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)=@v1={0x1000000, [{0x8, 0x2}]}, 0xc, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r0, 0x0) llistxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r1, 0x0) setfsuid(r1) quotactl(0x8, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000040)="b3bd379e12b224a7abd236fa873449aadae4bc1c7b67") 17:19:04 executing program 1: shmget$private(0x0, 0x5000, 0x20, &(0x7f0000ffb000/0x5000)=nil) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r0, &(0x7f0000800000/0x800000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) shmat(r0, &(0x7f0000f3d000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd) 17:19:04 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x17) 17:19:04 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:19:04 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x87}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) preadv2(r0, &(0x7f0000001780)=[{&(0x7f0000000000)=""/65, 0x41}, {&(0x7f00000000c0)=""/13, 0xd}, {&(0x7f0000000100)=""/36, 0x24}, {&(0x7f0000000140)=""/78, 0x4e}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/246, 0xf6}, {&(0x7f00000003c0)=""/193, 0xc1}, {&(0x7f00000015c0)=""/230, 0xe6}, {&(0x7f00000016c0)=""/186, 0xba}], 0x9, 0x1, 0x9, 0x19) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) pipe2(&(0x7f00000002c0)={0xffffffffffffffff}, 0x4000) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x6) 17:19:04 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:19:04 executing program 7: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) r2 = shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x9000) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x5000) r3 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r4 = shmat(r3, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r4) r5 = shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x1000) shmdt(r5) shmdt(r2) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:19:04 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec703251", 0x5a, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 805.659520] loop2: detected capacity change from 0 to 274 [ 805.682135] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 805.683352] FAT-fs (loop2): Filesystem has been set read-only [ 805.699662] loop4: detected capacity change from 0 to 274 [ 805.733596] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 805.734743] FAT-fs (loop4): Filesystem has been set read-only 17:19:04 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:19:04 executing program 7: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmget$private(0x0, 0x1000, 0x1, &(0x7f0000ffb000/0x1000)=nil) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:19:04 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x17) 17:19:04 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x94000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f00000000c0)={{r1}, 0x6, &(0x7f0000000000)=[0xffffffffffffffff, 0x7, 0x7, 0x1, 0x7, 0x1f], 0xfffffffffffffffc, 0x4820ebeba93eae1, [0x4, 0x6, 0x4, 0x7]}) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) 17:19:04 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:19:04 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec703251", 0x5a, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 805.931468] loop2: detected capacity change from 0 to 274 [ 805.953430] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 805.954657] FAT-fs (loop2): Filesystem has been set read-only 17:19:14 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:19:14 executing program 7: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)=0x11d) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000000)) r4 = dup(r3) ioctl$sock_SIOCOUTQ(r4, 0x5411, &(0x7f0000000000)) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x80049367, &(0x7f0000000000)) r5 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r5, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r5, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0xb800) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 17:19:14 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) 17:19:14 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001c00), 0x0, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setregid(r4, r2) lchown(&(0x7f0000000000)='./file0\x00', r0, r2) r5 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r5, 0x0) llistxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) 17:19:14 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='+).') socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x62, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000000c0)={0x4, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e23, @remote}}}, 0x108) 17:19:14 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:19:14 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x54000180, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:19:14 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 815.594991] loop4: detected capacity change from 0 to 274 [ 815.606870] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 815.607538] FAT-fs (loop4): Filesystem has been set read-only 17:19:14 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) [ 815.617096] loop2: detected capacity change from 0 to 274 [ 815.631633] FAT-fs (loop2): invalid media value (0x00) [ 815.632096] FAT-fs (loop2): Can't find a valid FAT filesystem 17:19:14 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget(0x0, 0x4000, 0x10, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000000)=""/47) r2 = shmget(0x1, 0x3000, 0x20, &(0x7f0000ff7000/0x3000)=nil) r3 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r3, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r3, &(0x7f0000ffd000/0x1000)=nil, 0x6000) shmctl$IPC_RMID(r2, 0x0) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x9) r4 = shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_RMID(r4, 0x0) shmctl$IPC_RMID(r2, 0x0) 17:19:23 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x400, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:19:23 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001c00), 0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000000000)=""/219, 0xdb) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r1, 0x0) llistxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) 17:19:23 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {0x0, 0x0, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:19:23 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) 17:19:23 executing program 0: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x10, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:19:23 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) 17:19:23 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:19:23 executing program 7: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x8, &(0x7f0000ffc000/0x4000)=nil, 0x7) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) [ 824.855338] loop2: detected capacity change from 0 to 274 [ 824.875260] FAT-fs (loop2): invalid media value (0x00) [ 824.876149] FAT-fs (loop2): Can't find a valid FAT filesystem [ 824.877286] loop4: detected capacity change from 0 to 274 [ 824.918052] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 824.919522] FAT-fs (loop4): Filesystem has been set read-only 17:19:24 executing program 0: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x10, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:19:24 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) statx(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1000, 0x400, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r2, r3, r4) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) 17:19:24 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001c00), 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) setresuid(0x0, r0, 0x0) llistxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) 17:19:24 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {0x0, 0x0, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:19:24 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:19:24 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmdt(r1) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:19:24 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x400, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) [ 825.124984] loop4: detected capacity change from 0 to 274 [ 825.125002] loop2: detected capacity change from 0 to 274 [ 825.134581] FAT-fs (loop2): invalid media value (0x00) [ 825.135367] FAT-fs (loop2): Can't find a valid FAT filesystem [ 825.160586] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 825.162089] FAT-fs (loop4): Filesystem has been set read-only 17:19:24 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:19:24 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x4040, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x797e, 0x5}, 0x1a0, 0x0, 0x0, 0x3, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000000), 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(r1, r2) 17:19:24 executing program 0: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x10, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:19:24 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x400, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:19:24 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x1, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001c00), 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r0, 0x0) llistxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) [ 825.246182] loop3: detected capacity change from 0 to 274 17:19:33 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:19:33 executing program 1: sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x5, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x40c0}, 0x50) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:19:33 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001c00), 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) llistxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) 17:19:33 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:19:33 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:19:33 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {0x0, 0x0, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:19:33 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockname$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast1}}, &(0x7f0000000040)=0x1c) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x0, &(0x7f0000000100)=0x3f, 0x4) 17:19:33 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x400, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) [ 833.954944] loop2: detected capacity change from 0 to 274 [ 833.968345] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 833.968867] loop3: detected capacity change from 0 to 274 [ 833.969107] FAT-fs (loop2): Filesystem has been set read-only [ 833.994157] loop4: detected capacity change from 0 to 274 17:19:33 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 834.038274] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 834.039663] FAT-fs (loop4): Filesystem has been set read-only 17:19:33 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x400, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:19:33 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffff81, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) 17:19:33 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x1000) r1 = shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ffc000/0x2000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x9000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:19:33 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:19:33 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 834.163044] loop2: detected capacity change from 0 to 274 [ 834.174204] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 834.174925] FAT-fs (loop2): Filesystem has been set read-only 17:19:41 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100), 0x0, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:19:41 executing program 7: shmget$private(0x0, 0x5000, 0x400, &(0x7f0000ffb000/0x5000)=nil) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:19:41 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/232) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:19:41 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:19:41 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x8200, 0xca, 0x1}, 0x18) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0xff, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) 17:19:41 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {0x0, 0x0, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:19:41 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:19:41 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), &(0x7f0000000440)=@v2={0x2000000, [{0x7}, {0x5, 0x232c}]}, 0x14, 0x1) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240), 0x400) setresuid(0x0, r0, 0x0) llistxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) getresuid(&(0x7f00000002c0)=0x0, &(0x7f0000000300), &(0x7f0000000340)) setresuid(r3, r2, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@mcast1, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e22, 0x400, 0x4e23, 0x6, 0xa, 0x0, 0xa0, 0x3c, 0x0, r2}, {0x4, 0x1f, 0x8, 0x1, 0x10001, 0x3f, 0x101, 0x4}, {0x2, 0x0, 0xfffffffffffffff9, 0xbe}, 0xbe4, 0x6e6bb4, 0x0, 0x0, 0x2, 0x2}, {{@in=@multicast2, 0x4d2, 0x32}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x3507, 0x2, 0x0, 0x40, 0x7, 0x1ff, 0x8000}}, 0xe8) [ 842.417802] loop4: detected capacity change from 0 to 274 [ 842.423039] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 842.423783] FAT-fs (loop4): Filesystem has been set read-only 17:19:41 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100), 0x0, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 842.449873] loop2: detected capacity change from 0 to 274 [ 842.460775] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 842.461425] FAT-fs (loop2): Filesystem has been set read-only 17:19:41 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001c00), 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) chown(&(0x7f0000000000)='./file0\x00', r0, r1) setresuid(0x0, r0, 0x0) llistxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) 17:19:41 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 842.491516] loop3: detected capacity change from 0 to 274 [ 842.506386] loop4: detected capacity change from 0 to 274 17:19:41 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {0x0, 0x0, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:19:41 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:19:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000000)) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000040)={0x6, 0x55b, 0x1, 0x7fff, 0xfff}, 0x14) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x81) r4 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff76, 0x0, @perf_bp={0x0}, 0x0, 0x20007}, 0x0, 0x0, 0xffffffffffffffff, 0x1) recvmmsg$unix(r1, 0x0, 0xfffffffffffffedb, 0x2, 0x0) readv(r4, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r0, 0xf505, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x21, &(0x7f00000000c0)=0x6, 0x4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) sendmsg$nl_netfilter(r6, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa0, 0x0, 0x1, 0x101, 0x70bd27, 0x25dfdbfd, {0x1, 0x0, 0xa}, [@generic="00f213ee1c98446acc42f957934e941544b0516b05b1a6a762e27080c3850306e2c0eb79958b0400ace36acc39db48f1e6099a8051b361421bd00c8237f35313772706518ae6604d82590ab3dadd5af39112800ef8f447b091e447cdb50e876dabd2f76899f586a5501895cce5dec51391457dd1e8d88f", @typed={0x14, 0x24, 0x0, 0x0, @ipv6=@mcast1}]}, 0xa0}, 0x1, 0x0, 0x0, 0x2000000}, 0x40) 17:19:41 executing program 7: shmget$private(0x0, 0x5000, 0x400, &(0x7f0000ffb000/0x5000)=nil) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) [ 842.570771] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 842.572155] FAT-fs (loop4): Filesystem has been set read-only 17:19:41 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000001, 0xffffffffffffffff) 17:19:41 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:19:41 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001c00), 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r0, 0x0) llistxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r1, 0x0) setreuid(r0, r1) 17:19:41 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100), 0x0, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 842.679596] loop2: detected capacity change from 0 to 274 17:19:41 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 842.717629] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 842.718991] FAT-fs (loop2): Filesystem has been set read-only 17:19:41 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) r1 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x2000) 17:19:41 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)='\x00'/19, 0x13, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 842.756316] loop3: detected capacity change from 0 to 274 17:19:41 executing program 7: shmget$private(0x0, 0x5000, 0x400, &(0x7f0000ffb000/0x5000)=nil) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:19:41 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x10, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 842.820257] loop4: detected capacity change from 0 to 274 [ 842.847045] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 842.847856] FAT-fs (loop4): Filesystem has been set read-only 17:19:49 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x10, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:19:49 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x100, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:19:49 executing program 7: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:19:49 executing program 6: ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000000)="11187545d84f00d3") r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001c00), 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r1, 0x0) llistxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$TCGETS(r2, 0x5401, &(0x7f0000000040)) 17:19:49 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:19:49 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)='\x00'/19, 0x13, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:19:49 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) 17:19:49 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {0x0, 0x0, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 850.793006] loop3: detected capacity change from 0 to 274 [ 850.834797] loop2: detected capacity change from 0 to 274 [ 850.840003] loop4: detected capacity change from 0 to 274 [ 850.852612] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 850.853260] FAT-fs (loop2): Filesystem has been set read-only [ 850.858065] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 850.858738] FAT-fs (loop4): Filesystem has been set read-only 17:19:50 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:19:50 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100), 0x0, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:19:50 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)='\x00'/19, 0x13, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:19:50 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) syz_io_uring_setup(0x596b, &(0x7f0000000000)={0x0, 0x1f52, 0x8, 0x3, 0x399}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 17:19:50 executing program 7: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) [ 850.975813] loop4: detected capacity change from 0 to 274 [ 850.978112] loop2: detected capacity change from 0 to 274 [ 850.987837] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 850.988461] FAT-fs (loop2): Filesystem has been set read-only [ 851.041773] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 851.043413] FAT-fs (loop4): Filesystem has been set read-only 17:19:59 executing program 7: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:19:59 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)='\x00'/29, 0x1d, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:19:59 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) mkdirat(r2, &(0x7f00000000c0)='./file0\x00', 0x40) setxattr$trusted_overlay_redirect(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001c00), 0x0, 0x0, 0x0) open_tree(r0, &(0x7f0000000080)='./file0\x00', 0x8000) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r3, 0x0) llistxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) 17:19:59 executing program 3: futimesat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200) 17:19:59 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf13afa5613be2551, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000040), 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x41}, 0x24000040) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000000)) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = dup2(r0, r2) r6 = accept4$unix(r5, &(0x7f00000009c0), &(0x7f0000000280)=0x6e, 0x80800) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r7) r8 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0), 0x2, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) r11 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$unix(r3, &(0x7f0000000940)=[{{&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000180)="b028b6de0519e2870d1bddd3b661fc557b252b2a5a9dbc1bce02f3da", 0x1c}], 0x1, &(0x7f0000000440)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, r4}}}, @rights={{0x34, 0x1, 0x1, [r6, r1, r7, r8, r1, r1, r9, r10, r11]}}], 0x58, 0x4000000}}, {{&(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000540)="82aa4900d84471ac766842fa8fa8e9f7d6b8599b2ea564cc47", 0x19}, {&(0x7f0000000580)="593715f15a2c5a971a1a02061f83454ad97a702a59d12ee1b0482fe567ecb5faf1e17a18ee86c73034d1784e7fff5cc08905995f290fd5e5e061fd7c783e9387d963658eb4ff0ad4fa1fd0d4ce1ad23c5b78b94b10e5ceb410fe2ea537fa5adc87aed786116ab178b32c96899fd232797186e2ddbdb464203faba27d278b2705dcf601eb4bdf9e0686cd7c1f37555ae040c7562cb463f82c77e0b04735da3a7e98f8a6f7ae4cb08c233688d189cf32487f6868fe69237a44cbc903072c8c30befeecac8e581f6bf0b55889a97ad34e9b9d313cd22d24d92fa603", 0xda}, {&(0x7f0000000680)="cb9547909897d1ed4412122ed96fcef82d691c69aa717e78c5218c1069cb74ebba668dd8ca38c7eb416c11c111db61e4c5ce9e12d02764296455f199a743da87c062e0cbff8d46b6b8aa74e62448f180f3ac44e9572adb64fa72d5b6c7acca8c1bd2345baf5de8f27dda12c4a4ff3546d1318ba72a360ec968d29ce80bd458801f747016578f5e4528cd9c55a0afc0e80db16e10dcb37b450d04502c20737552812c0f6f8e0675d3e612bfa25440d5f6d09e990ca5c9da83d268a68219ec59b4af6419ff04be99d9dbc4b5f480bb01ede3433477e688dceac7b3f1f50b303b0efabec66fa9da", 0xe6}, {&(0x7f0000000780)="6ff926b7ea45c991b6687a02ad928db3abad144d6ae65ee09e9bde65838ee4ca69b5dea49824ce63278d3739136380da474c2358d7d9e4fd4b8b443743743cf0eeece15cc0acc3095b6183ae4876018efe508d12158f1c74d44ba34530a6a1be1a23514454592d9a3a2ed24e8fc505a1b7947f31262ad0a4e7cda05c70ac86adfa4a1a28732232ce1562dc44a734a04b1909b8297046b34aab8ac2bc1b913b2400ecb7eb12f4dcc56a4dea8781e92f730a7de4848517ad9d08a2508af5a1020d3e3822a56ff375af41b614", 0xcb}, {&(0x7f0000000880)="85a8ccf220a0d1b913895777fc72347ed98da663c652eeba7387ecc092b950ce7fa890d5b42325f2fb48bfcbe34e6c", 0x2f}], 0x5, 0x0, 0x0, 0x20000011}}], 0x2, 0x88) 17:19:59 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x10, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:19:59 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100), 0x0, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:19:59 executing program 1: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, 0x7, &(0x7f0000ffc000/0x4000)=nil) r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x6000) 17:19:59 executing program 3: futimesat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200) [ 859.988200] loop4: detected capacity change from 0 to 274 [ 860.007293] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 860.007957] FAT-fs (loop4): Filesystem has been set read-only [ 860.010465] loop2: detected capacity change from 0 to 274 17:19:59 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) [ 860.051668] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) 17:19:59 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)='\x00'/29, 0x1d, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 860.052963] FAT-fs (loop2): Filesystem has been set read-only 17:19:59 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:19:59 executing program 3: futimesat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200) [ 860.112572] loop4: detected capacity change from 0 to 274 17:19:59 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1, 0x67, 0x3f, 0x3, 0x0, 0x3, 0x80280, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x51800, 0x400, 0x8, 0x2, 0x7, 0x7, 0x8, 0x0, 0x1ff, 0x0, 0x8}, 0xffffffffffffffff, 0x4, r0, 0xa) io_setup(0x51, &(0x7f0000000040)=0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x101, 0xd0) io_submit(r1, 0x2, &(0x7f0000000280)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1f, r0, &(0x7f0000000140)="e786156ca730fd713e998e3a215da93d5f647a34f04f13a48b460e86458b21700d21a812a801b7caca3fe90b82f578cf982908fa6757fd65b6", 0x39, 0xfff, 0x0, 0x2, r2}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xd52a, r0, &(0x7f0000000200)="7a9f290601a9c08512d952496b1be95b3ef1d1dc81eb2379b617ba34e1a55947eb", 0x21, 0x3fe, 0x0, 0x3}]) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) [ 860.142070] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 860.142860] FAT-fs (loop4): Filesystem has been set read-only 17:20:09 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100), 0x0, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:20:09 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)='\x00'/29, 0x1d, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:20:09 executing program 7: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:20:09 executing program 3: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:20:09 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x3000) r1 = shmget$private(0x0, 0x1000, 0x80, &(0x7f0000ffc000/0x1000)=nil) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x5000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:20:09 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 17:20:09 executing program 6: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000045}, 0x48800) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001c00), 0x0, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000001f00)={0x28, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x28}}, 0x0) accept(0xffffffffffffffff, &(0x7f00000003c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000340)=0x80) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'sit0\x00', 0x0, 0x4, 0x49, 0x9, 0x80000001, 0x28, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x7, 0xb71, 0x4}}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000500)={{{@in6=@initdev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@local}}, &(0x7f0000000600)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000006c0)={'syztnl1\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x2, 0x10, @empty, @remote, 0x8000, 0x40, 0x401, 0xdc93}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f0000000900)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000700)={0x1a4, r4, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x880}, 0x40159) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r9, 0x0) llistxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) 17:20:09 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x5, 0x3ff}}, './file0\x00'}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/131, 0x83, 0x1, &(0x7f0000000180)=""/218, 0xda}, &(0x7f0000000280)=0x40) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) r3 = accept4$bt_l2cap(r2, &(0x7f00000002c0), &(0x7f0000000300)=0xe, 0x800) clock_gettime(0x0, &(0x7f0000001d00)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000001c80)=[{{&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000001840)=[{&(0x7f0000000440)=""/63, 0x3f}, {&(0x7f00000005c0)=""/146, 0x92}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000480)=""/1, 0x1}, {&(0x7f0000001680)=""/148, 0x94}, {&(0x7f0000001740)=""/216, 0xd8}], 0x6}, 0x2}, {{&(0x7f00000018c0)=@ax25={{0x3, @null}, [@null, @remote, @rose, @default, @default, @netrom, @default, @rose]}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001940)=""/26, 0x1a}, {&(0x7f0000001980)=""/186, 0xba}, {&(0x7f0000001a40)=""/208, 0xd0}, {&(0x7f0000001b40)=""/167, 0xa7}], 0x4, &(0x7f0000001c40)=""/21, 0x15}, 0x71}], 0x2, 0x40000000, &(0x7f0000001d40)={r4, r5+60000000}) [ 870.860159] loop4: detected capacity change from 0 to 274 [ 870.870464] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 870.871377] FAT-fs (loop4): Filesystem has been set read-only [ 870.905128] loop3: detected capacity change from 0 to 274 17:20:10 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ff", 0x22, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:20:10 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x10, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:20:10 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) [ 870.964985] loop2: detected capacity change from 0 to 274 17:20:10 executing program 7: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) [ 870.997814] loop4: detected capacity change from 0 to 274 17:20:10 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000005, 0x8010, r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000), 0x4) [ 871.016924] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 871.017624] FAT-fs (loop4): Filesystem has been set read-only [ 871.029356] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 871.030714] FAT-fs (loop2): Filesystem has been set read-only 17:20:10 executing program 3: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:20:10 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x1) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) chown(&(0x7f0000000000)='./file0\x00', r0, r1) setresuid(0x0, r0, 0x0) llistxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) 17:20:10 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) [ 871.102051] loop3: detected capacity change from 0 to 274 17:20:20 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000000)=""/19) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r1, &(0x7f0000ffc000/0x1000)=nil, 0x7000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) r2 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) shmat(r2, &(0x7f0000ffd000/0x2000)=nil, 0x1000) 17:20:20 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)='\x00'/19, 0x13, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:20:20 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={@private0, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0xfffffff7, 0x8, 0x8d9, 0x400, 0x1, 0x1400000}) r1 = dup(r0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000400)={r2, r3/1000+10000}, 0x10) r4 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001c00), 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640), 0x1100) llistxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) mknodat$loop(r4, &(0x7f0000000080)='./file0\x00', 0x10, 0x0) r6 = dup(r5) ioctl$sock_SIOCOUTQ(r6, 0x5411, &(0x7f0000000000)) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8982, &(0x7f0000000040)={0x6, 'erspan0\x00', {}, 0x7ff}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r5, {0x200}}, './file0\x00'}) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r7, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="e7c29dcc83af4bc09fa476397878784e601bcc6d7ec8c65b15cb2cec79e2d43011e98e95148a4b9502e7a3e41a05137739dd216a5ae84cdbdaa08d2d4f81dd19136b93c61a24859764f1321ab4e53405c632dc4a87d5f4c3b59f386444c8d9f6902a6df3cc0139c0a4c37a7bafd32fbd6b6c867ab554d806bfc760299c24103e093cba6cb3", @ANYRES16=0x0, @ANYBLOB="00042dbd7000fcdbdf251b000000080001007063690011000200303030303a30303a31302e300000000008000b0006000000080001007063690011000200303030303a30303a31302e300000000008000b0000000000080001007063690011000200303030303a30303a31302e300000000008000b0005000000"], 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x20004804) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000240)=ANY=[@ANYBLOB="011600000142ffdbdd000000", @ANYRES32=r6, @ANYBLOB="01000000000000002e2f66696c6530000f709f170b3ebb9c9dba9e5e55020d273941074eeab220bbd28f721f1d9d492cf800f6f296293a6be8f332cdb3391dcf62d75be04bedb5b433680d37f171da50a52d0dfb9d7b71d79c95606204a1f5b9d84e7e5cf24f0001fb82d2464ebd1fa3d4ada50336301d643c310b413ac596e53a1174464f4ea1112d5bd625a4be36df9d0ada193ad9a30740904c6eb461d53575fd92524e1b4d680f854c950af3c74a7448c8e17a426b45a6d0c0471ccd959cd8439296cccf4ad17448eb3399f04d35fed17d6e0dc1ab7b6b7ac113"]) 17:20:20 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x200000000000, 0x80, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800000}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000000)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000a80)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000b00)={0x0, 0x0, 0x0}, &(0x7f0000000b40)=0xc) sendmmsg$unix(r3, &(0x7f0000000c00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000140)="04ed041399dc5114359b54c92a92f61ed7ea572fbb5cea361718590a35783d45d620998012f6d8878ee51e9b0ad4950361105eec6cfb2e3a6e72704512", 0x3d}, {&(0x7f0000000180)="ecea7ddaef721056f53b3f5f0edfab48aa12c9b2079a9d161d483675ae4870a90adfe7ef828eb885e87e1fa86021987d1090f3f7ae62737fb9c3b059f1d16efddcb8698cfdb89c3ffb468299253af04f023aaba83dd6278c7dff2ac7585767f394aa0c6637a35e3e16967a4c39037c04350ef6b199d2098a634274a1795fc967310593f1fa469f39a12342", 0x8b}, {&(0x7f0000000240)="87f5629eb4704846c6cc16f1ed9dbaa715c958307c68c8e796a886141a42ba8bc025a9b2d57fe01829cf42c736061c5c8d10ac9acb22", 0x36}, {&(0x7f0000000280)="b09ef021fe09af9c7a6a9497cc22076ada9cf6e287382fee13ef14ab1913d89b36791f1261997737f70944a05343e351bdbffc7f4b130ac5fadf2ffd309521dc528b526c1cce216045740177f2b01313b53d3420b1d70b0f286d0e89ab12539b5c619ba7e98bf1404fbe5faa10f79d788065a41596e421eb22fdba3d6bc25d89959bad98d40efddf9efdbcd16d51da72486521d0228167318414a454a62bb6c0c61cbd9bb4056f788facfc4fe95d555c85f3af0f046c9d5075", 0xb9}, {&(0x7f0000000340)="475d9daf9b6557636ee4768232ae6466b2de38f39c14082379e9d10c9f67dea81c713969304aa2633ee066985dcaa45e66efa3550ace250a06377f5ec8b9e42b0d6659bffe25e64e8f11ec7a00db9e7fd993f6ffe07eded1ea4ec00d7462d5ed25c645e2715003f0120ed7dd601b61765dd65c75fed4b874775717cd88915571a545ae512f05b754d8a653367afd8ea69be8456230f2463f8540795f6433781410ce0228485192fe4b43cd2ae612c43d4508fc8ab375baa6dc62c936177057e0bd06d0240765833f206b7a25", 0xcc}, {&(0x7f0000000440)="a6aa67f098f8070bf2abfc6788cc897a96c0df61316784a481df022dafdc96de565c41c8cddd0e53334afd7519826f94ecd17815da440412586f26051a600662087ba9d11c685e16b1554053735eea17f0636b7a78eee396a148b3da", 0x5c}, {&(0x7f00000005c0)="1386e6f298c5e630756abc9547592c07d60a96094ee16ca148714409b48394d7af96c4df70e423409a87c8efdb54ac066f90791f332fa103c0901a20d5b66f131646356b8c11f9633da1abba24a1369097c93e456c04fc12effa2f03183d773b66d451bd6e7d93f73bbd71353363e214c8b013d4a2f5002113454835dcf4c9f9cb44361839dcc43e331a367a32e11afbbdde511da33303d3881c3f5399c1405b10aa23a0588ee403e5cf532a3174047c308d3ccb4342234a7427c1cc5dadfdcd006d47d4f3176f9ca45658eb11551cea1f8969b0dd252e79b6", 0xd9}, {&(0x7f00000006c0)="3ec5d7e11aa4e46ef09540e919a93d911227181a44cdcad93366b716f6eac05220f2711bbb85413eddc3de10b4b923afe45f35b32eb9b19db35ee2", 0x3b}, {&(0x7f0000000700)="702b0ed7062957c067eb66d3d41bb04ddee1592af2a5a3f6f3618e0c4a7ba4096b3e710d02106d216fb2", 0x2a}, {&(0x7f0000000740)="a926397aec2c741e4ebc33b86ed4bd5c9bc67c811152816bdaeffdb9e29a76d3211df532ae62e0f65b66733bab7d6da37a46cbcf5eaf343f8194a14409d48273dff2fe93", 0x44}], 0xa, 0x0, 0x0, 0x40}}, {{&(0x7f0000000880)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000900)="bc47007357212252", 0x8}, {&(0x7f0000000940)="f0d1f288939b58be75a661ab719223cc76812e7335698af9673b2bc2e176e2103b49fc3b68019bef9a2615f867e1286592663a909ae91f929f877255362ec2d7abb493f7fac3293915b7b65f5a75c1ee34bb712c6ec209a2e627dbec7becb17c65a26f4547839293bb505fc0f5130a8bfb7a6a916d35d61627e64490469a1528387cc6aad7e7732074e3fcb93054ae1fa0c57ef76a602cfa4abfb2d0f81a00d18ce92b01b2da4b6eed550c3b4e31d5a3265033bbedd1", 0xb6}, {&(0x7f0000000a00)="c86b7e8942e5850707c307171c9361fee732", 0x12}], 0x3, &(0x7f0000000b80)=[@rights={{0x18, 0x1, 0x1, [r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xffffffffffffffff, r5}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r6}}}], 0x58, 0x81}}], 0x2, 0x10) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) 17:20:20 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ff", 0x22, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:20:20 executing program 7: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:20:20 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffff81, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) 17:20:20 executing program 3: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 881.113317] loop3: detected capacity change from 0 to 274 [ 881.133819] loop2: detected capacity change from 0 to 274 17:20:20 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffff81, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) [ 881.159261] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 881.160055] FAT-fs (loop2): Filesystem has been set read-only 17:20:20 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 881.169041] loop4: detected capacity change from 0 to 274 17:20:20 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) [ 881.207448] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 881.208975] FAT-fs (loop4): Filesystem has been set read-only 17:20:20 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)='\x00'/19, 0x13, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:20:20 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='\x00') socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) [ 881.217789] loop3: detected capacity change from 0 to 274 [ 881.289284] loop2: detected capacity change from 0 to 274 [ 881.307724] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 881.308378] FAT-fs (loop2): Filesystem has been set read-only 17:20:31 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffff81, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) 17:20:31 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:20:31 executing program 1: unshare(0xc000200) r0 = shmget$private(0x0, 0x5000, 0x2, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 17:20:31 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)='\x00'/19, 0x13, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:20:31 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ff", 0x22, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:20:31 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:20:31 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) fstat(r1, &(0x7f00000025c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002640)=[{{&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000003c0)=[{&(0x7f00000000c0)="0a2372955265ac1b72603ff99729110694f190b0b1860b14d4742179f8d42c350d614aec4c6ab124ebb49f420f6aad091266936e1ed1b442ee7deb8740d9af155eb9fb76ae209f71a8e0034c716ddb9822c86972425811249b5b9ce58de2b8da1c52476d4e2cb9b56ca8d080c0d3467d1eac6eeaf94bdddf0021a09c8b3154ea90d5e7eaeb53cf1b691391ff93fa9786b1d2ece925656c8a", 0x98}, {&(0x7f0000000180)="a6caf2cbf200c69b2928a3dd49c553db873f749aeb0e874842dc71958693a29cc595251f5289a8e245e0c25f04", 0x2d}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000001c0)="03e89880b98daf3d29a97a2ff05d8eb6fe51d65d364cd20f126cd05b46213732b923d0696195039083d16c5876330a3020a962c24df0c7aaf5d2f12346f2d5af545e57de208cad5a240be387f0ea4f8de90376f68476e4210486ac0857a03fd81810f77053f4e5ab975e5565852eb2b36a7ebc8918157dc3cfbddfd63fdb88cfd392", 0x82}, {&(0x7f00000015c0)="a05a9eba13fdb3c1ef9ab783aaa397ff28cae9832a186ec0457c05c44ec918604fcee6c743348a7768d8b502f50c645472d2f5bebad80ca88dc28c0cdfb73c4a09e68743249f8e73e4635699b92140dbc8fb57b2a0c3b5164343e978b2afd357b48072d2e813a45498b251a28301ae7fffcfd4a04bceb09085d5c7aaeb02fe2c55acc906602796dc70bb8628e2c0551231e546eab855c875847a89aeff5151e89e583fc1f7ce4213defbe09e6b80a921b47e9575bc995804a10fcba0cbc0ebdbf74e05e391428bc2ceea5e32fdbea12d721bcaecb8ad559e5fd8242e446ffa466d75f3e2c9ea104e449b3247a85f36291bcd99f58a74c2b5b63fa43287ccc0d2adbcfc244a08f77f5e2d72a85db823dbb78c218f6851ca60f55fe32803283baacb9191e9959b9a72e28c298232848afb95be6a3588289329b6f452a16cb95d427706d8e9cb354d307786dee4e46b98d8348b9185c6b372a277c0509274ed965f70ce7d6091d34635fb2c8ee547641bc870201cd293537fdcc599a14de294ec067474c90e9240d8e27db0eb4824901469fe4cd2ee0507fb38818301f636aaa363cec84c55b4decef77bea6c634d0da74f095c96fde59d4fe3a385197f7ad03724b910018f4bb901feb361a75e7dd9f07917fc28984e5fde4a3a51ed46cb7d782edcb0457467e89db22d15d67504a1a547187c8760b2253131867754551811c1cc2dab506b62e2ebf5c0e6604d94491ab09a58b2ce156e4eea550d81d0ff3cd8b08812b02d73f041b4af8248e79efaacb18fed9518959df33bb1bba53979a2d77ee04155c98aeeaec2dc6a5ed15df6d172c03ad595c8a17528b9465971d713863833d245a4837a74613d2f44fb350cedbe2a5a52a77900948cb100f0ddaf60c46a9756e760061ecbe7b57a9b965946e85fd96a3284e79ee966a509bdcbff60da1e50858ff68d937adf9bd81dbb1877856b5e267bec1969f4113b65631f1321655bd07c2f7f118af2e895f5289c81285036f48eb14d5dfb4a87d47b0b93607c064626e10389bfe53c4f06c07acf07208fa913229afdc9305e222db7c4d6c75589439f583e7f2ff5380f2d6715c0d6c232764bc2200d04bae78c058b862b0d802512fe9f3b4411a1311dd4b3407e8fa06a4bcb53fe69dac88fa18dd4b08c5699401a2683cf5f02a5ec38d6e4034d99b0ccf24c7a36df3d4da46402809ce69e1ec87e2fbc5e1f9dc021d3552beeb629faef3ec45562aef54dda6ac02057482470b6b94fbc43e74314727718db832361395c5a28018c70889a4882dc071c084fb6886065b153feb934cf60ec84eea13697390ea9e10b55aaff35f2a0ec6a91a9aed6f63adc870cc05f9ff03ec94bab832eead67ced4ec3d39067b78136420a316e2fc5abbd9d438d36dec738bfc32f2375e60592f9cf0890bb1dbdd208b7b179aa845d7260784fdc9827da0c9a1a12e36fa593a03655241c7fd8dc9546e790900de7ec864c516bc606b99aeeacea0405fefa3d0e27388aa3f0ec6b6fc2fa0cfb07cf47fb10c76551777bbdb66449b52efbe05996aee3818533d772af2b391b5e5a7cf99e9de599c12843654a62cd3130b9ce63d6e28b748decaa76e1d6fbeef302ab77507582d59f37028aec0807f642d12246a6e5d4d884364f2432be15fdc639b83d9b7dcb175f365d24ec3bd979fe2029499a3b461ca02e5d89a645f5c5b4bdd06de1ef868ecf1f617221e5e89f9d966d01508c84000c54eb51f12fa6fa0b4798812d634d55e19e781c321dcd9c5019cd082fde4284e2769c84d1f58bc290fd94368a21ef5d9c0b9bb996efc3cf28ff16e384ed4c91b9d0aa633f6fb92d3349ca7610cfb666af0e676ed1bde268b9e044db7b3799af67118e8d15fa3f4a800c44211e12b0f86fe03ff32cea92012d8bb0e369960e9195b099a8747b3a110bb83f80b1d52d1377be4304d9c5eb10dd91d0c7bbbeaaea53a8b548f1d18ddab255cbcd0312269c15be0a7f2922558b8f5d4d76cb4ede5d9e2fd8905e9d955d9083eb49c97645d77e706e2508350bafad922b04b7d15d0865039b5fa488217898c79f5905f85be4dcc102b2b495fc1fc0a3fb95c2439e7bdcaa892193792d0c105450bcbd9373c7147fcb042c7452083467a1c083b9d4d6f02a2055244e261d53d97a33b983ddfbb9b1d68908bf96c15aca0c3d1896779a5dd2fd3ba600816c7efff551bf0bfa0cf158c0e92c8a1a3c5b1d2046635e9389f716c6e9a514c713d6e8a6f099187a27e646d8c64dd82a63bf6611d61aed1a41b38d9d12fbe49b0cacb1e92343e2e5ea2abd8aa5438e8d1e80b04bdfb706f949924f9ad84ac0557c1ec57d57140d2a71f00c43a4f5dbd693d8ac92daf53b9cca8c022a7941242e51925ea4498792b42fd519ec8ff4a852c35971dc82f8acf7ca0b56e31e5142516a092a8bcaa29d6a1f31a968e5c172ba5232672b753c916de8d08738e389b084f0216c1b4b0a45183eb3de35762a9a6f70de339af7a2916cf8fd63a3fec242711841eda53c3e4ed1330c4e4f0d91fdc8243e7d22146f009f7d2a163a7dcffe854b7e2a37ed2d9e2447b9be451f218ea01f03eb0046dd430c0761dca9b118d3852584f39f4daab0b475287032f90673b0182da4f0d5cedb9d5c9e83caa9bcd89bba60539d9cf8094bb74c4e463402bfb4c30cc3946d118f739ebbd420c914fcbcc1684a265caf6d6da958fabe6c952d290e5d62a1f88eaebd92827e9a599e3425579f1dceb1eca6330baaccf55763d4255bdc43410edf96244adf6ec2600b2eb95d7c99f18d5725c06f884e5abce33c522ffbdaf146884c87bec7e7f159b74f4d6ca7fe352e88632e82a7da076206df3b134e6fe2e79ae8a2b66d8c6e9313c0f8fff3c97d636de769eb696b89ab33cef11eaa6df25d0e9b573637a8adf395b27661ecddd6280dcae47c3f2cc9ef13cc1e46ef7abff930cc1a01f143e0d8984e9bb07453a8bdd9510a20862ce1d6266bdbba8d26b422067e86a59f48c656482c9004f2a7d8aa59abd7560e750dd369539af5846c91b63270a4a8894a8aed34832c32c2021453790b9c65f77cbe4d542f3917df88918abb42f665bf1ee364805d40fff703523a1109d6a3d85b45e731c897e5beb1f4e89e07e7e79948def13cffe0d10cc56684f0c5814e086a1406ef984c390ec778a894516f52bf2326a57d39b871f479310654b3be78cb0b8be6348de326193ad82a6a242ebb84d25448863430ce72f3b86a794e1878d0591b633c66845270d04c751065b274414c89dbee8538fb49363794fa79ba89df9f8e6f664f05a8c8175313ba7ab3b404771053a097bc3fb20bc6ca3f490acedf26b90a7307be7ae40e4b4a4f464907842a2aa31997841da73363f270d8b293f3ee5557541051cf8114bb47aaf929026d49f2dcd2ef9e1820bb5abf5557b75d66ce69ab7bd4a3301ec248f2978513fe41a12ed620da54bd0b7ed53c3b6fb71ed6f217ead731756ea4e8d82116ae667427a30401c0cd83f8395b4dedf2eabe3436e07ce0b1f0c2ec95a133781464643d2329332902ab59b4843524281502fac74d7d8fbcd2a64815d39571c0b4114640f666642a1b5ae48343e7ebc5d09e30d987792ab81dab8f0c11b40198019e98f8e793ba2691f5c400eb625ea39ad1d43ac29b086d1741b433d63b7dc0e182388270d1f945bfb3bcaca7fd46db76e8fd5b8f0bd91632dcab0bae95f260b3e200775a4ebaccca6b07b2436172b832b831b2730ed65e710ab62f8a9a90718dc70ee93ba1e2eb0acb713eac583dc9118e75682f373906a8f0358e93e0b58a8b7058a9a046a601fa17841784c6802243a1a69a2a23785442fc94e2e4bfa0dcbbc11456679c485f17683568157c9232cdee0574e934776e555ac20865cb127f5d9692477ec0cdb164dd2384eea9f5ac84b1ca5bbae17688583bc2393d16bfdf6a0c68b9e530e10f1912a63f1826d082c98ab51e9b3c4d96f2b340a33437cf89cdb785c921656b66b7fd7d9cd27838f25d83eda162fb99a9bfde2fd2c8640bf2f40923935de84086a6d0b2a8ac0841d1749ffa038dfcb82ed3a2d9d5e68027b100a4a3812de4545f4b62aa1dfe67006cafcb5ad0d176b1f6334ebe78828fd6831de42c72fefde9c4e3aa06ff65c22f8aeb4750ee89c910483b0f733a56006bf743c5437adf3f8ad99d6530e89959aaf4d4953e38d059511909b8916826cf11cf688ca92ac455c691ecc6193c1547b111b46d550845bdf39d706837b77cd1c33d2bf7f073bedc104a5df473e3c4bf8a67d715f4f816e76c4985070d4147369b8c3197af0cfde8b89762adf9ceb71252fa4e212b3eabfd1ab9408f804a28f148e73130ffddc2a03e0e6375ab79fe8124c2748bebbbaa9e461c567aea123d05f04d57c1c010ca96259c541993b308ec8c21f5eed07111eda5132cefe5853e1ec8f6e3bae0f169f226d389b8261cbcd145f84f307d2bfb579c710ada6fbbd100ff010a48c441648b9d43ecf74fa9dbe0337054f21fee0e076a010597dddc3ae382100c23cac1bf830fd0fcf7bb1b379cdbe2df4020d386b856bcb64970df7d8bb95dd6d40d99878a261c85106bd5ca99874487993f1c399ab4389ca2f5a4d6a6b93ed8c25791a928a8fd68e2a6e40fb99ad5cca15f1faaf7e2b93b938206c3794a16d72fbe943fbce966610a1e9208c759df2dd731da2f753dfa94f690dd8d57ee0dbc637892dbf45d312276f796c6bb2416d536a4e8113a0f9368267e11441001825806d36a7c774faaf97affd8bc33b174fe211d7af2401e7ed71752d0c9c7cbf72d5ea8b6a1f3fcbe26d22ffeac0fa1928099d97c2db7891887c95b5a548c5b13afd4fa9f9166bd546f887741340af25c85f7e9273cfe345c221bca170ee6d3277a78857dd74f8d11d1b7408ae57bb4f6b0072758bd77b2e373d5cda29b5f4ddc8683c24db7da18a21f60676e467df7682931a5de0f39815a6a4389ed65a01ca528b40c3e1a225f97e2a2a25b660530a48629b1e15bba71e40ddc1cfde47bb1de9a101c3f5f34d1801f6b7b1c5f6d6e1eab16688eee90d6f21ff37345611a97c16bd702f630f50629c0ad33a6253e68a27b116cbd4fce91cd9a592d74688af84f0dc6a963c522846d87db0942d1cf78d8974cfee952e8c1d5b207bc460f58bfe30bae2d1a63aad8812bd1e509e21bc21a18589c53b4bcac3d4ea61d57f0f4f6d2c280769b1c6bc6ec8e33435adc794ecf9f9b90a43ed78314ce599ab54724584a1e4508b3bd629a8976b5cfd2039b07c9164be9966a7c62ba00b73d7fa9ad7298b090f8914ae34b3b9b99f28974e1579d0c04afbea5544c227c8e1c396e457f02b1ed72096aad7c6d51b9ed64cd9911719747a31a458424652fc07fdc3ee8163dc851eb70646a8a6ddcc9f7549ac05d911fbbe3a2f7b6f187c98f4bf9a819cb45f3b9afef1915ac5c038ac83ddee95e1f5babf33b91e42ea3ccb652094cde7d4165d2a315e6f8ccf9b0413e3d2e0260c5f16ce6545aa7dcc0000ae2cdbb1be5500855e13ea63b4f22dfd09ac50e6837edba3d885c8fa1a56c77bcaf7361d1297f7e91eb774811eeceb4453de412140bcc09676888d62cff2e130c44876bddfba7d672060c1c8e827d8fcd3157e8f999566c3cc0faf3dce072a1c986989ace923427be028b89663b888d2fb6e98e4a40f3318a0c2649d3fcd205f7f44716d0f4077206a4402462a8bbabf4d0504361a204fa9a14af079e0a9e891bd1fb4aa1c08cea1dc47a69d396f51c704b6458f3dfc6", 0x1000}, {&(0x7f0000000280)="a8e8164dfd42a96b92b4e79ce315e1089a7c0f5810e830fd9176a082f4769897bf289b6f179f8c772eddfb8e86d367e90e5ef07b11466e12b80f7d83046b16b3fecf57dcdad6cd3e22b8dfe1fbd50dab45892c27fb2b7b27413a2a3a906670e4cfce7d2d6e155215fbdfa52aa3c4bc33b85296ca661aaa62d4b1ca73a491ea4f3b46d9df8928e1b9a56e0b641892b3ca2dab5b99870a1d4e1556e3b692f4d45c58f5dd6334844b1441", 0xa9}], 0x6, 0x0, 0x0, 0x2000c080}}, {{0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r2, 0xee01}}}], 0x20, 0x4000800}}], 0x2, 0x8004) 17:20:31 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001c00), 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setregid(r5, r3) chown(&(0x7f0000000000)='./file0\x00', r1, r5) llistxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) [ 891.933544] loop3: detected capacity change from 0 to 274 [ 891.937880] loop4: detected capacity change from 0 to 274 [ 891.944212] loop2: detected capacity change from 0 to 274 [ 891.977202] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 891.979094] FAT-fs (loop4): Filesystem has been set read-only 17:20:31 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:20:31 executing program 6: setxattr$trusted_overlay_redirect(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001c00), 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0x0, r0, 0x0) llistxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) [ 892.008901] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 892.010391] FAT-fs (loop2): Filesystem has been set read-only 17:20:31 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffff81, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) 17:20:31 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r1, 0x0) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x3000) 17:20:31 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:20:31 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) 17:20:31 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00", 0x24, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 892.146115] loop3: detected capacity change from 0 to 274 17:20:31 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)='\x00'/29, 0x1d, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:20:31 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) [ 892.189789] loop4: detected capacity change from 0 to 274 17:20:31 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 892.231848] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 892.233243] FAT-fs (loop4): Filesystem has been set read-only [ 892.280756] loop2: detected capacity change from 0 to 274 [ 892.313581] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 892.314836] FAT-fs (loop2): Filesystem has been set read-only [ 892.329189] No source specified 17:20:39 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)='\x00'/29, 0x1d, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:20:39 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:20:39 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3) 17:20:39 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00", 0x24, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:20:39 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffff81, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) 17:20:39 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="28000000120001d300000000830000000000000010000000e7"], 0x28}], 0x1}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$sock_SIOCOUTQ(r4, 0x5411, &(0x7f0000000000)) sendmsg$NL80211_CMD_STOP_NAN(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xbc, 0x29}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40400c0}, 0x80) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000140)=0x8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r5) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r5, 0x8982, &(0x7f0000000280)) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001c00), 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r6, 0x0) llistxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 17:20:39 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x40000000000000, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) setsockopt$inet6_tcp_int(r1, 0x6, 0x7, &(0x7f0000000000)=0x8, 0x4) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) 17:20:39 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) [ 900.482210] loop4: detected capacity change from 0 to 274 [ 900.485452] No source specified [ 900.491822] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 900.492462] FAT-fs (loop4): Filesystem has been set read-only 17:20:39 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 900.519186] loop2: detected capacity change from 0 to 274 17:20:39 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00", 0x24, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 900.541784] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. [ 900.559090] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 900.559773] FAT-fs (loop2): Filesystem has been set read-only 17:20:39 executing program 0: readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) 17:20:39 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) [ 900.600991] loop4: detected capacity change from 0 to 274 17:20:39 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffc, 0xffffffffffffffca, 0x0, 0xa000, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001c00), 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r0, 0x0) llistxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) 17:20:39 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)='\x00'/29, 0x1d, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 900.618008] No source specified [ 900.623356] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 900.624006] FAT-fs (loop4): Filesystem has been set read-only 17:20:39 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x4000001) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) [ 900.690523] loop2: detected capacity change from 0 to 274 [ 900.705826] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 900.706454] FAT-fs (loop2): Filesystem has been set read-only 17:20:50 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001c00), 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r0, 0x0) llistxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) unlink(&(0x7f0000000000)='./file0\x00') 17:20:50 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0", 0x25, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:20:50 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:20:50 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:20:50 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ff", 0x22, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:20:50 executing program 1: ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000040)={0xfffffffffffffffe, 0x41, 0xc744}) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r2 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r3 = shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r3) shmdt(r3) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) shmdt(r1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r4) ioctl$int_in(r4, 0x5421, &(0x7f0000000000)=0xfff) 17:20:50 executing program 0: readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) 17:20:50 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000000)) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) [ 911.292159] loop2: detected capacity change from 0 to 274 [ 911.294278] loop4: detected capacity change from 0 to 274 [ 911.306882] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 911.307551] FAT-fs (loop2): Filesystem has been set read-only [ 911.312771] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000000f) [ 911.313354] FAT-fs (loop4): Filesystem has been set read-only [ 911.314303] loop3: detected capacity change from 0 to 10 17:20:50 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ff", 0x22, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:20:50 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001c00), 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r0, 0x0) llistxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) 17:20:50 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0", 0x25, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 911.369874] FAT-fs (loop3): Directory bread(block 137) failed [ 911.370393] FAT-fs (loop3): Directory bread(block 138) failed [ 911.373263] FAT-fs (loop3): Directory bread(block 139) failed [ 911.379639] FAT-fs (loop3): Directory bread(block 140) failed [ 911.380126] FAT-fs (loop3): Directory bread(block 141) failed [ 911.383021] FAT-fs (loop3): Directory bread(block 142) failed [ 911.390355] FAT-fs (loop3): Directory bread(block 143) failed [ 911.391323] FAT-fs (loop3): Directory bread(block 144) failed [ 911.396629] FAT-fs (loop3): Directory bread(block 145) failed [ 911.398508] FAT-fs (loop3): Directory bread(block 146) failed [ 911.406880] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 911.407440] FAT-fs (loop3): Filesystem has been set read-only [ 911.425945] loop2: detected capacity change from 0 to 274 [ 911.432139] loop4: detected capacity change from 0 to 274 [ 911.440944] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 911.441675] FAT-fs (loop2): Filesystem has been set read-only 17:20:50 executing program 7: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x420, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) readv(r1, &(0x7f0000000080), 0x0) 17:20:50 executing program 0: readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) 17:20:50 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$sock_SIOCOUTQ(r4, 0x5411, &(0x7f0000000000)) recvmsg$unix(r4, &(0x7f0000000780)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/50, 0x32}, {&(0x7f0000000300)=""/51, 0x33}, {&(0x7f00000003c0)=""/54, 0x36}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f0000000400)=""/43, 0x2b}], 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000710000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8}, 0x40000000) pipe2(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) pread64(r5, &(0x7f0000000800)=""/126, 0x7e, 0x20) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/192, 0xc0, 0x1, &(0x7f0000000180)=""/177, 0xb1}, &(0x7f0000000040)=0x40) [ 911.460349] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000000f) [ 911.461101] FAT-fs (loop4): Filesystem has been set read-only 17:20:50 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000080)=""/29) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/118) 17:20:50 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:20:50 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ff", 0x22, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:20:50 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001c00), 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r0, 0x0) llistxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x9) [ 911.561777] loop2: detected capacity change from 0 to 274 [ 911.574883] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 911.575682] FAT-fs (loop2): Filesystem has been set read-only [ 911.637326] loop3: detected capacity change from 0 to 10 [ 911.678147] FAT-fs (loop3): Directory bread(block 137) failed [ 911.679189] FAT-fs (loop3): Directory bread(block 138) failed [ 911.680595] FAT-fs (loop3): Directory bread(block 139) failed [ 911.681614] FAT-fs (loop3): Directory bread(block 140) failed [ 911.682580] FAT-fs (loop3): Directory bread(block 141) failed [ 911.683806] FAT-fs (loop3): Directory bread(block 142) failed [ 911.684798] FAT-fs (loop3): Directory bread(block 143) failed [ 911.686082] FAT-fs (loop3): Directory bread(block 144) failed [ 911.687102] FAT-fs (loop3): Directory bread(block 145) failed [ 911.688110] FAT-fs (loop3): Directory bread(block 146) failed [ 911.690224] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 911.691350] FAT-fs (loop3): Filesystem has been set read-only 17:21:00 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001c00), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=@v1={0x1000000, [{0x955c, 0x8}]}, 0xc, 0x2) r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x80000000, 0x101000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_genetlink_get_family_id$fou(&(0x7f0000000400), r3) sendmsg$unix(r1, &(0x7f00000003c0)={&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000280)=[{&(0x7f00000001c0)="1f5e3ee173bb02a534cd219c71477645badcec52378f66967c312653be41b0609e7c60904d44c9a3b7d7bd5e034541aa985467caa7d26606079bdaff48687695932d336badcf76db8493220490b9f3c7cf982c6e833ed5308f96c22b018b85eae039c45cc3fb064ea789978958e7604bf54bf2490d08e0c3bb82bc8f210244fb4764e638af221c0a9621c4", 0x8b}], 0x1, &(0x7f0000000540)=ANY=[@ANYBLOB="34000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=r0, @ANYRES32=r5, @ANYRES32, @ANYBLOB="000000004cf9ff10515ea5380a92f86a477348a089f206f6cbfb96fdca758450a21767edb402bf59f740dc4fd50ad62b2b9b900c39bdaf53de758f2938a1f85b8d973195bc77d2458f56719a4eb8dd3a3490b493844655073196999a068abb4af286d6d622c61c3c9e10ac0171551944bbe22a59396fdf0a9e7a283e311ae9bdc155e04a0ebcd8b7c8694144bfc1db76dfbeaf055378078e7af2770d66c1faa8696172e9a00fe165b4ce9b5d95675626581ee7363abf91ec34d35f1c1c82128e0ec799a0"], 0x38, 0x40000}, 0x200408c5) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r6, 0x0) llistxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000a00)={'vlan0\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="0e00000007000000010000000200000002000000090000007aa300002001000009000000adae000005000000070000006b29fff8ffe5000001000000ff01000007000000020000004000000001000000020000007ca1000005000000dfb24f18f87badb1f5e4c54e34a6b50fd1df53773c84e497a19568c5f12e47183856e0142ea862fa47de9355fb527e5df7614aff2032e72b34e9b9aa0a0530bcdadd16b64720d6696b01ba07997c4007471e4c7cd9e1d29a6f059f7c9d87b785f5a4f7e948a88daf66cd85266a51608ef1eb8f6135cd326c6215f81af86c026a7b5b3622b7d45e060c"]}) 17:21:00 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0", 0x25, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:21:00 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:21:00 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) (fail_nth: 1) 17:21:00 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00", 0x24, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:21:00 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) 17:21:00 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) 17:21:00 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x5, @private1, 0x5}, 0x1c) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 921.867911] FAULT_INJECTION: forcing a failure. [ 921.867911] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 921.869638] CPU: 1 UID: 0 PID: 7761 Comm: syz-executor.7 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 921.869663] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 921.869673] Call Trace: [ 921.869679] [ 921.869685] dump_stack_lvl+0xfa/0x120 [ 921.869722] should_fail_ex+0x4d7/0x5e0 [ 921.869754] should_fail_alloc_page+0xe0/0x110 [ 921.869774] prepare_alloc_pages+0x1af/0x500 [ 921.869799] __alloc_frozen_pages_noprof+0x17f/0x1f10 [ 921.869828] ? __lock_acquire+0xc65/0x1b70 [ 921.869850] ? __lock_acquire+0xc65/0x1b70 [ 921.869869] ? look_up_lock_class+0x56/0x150 [ 921.869897] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 921.869924] ? look_up_lock_class+0x56/0x150 [ 921.869958] ? __lock_acquire+0x694/0x1b70 [ 921.869979] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 921.870002] ? policy_nodemask+0xeb/0x4e0 [ 921.870029] alloc_pages_mpol+0xed/0x340 [ 921.870052] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 921.870082] alloc_pages_noprof+0xa1/0x380 [ 921.870107] __pmd_alloc+0x3b/0x980 [ 921.870135] __handle_mm_fault+0xcae/0x30f0 [ 921.870159] ? mtree_load+0xe8/0xa10 [ 921.870186] ? find_held_lock+0x2b/0x80 [ 921.870213] ? __pfx___handle_mm_fault+0x10/0x10 [ 921.870236] ? lock_release+0xc8/0x290 [ 921.870253] ? lock_is_held_type+0x9e/0x120 [ 921.870300] handle_mm_fault+0x2c3/0x900 [ 921.870330] __get_user_pages+0x58a/0x2f10 [ 921.870369] ? find_held_lock+0x2b/0x80 [ 921.870397] ? __pfx___get_user_pages+0x10/0x10 [ 921.870426] ? lock_is_held_type+0x9e/0x120 [ 921.870456] faultin_page_range+0x2f3/0x9d0 [ 921.870498] madvise_do_behavior+0x8d8/0xe20 [ 921.870521] ? __pfx_madvise_do_behavior+0x10/0x10 [ 921.870543] ? down_read+0x1b1/0x470 [ 921.870565] ? find_held_lock+0x2b/0x80 [ 921.870596] do_madvise+0x16b/0x240 [ 921.870613] ? __pfx_do_madvise+0x10/0x10 [ 921.870638] ? lock_acquire+0xdf/0x2e0 [ 921.870656] ? __might_fault+0xe0/0x190 [ 921.870674] ? find_held_lock+0x2b/0x80 [ 921.870699] ? __might_fault+0x138/0x190 [ 921.870718] ? lock_release+0xc8/0x290 [ 921.870736] ? __might_fault+0xe0/0x190 [ 921.870754] ? find_held_lock+0x2b/0x80 [ 921.870779] ? syscall_trace_enter+0x1cf/0x260 [ 921.870810] ? lock_release+0xc8/0x290 [ 921.870826] ? perf_trace_sys_enter+0x2d/0x170 [ 921.870858] __x64_sys_madvise+0xa9/0x110 [ 921.870878] do_syscall_64+0xbf/0x360 [ 921.870895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.870913] RIP: 0033:0x7f8fdf467b19 [ 921.870927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 921.870945] RSP: 002b:00007f8fdc9dd188 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 921.870961] RAX: ffffffffffffffda RBX: 00007f8fdf57af60 RCX: 00007f8fdf467b19 [ 921.870974] RDX: 0000000000000017 RSI: 0000000000002000 RDI: 0000000020ffe000 [ 921.870985] RBP: 00007f8fdc9dd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 921.870996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 921.871006] R13: 00007ffe58ee06ff R14: 00007f8fdc9dd300 R15: 0000000000022000 [ 921.871031] 17:21:01 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) [ 921.926096] loop2: detected capacity change from 0 to 274 [ 921.929376] loop4: detected capacity change from 0 to 274 [ 921.942568] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 921.943786] FAT-fs (loop2): Filesystem has been set read-only [ 921.949154] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000000f) [ 921.950067] FAT-fs (loop4): Filesystem has been set read-only [ 921.976779] loop3: detected capacity change from 0 to 10 17:21:01 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x5, 0x43, 0x9, 0x5, 0x0, 0xfff, 0x1020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x4, @perf_bp={&(0x7f00000000c0), 0x2}, 0x40, 0xffffffffffff0000, 0x1f, 0x8, 0xff, 0x101, 0x0, 0x0, 0x6, 0x0, 0xabd9}, r1, 0x8, r0, 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) getsockopt$inet6_tcp_int(r2, 0x6, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) 17:21:01 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 922.028186] FAT-fs (loop3): Directory bread(block 137) failed 17:21:01 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) (fail_nth: 2) 17:21:01 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00", 0x24, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:21:01 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9) [ 922.041632] FAT-fs (loop3): Directory bread(block 138) failed [ 922.042150] FAT-fs (loop3): Directory bread(block 139) failed [ 922.047516] FAT-fs (loop3): Directory bread(block 140) failed [ 922.047996] FAT-fs (loop3): Directory bread(block 141) failed [ 922.059007] FAT-fs (loop3): Directory bread(block 142) failed [ 922.059520] FAT-fs (loop3): Directory bread(block 143) failed [ 922.060005] FAT-fs (loop3): Directory bread(block 144) failed [ 922.066897] FAT-fs (loop3): Directory bread(block 145) failed [ 922.067385] FAT-fs (loop3): Directory bread(block 146) failed 17:21:01 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001c00), 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000006c0), 0x2, &(0x7f00000007c0)=ANY=[@ANYBLOB="72656c656173655f6167656e743d2e2f66696c65302c616c6cac6e616d653d2a2b2c68756765746c622c736d61636b6673726f6f743d6d61703d6f66662c0002bde95f55ea5960def1db2879cc8b64e12d94120f4edb33073e9fd849125be6e75177bc16c951eb5772bbdb3b4da1288f03dc454a7c6dcefe89ef1ec999908383c83d9e2f603b93edd1eb053bd1e36a6451d74e1ee5f73a647793c64caebfd16ac83a6baf6a7693cd8e8ecef92a2593c3283ff3"]) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) mount$bind(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)='./file0\x00', &(0x7f0000000780), 0x20, 0x0) setresuid(0x0, r0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xfffffffffffffe01, 0x8, &(0x7f0000000540)=[{&(0x7f0000000080)="8068de511db3084a98b33a816963337fb8947515ff37d5360c8a9a17e4c5", 0x1e, 0xea}, {&(0x7f0000000140)="efef26c1da246ed850a6023a3dc3634d3f925e73bd6071138d72342464bb168017ca511e13a04617bcccde4f4d2f4cd8e7317bb9f1b910df5551f3dc8302c6cd7b994a863b203bf972a7cebdea6cbf4ba1fddc860b8bd291c3f52c8e61ded0115567a607a15f2fdc420748acb3ba4e8f8f9737b1b4dae28ecbe426ae1af1bdff3bc281e2d191cb01646d281d2582d9f82d1de4a008d057c49c777618834b81cf8a87eee23df254be6ff90b36f45c16364192", 0xb2, 0x4}, {&(0x7f0000000200)="de2816c3869188cf293bae1485ae3514fec03f04ab5eefe802636e1e1e06ff1642024152326e15174c679f36dd27659cc7e2632530b109049d171131e3b46354b1a0c0aaffb9e2df3c3d4674f5fa7b893098385584a78b4c6c2f2d08f870eab131799ca94262e0eac649e46861585b5c3600e38b31413dea692be010ff2fa74c89ff4bb1622766d05333e5354cef32962ab0fae9b1bb91cf8c786b304d3774d2910e4b47b8b8b94bb24f3a2b4496648a2d3da0d60267c3184c33a19d9f2aa5", 0xbf, 0x4}, {&(0x7f00000002c0)="504fe98e788e03b0ec65f710c23f272b7baf8fa0f771faca6df9bffbc04fba3f50ca73ad3a12a31f0fa2d7ac06cc16cfc82591b8847bd8f9df7ab9eb920dca7edd537e30d485f6956bf403990a401dc00168d9c8b6d652b7c91fd1bf15204fba1bc89fcbccaf63dec8da8d22c1f1", 0x6e, 0xd8}, {&(0x7f00000003c0)="43e960453044d50fd0c0ea6952e6ad8f791bb97a0abea8e0397873cb7011a691117c8e183f5fd2f637033aaab86fe090d22e095be216a2f968800072c4d12bb9cf77dbc5", 0x44, 0x3}, {&(0x7f0000000440)="9ea3ad497333ae60e1ff154be9385e725aee4bcafa8efef4651433e66c63ab81f54d528f9e26871bd4cc4b0fab05f74ba9250c9b9d5824d7be52a15bed827f8e696b4742e4b6e6713fe2f78f60795682caa27f319ee3063e58d493c505f5a714fa15dc17acf43c14c87de62c0f05e14ea7f9b8c6e435e205ce650ee59c272530cc995ae4aab43be6c2669f4c5b5a0e748a2fe5af688461501bb2b4fcfd1cfcc3eabb9947a2541b3747efe598f947e839ac3fd39d07277a3f51a5a50c73280f6f0a88044c6b02b3e26c7b25a0ec461252af424709c36b", 0xd6}, {&(0x7f00000000c0)="6909a2ae7a859754c6257a4e57430b31e51f069d18d78de68fe9710c9c3548110e7fcd6811fbaf531f6b3ebe283a82b2473e29edb0d590fdd787", 0x3a, 0x880000001}, {&(0x7f0000000340), 0x0, 0x3}], 0x180000, &(0x7f0000000600)={[{@block={'block', 0x3d, 0x200}}, {@map_off}], [{@uid_gt={'uid>', r0}}, {@fsmagic={'fsmagic', 0x3d, 0xfff}}, {@obj_role={'obj_role', 0x3d, 'trusted.overlay.redirect\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@measure}]}) llistxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) [ 922.075636] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 922.076213] FAT-fs (loop3): Filesystem has been set read-only [ 922.091164] loop4: detected capacity change from 0 to 274 [ 922.096135] FAT-fs (loop4): bogus number of reserved sectors [ 922.096639] FAT-fs (loop4): Can't find a valid FAT filesystem [ 922.116585] FAULT_INJECTION: forcing a failure. [ 922.116585] name failslab, interval 1, probability 0, space 0, times 0 [ 922.118288] CPU: 0 UID: 0 PID: 7787 Comm: syz-executor.7 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 922.118317] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 922.118330] Call Trace: [ 922.118338] [ 922.118347] dump_stack_lvl+0xfa/0x120 [ 922.118387] should_fail_ex+0x4d7/0x5e0 [ 922.118422] ? __pmd_alloc+0x98/0x980 [ 922.118450] should_failslab+0xc2/0x120 [ 922.118472] kmem_cache_alloc_noprof+0x5f/0x470 [ 922.118516] __pmd_alloc+0x98/0x980 [ 922.118547] __handle_mm_fault+0xcae/0x30f0 [ 922.118576] ? mtree_load+0xe8/0xa10 [ 922.118612] ? find_held_lock+0x2b/0x80 [ 922.118644] ? __pfx___handle_mm_fault+0x10/0x10 [ 922.118671] ? lock_release+0xc8/0x290 [ 922.118691] ? lock_is_held_type+0x9e/0x120 [ 922.118745] handle_mm_fault+0x2c3/0x900 [ 922.118779] __get_user_pages+0x58a/0x2f10 [ 922.118824] ? find_held_lock+0x2b/0x80 [ 922.118855] ? __pfx___get_user_pages+0x10/0x10 [ 922.118890] ? lock_is_held_type+0x9e/0x120 [ 922.118923] faultin_page_range+0x2f3/0x9d0 [ 922.118964] madvise_do_behavior+0x8d8/0xe20 [ 922.118991] ? __pfx_madvise_do_behavior+0x10/0x10 [ 922.119016] ? down_read+0x1b1/0x470 [ 922.119054] ? find_held_lock+0x2b/0x80 [ 922.119089] do_madvise+0x16b/0x240 [ 922.119110] ? __pfx_do_madvise+0x10/0x10 [ 922.119138] ? lock_acquire+0xdf/0x2e0 [ 922.119159] ? __might_fault+0xe0/0x190 [ 922.119181] ? find_held_lock+0x2b/0x80 [ 922.119209] ? __might_fault+0x138/0x190 [ 922.119232] ? lock_release+0xc8/0x290 [ 922.119254] ? __might_fault+0xe0/0x190 [ 922.119275] ? find_held_lock+0x2b/0x80 [ 922.119304] ? syscall_trace_enter+0x1cf/0x260 [ 922.119340] ? lock_release+0xc8/0x290 [ 922.119360] ? perf_trace_sys_enter+0x2d/0x170 [ 922.119396] __x64_sys_madvise+0xa9/0x110 [ 922.119420] do_syscall_64+0xbf/0x360 [ 922.119442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.119464] RIP: 0033:0x7f8fdf467b19 [ 922.119481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 922.119502] RSP: 002b:00007f8fdc9dd188 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 922.119523] RAX: ffffffffffffffda RBX: 00007f8fdf57af60 RCX: 00007f8fdf467b19 [ 922.119538] RDX: 0000000000000017 RSI: 0000000000002000 RDI: 0000000020ffe000 [ 922.119551] RBP: 00007f8fdc9dd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 922.119564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 922.119577] R13: 00007ffe58ee06ff R14: 00007f8fdc9dd300 R15: 0000000000022000 [ 922.119606] [ 922.179224] loop2: detected capacity change from 0 to 274 [ 922.183805] cgroup: Unknown subsys name 'all¬name' [ 922.195220] cgroup: Unknown subsys name 'all¬name' [ 922.196978] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 922.198366] FAT-fs (loop2): Filesystem has been set read-only 17:21:10 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) (fail_nth: 3) 17:21:10 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00", 0x24, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:21:10 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {0x0, 0x0, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:21:10 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) 17:21:10 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x7f, 0x1, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) 17:21:10 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:21:10 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) r1 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000000)=""/102) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:21:10 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001c00), 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x104, 0x3) setresuid(0x0, r0, 0x0) keyctl$get_persistent(0x16, r0, 0xfffffffffffffffb) llistxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) readlink(&(0x7f0000000280)='./file0\x00', &(0x7f00000003c0)=""/4096, 0x1000) [ 931.719464] loop2: detected capacity change from 0 to 274 [ 931.749693] loop3: detected capacity change from 0 to 274 [ 931.749939] loop4: detected capacity change from 0 to 274 [ 931.756894] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 931.758254] FAT-fs (loop2): Filesystem has been set read-only [ 931.776920] FAT-fs (loop4): bogus number of reserved sectors [ 931.777880] FAT-fs (loop4): Can't find a valid FAT filesystem 17:21:10 executing program 1: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa) 17:21:10 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/158, 0x9e, 0x1, &(0x7f0000000180)=""/151, 0x97}, &(0x7f0000000040)=0x40) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) [ 931.841855] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 931.842694] FAT-fs (loop3): Filesystem has been set read-only [ 931.850610] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) 17:21:11 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0", 0x25, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:21:11 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffff81, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) 17:21:11 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) (fail_nth: 4) 17:21:11 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:21:11 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001c00), 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3e5b43d0, 0x3, &(0x7f00000002c0)=[{&(0x7f0000000140)="6533e043e26aa205bde523714e542d47968295ea39248d95031b2be76a47fb4f1d472a1eb71916f64d359c7a9c09806bb05e07f20a896f2372cf87717d81fea64ec2624eaf0792f3243f277e529386ac59e059df241248d48c649dcc99be027946883525bfd4baed096c41501cc4e62b37da128ef4b53c047f91c4b17355debf14eeebb583c2b42af64965b3017c51307da661642509c0c53a8953af68a7bb9f6ff6b8ff45bfeef3ce6a3a3be11999e07c346c", 0xb3, 0x7f}, {&(0x7f0000000200)="be0949e95a1894a1f3ffc996f5cec219c700aa5704ecabd1a3ea57898dbdac8fee94804da4bd40ef0eca5955b213e8e1bc4624025a2c7f1e80f18888f71e10419055da8f834a23c45cc58f530a430e87486c419398d4b9b7c07480ddaa55e79e43a974f327dba5cf15e150a55083fa20ccba1e39eab9b54e8f5bf52af106df193df28aa1e91342d11b9c565dcd4f7a378c2d76c0fbfe4a152a6919c166", 0x9d, 0x6}, {&(0x7f0000000080)="ef86d4fcd51b2019a0fa5e1e10bfc457c03df5e2d69b2da597", 0x19, 0x6}], 0x84, &(0x7f0000000500)=ANY=[@ANYBLOB='utf8=0,nonumtail=0,obj_type=-+,audit,fowner>', @ANYRESDEC=r0, @ANYBLOB="10cc5616b470206d754ecd10420b43ff889b986d465f17a187dc49ebc83100b068d587ac378c84658e78e0929f3b9842bdcb9726b05697417677eb4e042ca80c3da02c6f399254d9f22525bb96cb324cc5a12bfe7443fe67487e6c9d264ef9ff832126f3cf1ac012e142c6a505180e6dc2801fee55920a1e31ccf1502add8c1cc347a6897f97383a946e2d5923163be1ae0cf5cab1e38bf090d47a4ef789f9fc659a0954f9386e9b0c05c0a86c5933e1dbf3dc412d7fcd6fd7a78a3010b00866909c85710d20628ae5f1c7140fdea1712b"]) llistxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340), &(0x7f00000003c0)=@v3={0x3000000, [{0x8, 0x5}, {0x10001, 0xfffffffe}], r0}, 0x18, 0x0) 17:21:11 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {0x0, 0x0, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 932.027124] loop3: detected capacity change from 0 to 274 [ 932.032718] loop4: detected capacity change from 0 to 274 [ 932.050708] FAT-fs (loop4): bogus number of reserved sectors [ 932.051331] FAT-fs (loop4): Can't find a valid FAT filesystem [ 932.089329] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 932.090227] FAT-fs (loop3): Filesystem has been set read-only [ 932.095997] loop6: detected capacity change from 0 to 264192 [ 932.099306] vfat: Unknown parameter 'obj_type' 17:21:21 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x1000000, 0x0, 0x0, 0x3200c54, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001c00), 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r0, 0x0) llistxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) 17:21:21 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {0x0, 0x0, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:21:21 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) (fail_nth: 5) 17:21:21 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffb000/0x4000)=nil) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) 17:21:21 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0", 0x25, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:21:21 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffff81, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) 17:21:21 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:21:21 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00', @ANYRES32=r1, @ANYBLOB="03020000000800000039666901873000"]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}}, 0x0, 0x0, 0x38, 0x0, "96b83b54bde02aaf04f4d7db61e4a88d4a97a2c722a213bd6be333087f71e76e5e28562872bc776e2122b5ab5de4930b951e625214da3a7a8933a7a08513bb2a307b4d0f7128001ed08140349ff71e0d"}, 0xd8) r6 = dup(r3) ioctl$sock_SIOCOUTQ(r6, 0x5411, &(0x7f0000000000)) fsetxattr$security_selinux(r6, &(0x7f0000000100), &(0x7f0000000140)='system_u:object_r:audisp_var_run_t:s0\x00', 0x26, 0x6) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x1, 0x7f, 0x3, 0x4, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x3800000000000000, 0x1f}, 0x126, 0xcf2f, 0x5, 0x1, 0x2, 0xfff, 0x3ff, 0x0, 0x400, 0x0, 0x81}, 0x0, 0xd, r2, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r5) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x70, r7, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x0) [ 942.177641] loop2: detected capacity change from 0 to 274 17:21:21 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffff81, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) [ 942.209075] loop3: detected capacity change from 0 to 274 [ 942.215672] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000000f) [ 942.216813] FAT-fs (loop2): Filesystem has been set read-only 17:21:21 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001c00), 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180), 0x2, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r0, 0x0) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'osx.', 'trusted.overlay.redirect\x00'}, &(0x7f0000000080)='trusted.overlay.redirect\x00', 0x19, 0x3) llistxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) [ 942.220121] loop4: detected capacity change from 0 to 274 [ 942.221897] FAULT_INJECTION: forcing a failure. [ 942.221897] name failslab, interval 1, probability 0, space 0, times 0 [ 942.223656] CPU: 1 UID: 0 PID: 7870 Comm: syz-executor.7 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 942.223687] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 942.223701] Call Trace: [ 942.223709] [ 942.223718] dump_stack_lvl+0xfa/0x120 [ 942.223762] should_fail_ex+0x4d7/0x5e0 [ 942.223800] ? ptlock_alloc+0x21/0x70 [ 942.223833] should_failslab+0xc2/0x120 [ 942.223856] kmem_cache_alloc_noprof+0x5f/0x470 [ 942.223897] ptlock_alloc+0x21/0x70 [ 942.223931] pte_alloc_one+0x86/0x360 [ 942.223965] __do_fault+0x30d/0x480 [ 942.223993] __handle_mm_fault+0xfea/0x30f0 [ 942.224026] ? find_held_lock+0x2b/0x80 [ 942.224061] ? __pfx___handle_mm_fault+0x10/0x10 [ 942.224090] ? lock_release+0xc8/0x290 [ 942.224112] ? lock_is_held_type+0x9e/0x120 [ 942.224170] handle_mm_fault+0x2c3/0x900 [ 942.224207] __get_user_pages+0x58a/0x2f10 [ 942.224255] ? find_held_lock+0x2b/0x80 [ 942.224289] ? __pfx___get_user_pages+0x10/0x10 [ 942.224326] ? lock_is_held_type+0x9e/0x120 [ 942.224362] faultin_page_range+0x2f3/0x9d0 [ 942.224405] madvise_do_behavior+0x8d8/0xe20 [ 942.224434] ? __pfx_madvise_do_behavior+0x10/0x10 [ 942.224462] ? down_read+0x1b1/0x470 [ 942.224498] ? find_held_lock+0x2b/0x80 [ 942.224536] do_madvise+0x16b/0x240 [ 942.224558] ? __pfx_do_madvise+0x10/0x10 [ 942.224588] ? lock_acquire+0xdf/0x2e0 [ 942.224611] ? __might_fault+0xe0/0x190 [ 942.224634] ? find_held_lock+0x2b/0x80 [ 942.224665] ? __might_fault+0x138/0x190 [ 942.224689] ? lock_release+0xc8/0x290 [ 942.224713] ? __might_fault+0xe0/0x190 [ 942.224737] ? find_held_lock+0x2b/0x80 [ 942.224767] ? syscall_trace_enter+0x1cf/0x260 [ 942.224806] ? lock_release+0xc8/0x290 [ 942.224828] ? perf_trace_sys_enter+0x2d/0x170 [ 942.224867] __x64_sys_madvise+0xa9/0x110 [ 942.224892] do_syscall_64+0xbf/0x360 [ 942.224916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.224940] RIP: 0033:0x7f8fdf467b19 [ 942.224958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 942.224980] RSP: 002b:00007f8fdc9dd188 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 942.225002] RAX: ffffffffffffffda RBX: 00007f8fdf57af60 RCX: 00007f8fdf467b19 [ 942.225018] RDX: 0000000000000017 RSI: 0000000000002000 RDI: 0000000020ffe000 [ 942.225032] RBP: 00007f8fdc9dd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 942.225047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 942.225061] R13: 00007ffe58ee06ff R14: 00007f8fdc9dd300 R15: 0000000000022000 [ 942.225092] [ 942.267651] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 942.268229] FAT-fs (loop3): Filesystem has been set read-only [ 942.299099] FAT-fs (loop4): bogus number of reserved sectors [ 942.300122] FAT-fs (loop4): Can't find a valid FAT filesystem 17:21:21 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f00000000c0)={{r2}, 0xfffffffffffffffc, 0x9, 0x8}) 17:21:21 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffff81, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) 17:21:21 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700), 0x0, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:21:21 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) [ 942.390199] loop3: detected capacity change from 0 to 274 [ 942.418039] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 942.418684] FAT-fs (loop3): Filesystem has been set read-only 17:21:31 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffff81, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) 17:21:31 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x3000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x14) 17:21:31 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x452, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x80000001) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) 17:21:31 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:21:31 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) (fail_nth: 6) 17:21:31 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700), 0x0, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:21:31 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0", 0x25, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:21:31 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xa, 0xe0a1851ce627d435, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001c00), 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000140)=0x0, &(0x7f0000000180), &(0x7f00000001c0)) chown(&(0x7f0000000000)='./file0\x00', r1, r2) setresuid(0x0, r0, 0x0) llistxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) [ 952.710716] loop4: detected capacity change from 0 to 274 [ 952.717374] FAT-fs (loop4): bogus number of reserved sectors [ 952.718516] FAT-fs (loop4): Can't find a valid FAT filesystem [ 952.768021] loop2: detected capacity change from 0 to 274 17:21:31 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 952.781652] loop3: detected capacity change from 0 to 274 [ 952.818107] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000000f) [ 952.819224] FAT-fs (loop2): Filesystem has been set read-only 17:21:31 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffff81, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) 17:21:32 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) (fail_nth: 7) 17:21:32 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ff4000/0xc000)=nil, 0x4000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) [ 952.872564] loop4: detected capacity change from 0 to 274 [ 952.896045] FAT-fs (loop4): bogus number of reserved sectors [ 952.896959] FAT-fs (loop4): Can't find a valid FAT filesystem 17:21:32 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x6, 0x3, &(0x7f00000003c0)=[{&(0x7f00000005c0)="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", 0x1000, 0x100000001}, {&(0x7f00000002c0)="1f88cbccd650b36b937cfa27db5ade6a676d5e729f9916c6c1f4074dc52ff26a674bca3d0a18d413cdc6ab81706ec58bb7bdd841310f8274fb", 0x39, 0xfffffffffffffffc}, {&(0x7f0000000300)="0436d9520015c68dbdc7462802601ab350b134769ccb62696e72e57a7c60a80b91b595ca9a40d4ac796ccaff7fb0b0993e070cfe5a0e3da4682830", 0x3b, 0xffffffffffffff44}], 0x200000, &(0x7f0000000440)={[{'\x00'}, {'\x00'}, {'\x00'}], [{@audit}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$sock_SIOCOUTQ(r5, 0x5411, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_DISABLE(r5, 0x2401, 0x3) close(r3) dup(r2) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000000c0)={0xaec, 0xfffffffffffffffd, 0x1, 0x18cbc2f3, 0x7, [{0x7, 0x6, 0x7, '\x00', 0x100}, {0xeb, 0x8, 0x5}, {0x0, 0xa8a, 0x200, '\x00', 0x804}, {0x4, 0x1, 0x6, '\x00', 0x2400}, {0xfffffffffffffff7, 0x6, 0x8, '\x00', 0x400}, {0x6, 0x4, 0x0, '\x00', 0x1}, {0x6, 0x6, 0x40}]}) 17:21:32 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:21:32 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x1, 0x8) mkdirat(r0, &(0x7f0000000140)='./file0\x00', 0x88) chown(&(0x7f0000000000)='./file0\x00', 0xee00, 0xee00) setxattr$trusted_overlay_redirect(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001c00), 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r1, 0x0) llistxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r2, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@v3={0x3000000, [{0x3}, {0xc2d3, 0x3}], r2}, 0x18, 0x0) [ 952.960272] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 952.961560] FAT-fs (loop3): Filesystem has been set read-only [ 952.970763] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) 17:21:32 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{0x0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 952.995756] FAULT_INJECTION: forcing a failure. [ 952.995756] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 952.997527] CPU: 0 UID: 0 PID: 7924 Comm: syz-executor.7 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 952.997557] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 952.997569] Call Trace: [ 952.997576] [ 952.997585] dump_stack_lvl+0xfa/0x120 [ 952.997627] should_fail_ex+0x4d7/0x5e0 [ 952.997665] should_fail_alloc_page+0xe0/0x110 [ 952.997690] prepare_alloc_pages+0x1af/0x500 [ 952.997714] ? __is_insn_slot_addr+0x140/0x290 [ 952.997749] __alloc_frozen_pages_noprof+0x17f/0x1f10 [ 952.997781] ? unwind_get_return_address+0x59/0xa0 [ 952.997813] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 952.997844] ? __lock_acquire+0x694/0x1b70 [ 952.997873] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 952.997906] ? __lock_acquire+0x694/0x1b70 [ 952.997935] ? lock_is_held_type+0x9e/0x120 [ 952.997970] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 952.997995] ? policy_nodemask+0xeb/0x4e0 [ 952.998026] alloc_pages_mpol+0xed/0x340 [ 952.998053] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 952.998078] ? filemap_get_entry+0x1bb/0x3b0 [ 952.998112] ? __pfx_filemap_get_entry+0x10/0x10 [ 952.998152] folio_alloc_mpol_noprof+0x38/0x2a0 [ 952.998185] shmem_alloc_folio+0x11b/0x140 [ 952.998214] shmem_get_folio_gfp.constprop.0+0x4ea/0x13a0 [ 952.998256] ? __pfx_shmem_get_folio_gfp.constprop.0+0x10/0x10 [ 952.998288] ? __lock_acquire+0x694/0x1b70 [ 952.998312] ? css_rstat_updated+0x1b5/0x4c0 [ 952.998345] shmem_fault+0x1f3/0x9f0 [ 952.998373] ? lock_acquire+0xdf/0x2e0 [ 952.998396] ? __pfx_shmem_fault+0x10/0x10 [ 952.998422] ? find_held_lock+0x2b/0x80 [ 952.998454] ? lock_release+0xc8/0x290 [ 952.998486] ? mark_held_locks+0x49/0x80 [ 952.998514] __do_fault+0x10d/0x480 [ 952.998541] __handle_mm_fault+0xfea/0x30f0 [ 952.998572] ? find_held_lock+0x2b/0x80 [ 952.998603] ? __pfx___handle_mm_fault+0x10/0x10 [ 952.998630] ? lock_release+0xc8/0x290 [ 952.998650] ? lock_is_held_type+0x9e/0x120 [ 952.998702] handle_mm_fault+0x2c3/0x900 [ 952.998737] __get_user_pages+0x58a/0x2f10 [ 952.998782] ? find_held_lock+0x2b/0x80 [ 952.998813] ? __pfx___get_user_pages+0x10/0x10 [ 952.998848] ? lock_is_held_type+0x9e/0x120 [ 952.998882] faultin_page_range+0x2f3/0x9d0 [ 952.998922] madvise_do_behavior+0x8d8/0xe20 [ 952.998950] ? __pfx_madvise_do_behavior+0x10/0x10 [ 952.998975] ? down_read+0x1b1/0x470 [ 952.999002] ? find_held_lock+0x2b/0x80 [ 952.999037] do_madvise+0x16b/0x240 [ 952.999058] ? __pfx_do_madvise+0x10/0x10 [ 952.999086] ? lock_acquire+0xdf/0x2e0 [ 952.999107] ? __might_fault+0xe0/0x190 [ 952.999129] ? find_held_lock+0x2b/0x80 [ 952.999158] ? __might_fault+0x138/0x190 [ 952.999180] ? lock_release+0xc8/0x290 [ 952.999202] ? __might_fault+0xe0/0x190 [ 952.999224] ? find_held_lock+0x2b/0x80 [ 952.999253] ? syscall_trace_enter+0x1cf/0x260 [ 952.999287] ? lock_release+0xc8/0x290 [ 952.999307] ? perf_trace_sys_enter+0x2d/0x170 [ 952.999344] __x64_sys_madvise+0xa9/0x110 [ 952.999383] do_syscall_64+0xbf/0x360 [ 952.999405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.999428] RIP: 0033:0x7f8fdf467b19 [ 952.999444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 952.999465] RSP: 002b:00007f8fdc9dd188 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 952.999486] RAX: ffffffffffffffda RBX: 00007f8fdf57af60 RCX: 00007f8fdf467b19 [ 952.999501] RDX: 0000000000000017 RSI: 0000000000002000 RDI: 0000000020ffe000 [ 952.999514] RBP: 00007f8fdc9dd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 952.999528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 952.999540] R13: 00007ffe58ee06ff R14: 00007f8fdc9dd300 R15: 0000000000022000 [ 952.999569] [ 953.024155] loop5: detected capacity change from 0 to 264192 [ 953.066937] loop2: detected capacity change from 0 to 274 17:21:32 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffff81, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) [ 953.097535] FAT-fs (loop2): bogus number of reserved sectors [ 953.098446] FAT-fs (loop2): Can't find a valid FAT filesystem [ 953.198280] loop5: detected capacity change from 0 to 264192 [ 956.022137] kworker/u9:3 (236) used greatest stack depth: 23760 bytes left 17:21:42 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x44, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001c00), 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r0, 0x0) llistxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) 17:21:42 executing program 5: r0 = msgget(0x3, 0x50) clock_gettime(0x0, &(0x7f0000001c40)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001b80)=[{{&(0x7f00000001c0)=@abs, 0x6e, &(0x7f00000017c0)=[{&(0x7f0000000240)=""/163, 0xa3}, {&(0x7f0000000300)=""/56, 0x38}, {&(0x7f00000003c0)=""/141, 0x8d}, {&(0x7f0000000480)=""/226, 0xe2}, {&(0x7f0000000580)=""/206, 0xce}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/104, 0x68}, {&(0x7f0000001700)=""/37, 0x25}, {&(0x7f0000001740)=""/102, 0x66}], 0x9, &(0x7f0000001880)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f00000018c0)=""/30, 0x1e}], 0x1, &(0x7f0000001940)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0xb8}}, {{&(0x7f0000001a00)=@abs, 0x6e, &(0x7f0000001b00)=[{&(0x7f0000001a80)=""/87, 0x57}], 0x1, &(0x7f0000001b40)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}], 0x3, 0x0, &(0x7f0000001c80)={r1, r2+10000000}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001d80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x0}}, './file0\x00'}) r5 = getpgid(0xffffffffffffffff) msgctl$IPC_SET(r0, 0x1, &(0x7f0000001dc0)={{0x0, 0x0, 0xffffffffffffffff, r3, r4, 0x0, 0x7}, 0x0, 0x0, 0x8000, 0x1, 0x200, 0xd6e, 0x7fff, 0x93b, 0xfff, 0x8860, r5}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$KDGETKEYCODE(r7, 0x4b4c, &(0x7f0000000180)={0x1f, 0x4901}) ioctl$sock_SIOCOUTQ(r7, 0x5411, &(0x7f0000000000)) r8 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x84441, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x1041, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0x0, r7, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0xffffffffffffff14, 0x12000, 0x0) readv(r8, &(0x7f0000000040)=[{&(0x7f0000000080)=""/234, 0xe2}], 0x100000000000021a) 17:21:42 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffff81, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) 17:21:42 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{0x0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:21:42 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:21:42 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) (fail_nth: 8) 17:21:42 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700), 0x0, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:21:42 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffa000/0x2000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) [ 963.243247] loop3: detected capacity change from 0 to 274 [ 963.260133] loop4: detected capacity change from 0 to 274 [ 963.266545] loop2: detected capacity change from 0 to 274 [ 963.279322] FAT-fs (loop4): bogus number of reserved sectors [ 963.280141] FAT-fs (loop4): Can't find a valid FAT filesystem [ 963.281503] FAT-fs (loop2): bogus number of reserved sectors [ 963.281974] FAT-fs (loop2): Can't find a valid FAT filesystem 17:21:42 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffff81, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) 17:21:42 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffa000/0x6000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:21:42 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{0x0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:21:42 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) (fail_nth: 9) 17:21:42 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:21:42 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff81, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) 17:21:42 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3, 0x0, 0xff, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) 17:21:42 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x9) [ 963.418861] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 963.419417] FAT-fs (loop3): Filesystem has been set read-only 17:21:42 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) clock_gettime(0x6, &(0x7f0000000140)={0x0, 0x0}) utimensat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={{r1, r2/1000+10000}, {0x77359400}}, 0x100) setxattr$trusted_overlay_redirect(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001c00), 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0x0, r3, 0x0) llistxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) [ 963.425804] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) 17:21:42 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000", 0x16, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:21:42 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) 17:21:42 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) (fail_nth: 10) [ 963.498269] loop2: detected capacity change from 0 to 274 [ 963.501929] loop4: detected capacity change from 0 to 274 17:21:42 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/17) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) [ 963.512876] FAT-fs (loop2): bogus number of reserved sectors [ 963.513915] FAT-fs (loop2): Can't find a valid FAT filesystem [ 963.523515] FAT-fs (loop4): bogus number of reserved sectors [ 963.523981] FAT-fs (loop4): Can't find a valid FAT filesystem [ 963.556449] loop3: detected capacity change from 0 to 274 [ 963.556953] FAULT_INJECTION: forcing a failure. [ 963.556953] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 963.557881] CPU: 0 UID: 0 PID: 7989 Comm: syz-executor.7 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 963.557897] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 963.557904] Call Trace: [ 963.557909] [ 963.557914] dump_stack_lvl+0xfa/0x120 [ 963.557940] should_fail_ex+0x4d7/0x5e0 [ 963.557962] should_fail_alloc_page+0xe0/0x110 [ 963.557977] prepare_alloc_pages+0x1af/0x500 [ 963.558000] __alloc_frozen_pages_noprof+0x17f/0x1f10 [ 963.558027] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 963.558044] ? __lock_acquire+0x694/0x1b70 [ 963.558062] ? lock_is_held_type+0x9e/0x120 [ 963.558082] ? lock_is_held_type+0x9e/0x120 [ 963.558098] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 963.558112] ? policy_nodemask+0xeb/0x4e0 [ 963.558130] alloc_pages_mpol+0xed/0x340 [ 963.558144] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 963.558158] ? filemap_get_entry+0x1bb/0x3b0 [ 963.558177] ? __pfx_filemap_get_entry+0x10/0x10 [ 963.558198] folio_alloc_mpol_noprof+0x38/0x2a0 [ 963.558217] shmem_alloc_folio+0x11b/0x140 [ 963.558233] shmem_get_folio_gfp.constprop.0+0x4ea/0x13a0 [ 963.558256] ? __pfx_shmem_get_folio_gfp.constprop.0+0x10/0x10 [ 963.558276] ? __lock_acquire+0x694/0x1b70 [ 963.558290] shmem_fault+0x1f3/0x9f0 [ 963.558307] ? __pfx_shmem_fault+0x10/0x10 [ 963.558323] ? ___pte_offset_map+0x31/0x370 [ 963.558343] __do_fault+0x10d/0x480 [ 963.558357] __handle_mm_fault+0xfea/0x30f0 [ 963.558376] ? __pfx___handle_mm_fault+0x10/0x10 [ 963.558392] ? __pte_offset_map_lock+0x190/0x330 [ 963.558410] ? no_page_table+0xc7/0x220 [ 963.558426] ? follow_page_pte.constprop.0+0x4f9/0x1170 [ 963.558446] handle_mm_fault+0x2c3/0x900 [ 963.558465] __get_user_pages+0x58a/0x2f10 [ 963.558489] ? down_read_killable+0x1d4/0x4f0 [ 963.558503] ? __pfx___get_user_pages+0x10/0x10 [ 963.558521] ? lock_is_held_type+0x9e/0x120 [ 963.558540] faultin_page_range+0x2f3/0x9d0 [ 963.558561] madvise_do_behavior+0x8d8/0xe20 [ 963.558577] ? __pfx_madvise_do_behavior+0x10/0x10 [ 963.558591] ? down_read+0x1b1/0x470 [ 963.558605] ? find_held_lock+0x2b/0x80 [ 963.558624] do_madvise+0x16b/0x240 [ 963.558636] ? __pfx_do_madvise+0x10/0x10 [ 963.558651] ? lock_acquire+0xdf/0x2e0 [ 963.558663] ? __might_fault+0xe0/0x190 [ 963.558674] ? find_held_lock+0x2b/0x80 [ 963.558690] ? __might_fault+0x138/0x190 [ 963.558702] ? lock_release+0xc8/0x290 [ 963.558714] ? __might_fault+0xe0/0x190 [ 963.558726] ? find_held_lock+0x2b/0x80 [ 963.558741] ? syscall_trace_enter+0x1cf/0x260 [ 963.558761] ? lock_release+0xc8/0x290 [ 963.558772] ? perf_trace_sys_enter+0x2d/0x170 [ 963.558792] __x64_sys_madvise+0xa9/0x110 [ 963.558804] do_syscall_64+0xbf/0x360 [ 963.558817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.558830] RIP: 0033:0x7f8fdf467b19 [ 963.558839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 963.558850] RSP: 002b:00007f8fdc9dd188 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 963.558862] RAX: ffffffffffffffda RBX: 00007f8fdf57af60 RCX: 00007f8fdf467b19 [ 963.558869] RDX: 0000000000000017 RSI: 0000000000002000 RDI: 0000000020ffe000 [ 963.558877] RBP: 00007f8fdc9dd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 963.558884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 963.558891] R13: 00007ffe58ee06ff R14: 00007f8fdc9dd300 R15: 0000000000022000 [ 963.558907] 17:21:42 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x6, 0x6, 0x16, 0x0, 0x100000001, 0x80810, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xf145, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x800, 0xe5e, 0x4, 0x8, 0x1, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x90}, 0x0, 0xf, r0, 0xa) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = fork() process_vm_readv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/211, 0xd3}, {&(0x7f0000000100)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/30, 0x1e}, {&(0x7f00000011c0)=""/4096, 0x1000}], 0x3, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x1, 0x1, 0xbe, 0x6, 0x0, 0x6e4, 0x80060, 0x9, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_config_ext={0x80, 0x8}, 0x4009, 0x20, 0xfffffb0c, 0x6, 0x4, 0x27, 0x4, 0x0, 0x9, 0x0, 0x9}, r3, 0xf, r0, 0x2) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x1, 0x9, 0x6, 0x40, 0x0, 0x4986, 0x44882, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3f, 0x0, @perf_config_ext={0x400, 0x100}, 0x48406, 0x7, 0x6, 0x7, 0x2, 0x7ff, 0x1, 0x0, 0x1ff, 0x0, 0x101}, 0x0, 0xe, r2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$sock_SIOCOUTQ(r5, 0x5411, &(0x7f0000000000)) readv(r5, &(0x7f0000000200)=[{&(0x7f00000004c0)=""/219, 0xdb}, {&(0x7f00000015c0)=""/4110, 0x100e}, {&(0x7f0000000180)=""/14, 0xe}, {&(0x7f0000000240)=""/78, 0x4e}], 0x4) 17:21:42 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:21:42 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) [ 963.643419] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 963.644214] FAT-fs (loop3): Filesystem has been set read-only [ 963.724738] loop4: detected capacity change from 0 to 274 [ 963.728210] FAT-fs (loop4): bogus number of reserved sectors [ 963.729195] FAT-fs (loop4): Can't find a valid FAT filesystem 17:21:52 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) (fail_nth: 11) 17:21:52 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) preadv2(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/238, 0xee}, {&(0x7f00000001c0)=""/229, 0xe5}], 0x2, 0x10001, 0x8, 0xd) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000780), 0x8, 0x40000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r3) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000840)=[{{&(0x7f0000000600)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000680)="3b988e979c937a08af104a8ab5a7ca5d50d7062cefff098ba816f035af0da4bed51d8202e98bcb85bc3bd32928ffc215a28f7d84524a5857d22a9a7e2f9d8d97e243d325e3e18b5b494fb12f7a2f48088282dcae829e", 0x56}], 0x1, &(0x7f0000000900)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="00000000a8a54bcf522271570e09555f7234af048b8518cb824087d5b5df62b224d338cb89fe66d9e0862e2fa28f7f239544361e6812b62dfcef4ea77b2302ffa3e4dafe28cc8716c4b574c5753d6f843de1e875ae056da6433087bc3a675e3464ab92d99191cf7d831bc3abde9a9a77308384ddd1e15fddf16e6054e118cd5a09891dfcc9f8e319e955a9154eb5b4b0dfb672fac17f8d1bba8ab091606c32d05c60d12e2243bec48a003219643cc96c137f27b4b1e6c750c793e4a5dcf56d54ea299b1ca75b06eac8da73bdf542bcd5d5323c5913ba3a54ef2cde864faadf7c000de2b461b1842ad22a8bf7854216"], 0x48, 0x1}}], 0x1, 0x4004010) r4 = fork() process_vm_readv(r4, &(0x7f0000000180)=[{&(0x7f0000000000)=""/211, 0xd3}, {&(0x7f0000000100)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/30, 0x1e}, {&(0x7f00000011c0)=""/4096, 0x1000}], 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x93, 0xe9, 0xb0, 0xff, 0x0, 0x8, 0x101, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_config_ext={0x800, 0x3}, 0x8940, 0x6, 0x16ae, 0x0, 0x8, 0xc0c, 0x38, 0x0, 0x7ff, 0x0, 0x5}, r4, 0x4, r0, 0x9) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r5, 0x0) syz_io_uring_submit(r6, 0x0, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) ioctl$sock_SIOCOUTQ(r8, 0x5411, &(0x7f0000000000)) sendfile(r5, r8, &(0x7f0000000480)=0x100000000, 0xffffffffffffffe0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000300)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x800, 0x50, 0x3d603917f719aa3c}, &(0x7f00000002c0)='./file0\x00', 0x18, 0x0, 0x23456}, 0x3ff) 17:21:52 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:21:52 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:21:52 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000", 0x16, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:21:52 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) 17:21:52 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x2000, 0x10, &(0x7f0000ffb000/0x2000)=nil) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:21:52 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) mknodat$loop(r1, &(0x7f0000000000)='./file0\x00', 0x8c19, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001c00), 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') setresuid(0x0, r2, 0x0) llistxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) [ 972.937949] loop4: detected capacity change from 0 to 274 [ 972.943193] FAT-fs (loop4): bogus number of reserved sectors [ 972.943721] FAT-fs (loop4): Can't find a valid FAT filesystem [ 972.964943] loop3: detected capacity change from 0 to 274 17:21:52 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) [ 972.967949] FAULT_INJECTION: forcing a failure. [ 972.967949] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 972.970186] CPU: 1 UID: 0 PID: 8023 Comm: syz-executor.7 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 972.970220] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 972.970236] Call Trace: [ 972.970244] [ 972.970254] dump_stack_lvl+0xfa/0x120 [ 972.970302] should_fail_ex+0x4d7/0x5e0 [ 972.970345] _copy_to_user+0x32/0xd0 [ 972.970377] simple_read_from_buffer+0xe0/0x180 [ 972.970415] proc_fail_nth_read+0x189/0x270 [ 972.970455] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 972.970502] ? security_file_permission+0x22/0x90 [ 972.970531] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 972.970568] vfs_read+0x1eb/0xbe0 [ 972.970612] ? __pfx_vfs_read+0x10/0x10 [ 972.970651] ? lock_release+0xc8/0x290 [ 972.970683] ? __fget_files+0x20d/0x3b0 [ 972.970732] ksys_read+0x121/0x240 [ 972.970769] ? __pfx_ksys_read+0x10/0x10 [ 972.970806] ? perf_trace_sys_enter+0x2d/0x170 [ 972.970856] do_syscall_64+0xbf/0x360 [ 972.970883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.970910] RIP: 0033:0x7f8fdf41a69c [ 972.970930] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 972.970955] RSP: 002b:00007f8fdc9dd170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 972.970980] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8fdf41a69c [ 972.970997] RDX: 000000000000000f RSI: 00007f8fdc9dd1e0 RDI: 0000000000000003 [ 972.971013] RBP: 00007f8fdc9dd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 972.971028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 972.971043] R13: 00007ffe58ee06ff R14: 00007f8fdc9dd300 R15: 0000000000022000 [ 972.971078] [ 973.016751] loop2: detected capacity change from 0 to 274 17:21:52 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 973.035124] FAT-fs (loop2): bogus number of reserved sectors [ 973.036312] FAT-fs (loop2): Can't find a valid FAT filesystem 17:21:52 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0xdd, 0x1, 0x4) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x5000) [ 973.052163] loop4: detected capacity change from 0 to 274 [ 973.056904] FAT-fs (loop4): bogus number of reserved sectors [ 973.057390] FAT-fs (loop4): Can't find a valid FAT filesystem [ 973.071083] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 973.072588] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 973.073957] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 973.075226] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 06 00 [ 973.076543] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 973.078772] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.079238] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 973.079906] buffer_io_error: 54 callbacks suppressed [ 973.079913] Buffer I/O error on dev sr0, logical block 0, async page read [ 973.100347] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.100829] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 973.101501] Buffer I/O error on dev sr0, logical block 1, async page read 17:21:52 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) [ 973.107364] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 973.108514] FAT-fs (loop3): Filesystem has been set read-only [ 973.113678] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 973.122764] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.123821] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 973.125121] Buffer I/O error on dev sr0, logical block 2, async page read 17:21:52 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) [ 973.147401] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.148391] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 973.149695] Buffer I/O error on dev sr0, logical block 3, async page read 17:21:52 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400", 0xc}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 973.197714] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.198555] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 973.199210] Buffer I/O error on dev sr0, logical block 4, async page read [ 973.199972] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.200408] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 973.201184] Buffer I/O error on dev sr0, logical block 5, async page read [ 973.206776] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.207223] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 973.208029] Buffer I/O error on dev sr0, logical block 6, async page read [ 973.222615] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.223072] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 973.223839] Buffer I/O error on dev sr0, logical block 7, async page read [ 973.225426] loop4: detected capacity change from 0 to 274 [ 973.231588] FAT-fs (loop4): bogus number of reserved sectors [ 973.231960] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.232542] FAT-fs (loop4): Can't find a valid FAT filesystem [ 973.232989] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 973.234495] Buffer I/O error on dev sr0, logical block 0, async page read [ 973.237868] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.238317] Buffer I/O error on dev sr0, logical block 1, async page read [ 973.240726] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.241265] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.242621] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.243163] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.246815] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.247360] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.250750] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.253706] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.262529] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.272061] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.276385] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.282041] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.292009] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.294801] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.296105] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.296686] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.297224] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.298145] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.300705] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.302593] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.303137] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.306872] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.307604] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.312188] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.313310] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.316659] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.317864] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.319275] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.321196] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.322383] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.358815] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.360545] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.361711] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.362868] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.364192] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.365338] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.366729] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.367949] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.369175] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.372753] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.373901] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.375708] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.377016] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.378174] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.379260] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.382661] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.384060] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.385956] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.386532] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.387084] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.387934] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.388472] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.392601] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.393142] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.395619] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.396773] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.397311] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.399573] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.400118] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.404743] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.405282] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 973.407590] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 17:22:00 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x400, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x0) shmget(0x0, 0x3000, 0x78000000, &(0x7f0000ffa000/0x3000)=nil) shmget(0x2, 0x1000, 0x78000609, &(0x7f0000ffd000/0x1000)=nil) shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ff8000/0x4000)=nil) r2 = shmget(0x0, 0x1000, 0x78000000, &(0x7f0000ff8000/0x1000)=nil) shmat(r2, &(0x7f0000ff9000/0x2000)=nil, 0x2000) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x0) 17:22:00 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:22:00 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001c00), 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0x3, 0x4, &(0x7f00000013c0)=[{&(0x7f0000000080)="1b7a079e87bac56ffa98ab6586fa90bb3c03b00645b8b5b0b13f1107ce1c3548e7e9ac1a1c5adef392fcd94ff545ab790abf251273", 0x35, 0x9}, {&(0x7f0000000140)="4237dfd95e0184a9f5d04458009c241eed7ed30a96ef673d8fcad357e0603142c98564c9b7f65b7b57f540ca98395386ac58f766a44c20f1cc9f20d59a9f558c98e5698a4bdd6758d4724f990ea250d3b4204370b0f932b0fb2e83bdd8b76aaa75eba3dbe77dfe75ca03e163c2d9e12d4253b16cfbef24b36b8ea4770e5459517201fdd4e9d8d238f7e39d9115ee7ba8786b0004e741af0d147537d61a81e21d3c5f423d886e3fc827012b00d045fb079a4a7f8f090db6855dcb31b8c64f3cf96914f9a583d24e9ace6f0bb2b4a034e55339d3c80dc5d004c4ef3c98fc0a9febaf0fd663ef5c6ac3", 0xe8, 0x4}, {&(0x7f00000003c0)="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", 0x1000, 0x6}, {&(0x7f0000000240)="bdba2fe3c284ee9249ce26098fece58bdcc48f660a7eb762bc85eca79776f1447bb5292c2cce9481bc55eb58067259729e2cf88b452da98f0c8e2c5e10ef7492731bfda11268f417a4db1881094745e9cb9df034500631486733a52d7a8f85cddf2964e8ff198cafb60a8b4699f3bfc5d45102250e7aff892fdf12ae01c4490c466bd56cae37593824d269d079599532d6016b8367d33095267898d3da02332f4c7268ccaa155337ed997dd3a7e607d5d388c728ffbfcf0c3fd6e02d996bcd426dc69e2e077d6ca8df9aafe2c11daa09ab6050e95dd81feb9e6a3e107db965ad", 0xe0, 0xffffffffffffff5b}], 0x1140806, &(0x7f00000000c0)={[{@iocharset={'iocharset', 0x3d, 'cp932'}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '*!([&-}-[('}}]}) llistxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) 17:22:00 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x346}}, './file0\x00'}) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) 17:22:00 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400", 0xc}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:22:00 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2002, 0x17) 17:22:00 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000", 0x16, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:22:00 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, 0x0, 0x0) [ 981.267423] loop3: detected capacity change from 0 to 274 17:22:00 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, 0x0, 0x0) 17:22:00 executing program 5: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00'}) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) [ 981.291442] loop4: detected capacity change from 0 to 274 [ 981.303588] loop2: detected capacity change from 0 to 274 [ 981.315111] FAT-fs (loop2): bogus number of reserved sectors [ 981.316053] FAT-fs (loop2): Can't find a valid FAT filesystem [ 981.318637] FAT-fs (loop4): bogus number of reserved sectors [ 981.319133] FAT-fs (loop4): Can't find a valid FAT filesystem 17:22:00 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001c00), 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r2, 0x0) setresuid(r2, r0, r1) llistxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) 17:22:00 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) [ 981.360265] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 981.361323] FAT-fs (loop3): Filesystem has been set read-only 17:22:00 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x64) 17:22:00 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, 0x0, 0x0) [ 981.388168] FAT-fs (loop3): error, corrupted directory (invalid entries) 17:22:09 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2004, 0x17) 17:22:09 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400", 0xc}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:22:09 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:22:09 executing program 5: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1_to_bridge\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x39, 0x6, [0x6, 0x56d92dc9, 0x7, 0x8000, 0x20, 0x13c6]}}) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x33}}}, 0x0, 0x0, 0xc, 0x0, "c7023e732bcbcfaea30b14339fb9284ff535b28ee58eb85ca3e1a35850f1242596031a7b24a53d2e6f3f5817a9548b80a0f3bf309162e31f1895ad1b707c7db719ce9f6305a5e041191da676d67cf3e2"}, 0xd8) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000200)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000000)) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f00000001c0)) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) 17:22:09 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000080), 0x0) 17:22:09 executing program 1: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ffc000/0x4000)=nil) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) r2 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x80, &(0x7f0000ffe000/0x2000)=nil, 0x4) shmdt(r1) shmat(r2, &(0x7f0000ffc000/0x2000)=nil, 0xf000) shmat(r2, &(0x7f0000ffb000/0x1000)=nil, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) 17:22:09 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e", 0x21, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:22:09 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file1\x00', 0x2000000000000, 0x0, 0x0, 0x200400, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001c00), 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r1, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000056c0)=[{{&(0x7f00000000c0), 0x6e, &(0x7f00000006c0)=[{&(0x7f00000003c0)=""/113, 0x71}, {&(0x7f0000000440)=""/138, 0x8a}, {&(0x7f0000000500)=""/91, 0x5b}, {&(0x7f0000000580)=""/21, 0x15}, {&(0x7f00000005c0)=""/247, 0xf7}], 0x5}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000740)=""/194, 0xc2}], 0x1}}, {{&(0x7f0000000880), 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000900)=""/77, 0x4d}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f00000009c0)=""/150, 0x96}, {&(0x7f0000000a80)=""/68, 0x44}, {&(0x7f00000026c0)=""/4096, 0x1000}, {&(0x7f0000000b00)=""/73, 0x49}, {&(0x7f0000000b80)}, {&(0x7f0000000bc0)=""/61, 0x3d}, {&(0x7f0000000c00)=""/151, 0x97}], 0x9, &(0x7f0000000d80)}}, {{&(0x7f0000000dc0)=@abs, 0x6e, &(0x7f0000001140)=[{&(0x7f0000000e40)=""/180, 0xb4}, {&(0x7f0000000f00)=""/51, 0x33}, {&(0x7f0000000f40)=""/86, 0x56}, {&(0x7f0000000fc0)=""/170, 0xaa}, {&(0x7f0000001080)=""/35, 0x23}, {&(0x7f00000010c0)=""/73, 0x49}], 0x6, &(0x7f00000011c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}}, {{&(0x7f0000001300), 0x6e, &(0x7f0000001640)=[{&(0x7f0000001380)=""/12, 0xc}, {&(0x7f00000013c0)=""/235, 0xeb}, {&(0x7f00000014c0)=""/43, 0x2b}, {&(0x7f0000001500)=""/113, 0x71}, {&(0x7f0000001580)=""/159, 0x9f}], 0x5, &(0x7f0000001700)=[@rights={{0x10}}], 0x10}}, {{&(0x7f0000001740), 0x6e, &(0x7f0000001c40)=[{&(0x7f00000017c0)=""/228, 0xe4}, {&(0x7f00000018c0)=""/68, 0x44}, {&(0x7f0000001940)=""/253, 0xfd}, {&(0x7f0000001a40)=""/173, 0xad}, {&(0x7f0000001b00)=""/34, 0x22}, {&(0x7f0000001b40)=""/7, 0x7}, {&(0x7f0000001b80)=""/116, 0x74}], 0x7, &(0x7f0000001cc0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}, {{&(0x7f0000001dc0)=@abs, 0x6e, &(0x7f0000002300)=[{&(0x7f0000001e40)=""/221, 0xdd}, {&(0x7f0000001f40)=""/94, 0x5e}, {&(0x7f0000001fc0)=""/168, 0xa8}, {&(0x7f0000002080)=""/124, 0x7c}, {&(0x7f0000002100)=""/67, 0x43}, {&(0x7f00000036c0)=""/4096, 0x1000}, {&(0x7f0000002180)=""/234, 0xea}, {&(0x7f00000046c0)=""/4096, 0x1000}, {&(0x7f0000002280)=""/27, 0x1b}, {&(0x7f00000022c0)=""/32, 0x20}], 0xa, &(0x7f00000023c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x108}}], 0x7, 0x2002, 0x0) setresuid(r1, r1, r2) llistxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) lremovexattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@known='trusted.overlay.upper\x00') ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000140)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) [ 990.276917] loop3: detected capacity change from 0 to 274 [ 990.280328] loop4: detected capacity change from 0 to 274 17:22:09 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000080), 0x0) [ 990.303825] loop2: detected capacity change from 0 to 274 17:22:09 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2006, 0x17) [ 990.319843] FAT-fs (loop2): bogus number of reserved sectors [ 990.320827] FAT-fs (loop2): Can't find a valid FAT filesystem 17:22:09 executing program 1: preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/108, 0x6c}, {&(0x7f0000000200)=""/194, 0xc2}], 0x2, 0x80006, 0x1f) shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) r0 = shmget(0x0, 0x4000, 0x4, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$usbmon(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x100010, 0xffffffffffffffff, 0x1ff) [ 990.326884] FAT-fs (loop4): bogus number of reserved sectors [ 990.328048] FAT-fs (loop4): Can't find a valid FAT filesystem 17:22:09 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001c00), 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0/../file0\x00'}) setresuid(0x0, r1, 0x0) llistxattr(&(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x54) 17:22:09 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x8000, @private1, 0x9}, 0x1c) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) 17:22:09 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000080), 0x0) [ 990.442542] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 990.443715] FAT-fs (loop3): Filesystem has been set read-only 17:22:09 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x15) 17:22:09 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{0x0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 990.469272] FAT-fs (loop3): error, corrupted directory (invalid entries) 17:22:09 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440", 0x12}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:22:09 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) 17:22:09 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000080)=[{0x0}], 0x1) 17:22:09 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x20f5, 0x17) [ 990.574840] loop2: detected capacity change from 0 to 274 17:22:09 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r1, 0x0) [ 990.585551] FAT-fs (loop2): bogus number of reserved sectors [ 990.586564] FAT-fs (loop2): Can't find a valid FAT filesystem [ 990.627785] loop4: detected capacity change from 0 to 274 [ 990.652461] FAT-fs (loop4): invalid media value (0x00) [ 990.653412] FAT-fs (loop4): Can't find a valid FAT filesystem 17:22:18 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440", 0x12}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:22:18 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e", 0x21, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:22:18 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{0x0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:22:18 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001c00), 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r1, 0x0) r2 = signalfd(r0, &(0x7f0000000000)={[0x80000001]}, 0x8) open_tree(r2, &(0x7f0000000040)='./file0\x00', 0x8500) llistxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) 17:22:18 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000080)=[{0x0}], 0x1) 17:22:18 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:22:18 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3) 17:22:18 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r3) clone3(&(0x7f000000aa80)={0x1010000, &(0x7f000000a840)=0xffffffffffffffff, &(0x7f000000a880), &(0x7f000000a8c0), {0x17}, &(0x7f000000a900)=""/254, 0xfe, &(0x7f000000aa00)=""/14, &(0x7f000000aa40)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x7}, 0x58) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f000000ab00), 0x8800, 0x0) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f000000ab40), 0x4000, 0x0) r7 = fork() process_vm_readv(r7, &(0x7f0000000180)=[{&(0x7f0000000000)=""/211, 0xd3}, {&(0x7f0000000100)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/30, 0x1e}, {&(0x7f00000011c0)=""/4096, 0x1000}], 0x3, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r8, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setregid(r12, r10) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000ac00)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000000c0), 0x0, &(0x7f0000000140)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r0, r1, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}], 0x60, 0x20000000}}, {{&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000240)="899de4cb220f6633e6242fb44e70a1efed58637b52afe4c38ca25a7910c5462b948c761dce05372daf500b0c59efc9cee4496f96984a396616b38a3e8fbcbbb08722432cb666209e5f6eca66e908430b09b56f62c42561cd6640890cee3b3817fe8d38b33e859bf2d8cd5d39380e05f740a2b4184962baf3946f6e4fcd4f081d8ad4c5016b25fc176a3f0d29f6325c21b3f7e61452b9c07ea8e397cebf48edaaced69f16b005cc688ed76c0fa8d04da7d39c8c8ef85d7d1b4a3ae8f6a0d41014ca43f4e1917456b0fd4571ed2bbffd423fc601a33904bf185aaeb632da36829ae405f7bee329feceab512efa", 0xec}, {&(0x7f00000003c0)="6a18abdc661c39ef6169e63a750f0e0fad4a62bdd888955dd798ef8c9eda4d6221efb1bd90379ad2938677028bf5cd06f35231d26b9dc829c3ea10d6c60927c3288c51cb29a48ad61b27aa69062f5dc373c0a6f2aca1d0eb411a8bf50a0bca2147d290caab088ad4ae2d4c0f31b210455c5eeb0017e53e8e21dce34598a6005f108d20fee9417bfe73ce7d05c8691fd202fbc2c0ba00538a5c5dc2b3fa6a52456d5331741a16cb8e613a9ffec234a8c0d9a9441ff307104c935b094788903e0e", 0xc0}, {&(0x7f00000005c0)="17edfcbea36d6adee2602c858fa21744d0e144b5c0a01069973a65a469973e18ff290c1f62a9a7f868ddb6d42032833e86d00d924fabe57b04d4861d8b7b9a82763e9333be01f57714ca1accfe1382d59e51804e058efe34c751019f1aed03ac8d16fcdcac79f48de392a44331b9a0f44cb992ad", 0x74}, {&(0x7f0000000640)="eb56587a1dc90da3fe1fb1290aa3b0627989a3f7fca25d8473c46917f8a78c6f4977ba7f3609cd1a047fbc05bf3f56bf6587c7cb45b6abe5b65cecba6fbebad25c005ea254ff33b4c16653c6c9011ac4375c555ded2bf49c043dcdef79a8adc3da8a5eb833eeb64c6a5859043abaa110e70143b62502cd8f975d2b81376aeecf0506e7cb78b3ca8e19a7e41969ddb3d3e51535c4c9560ccae327557297b17c3bc7181a6e317dcf45cc5d1944fea9540f7fb8648a6dc1f46b041a6a4f0937cde9b5225f1012f6d42a6a52d88acd11f78e7c4ac41c73c85a513a9926435f9c4dd86186bd9a6773d2af0e6397aefd6a50c8e72a672612b4e4", 0xf7}, {&(0x7f0000000740)="1f8a538caabf657b0f51a286707fa29786bd51c56f7ead1e318ffcb8ae139bbc02db27d84f019073a8d3b867bb0860dae1a2075a1072aabf86c98fe35330d7dd07526397d7454b0361152e67a65ca24794878d024431d5e8f62ca8485264872d031cef8deb2b9afd657c2115b746682de157c694d0572ce1b9bc7ba6af5d3e17fa2aef7bd52c05f10c0dd86dd5", 0x8d}, {&(0x7f0000000800)="66b655e5973adf37b8f811d411b58f308c22a78aba96187ebc3623d9e42cc9cd69d0700b80f9408f823a4034799105865d6cce5b0617c37923b6d0db1526df1f3036", 0x42}], 0x6, &(0x7f0000000b40), 0x0, 0x850}}, {{&(0x7f0000000c00)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000ec0)=[{&(0x7f0000000c80)="99b0c769940a3ad61da513d03e5f5455a1471a4f3e017e7d50a4a4c75bed7540e36a70d04bdb547e078b11cdcf3b43b057d8998ab68f3006fe6b47b472d8ae12cf349c3e06fac50746029c9aef0c807f47c4b51bb427e193c2ca69d60754807d13c3aa6ac2a17e82645d2c0ab2a75c65cbe99a5ae09657fccfc22b561895fc4d73f29255eda968ab248e02b40c3d0452cf7c7eb8f50903b0227c65884dca467fd08dd7fb9b214af769ce44f14bc78f26bdf68007ca72c6d97d4ae0a527bdf55ac009fc85d60f0f80c02c8f42cd8ceea27635", 0xd2}, {&(0x7f0000000d80)="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", 0xfe}, {&(0x7f0000000e80)="dda6447942f8d38fa170e3cdac47e6c105f7825dd902281828ecd449d80f2283a7e29dbe437f5382f5cf105da5", 0x2d}], 0x3, &(0x7f0000000f00)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00}}}], 0x20, 0x8}}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000f40)="da280be5e6669c70a3817bb855269b59de25", 0x12}], 0x1, &(0x7f0000000fc0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, 0xee00}}}], 0x20, 0x48001}}, {{&(0x7f0000001000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001380)=[{&(0x7f0000001080)="625969055aab9f66de9a793cd7eace7a8d", 0x11}, {&(0x7f00000010c0)="ba92ebaaa5ec1d3787f6fa6484a28b8ea7a1a4fbaabeb157077524411ce6c773fdf8ef8579ccd7f55bc2351ac7227a8eaff605453ec800297a976b81280ce9799fd07c200c663142d02286ad0c903886ab95bd212473d0db6ee383ed87f48b01cb9d62909f4c162680577bb7d26b799fa484840ddaaf2567a9e1e12bb7cf7eca64ecbaa4895bf35ec756e63c730ad6d8a551c0a1af83b522225c522f9e3e449980e5c02f6eb77492000003a125157948265c14e5e0b84c76ddb0b2df1f47123540", 0xc1}, {&(0x7f00000011c0)="a85a40c18b95fa4ce01b2f350e3619c774126ad104c859f8c54ff87c2cd6d35c8464f193fd227b282d4a71055e5e37e08119337ca7c1fe54c74ed740243cf52cea62fe80bc7b8d7eb43ee4efdbac0c41a27e182cfa1f81497955da11e6b189c8a34eb07fccae527a87727a544f95b9b57bab3f399ec3d476a4fb36beacbbbeb89f503a94bfdba2cb5d52217f74614574c0d47579318f6c92e61cc408c3a2ea5bf0acd654a0baffcd1e1b321a2aa6e2da88dd97439ddaaf2d2e172c7598b78b9bcde59c98b951c333a305a9e1fdf3c9c1f8e1d6160e44c13abbfc6d131f2785d35ae6eeecf18aaaccb7918853ae1ec79c107ace18f66f37c58a", 0xf9}, {&(0x7f00000012c0)="058acb8a73c8611a5afc06a45f2f70a97c40e80ca8de8f50b20fc46c7853d9e055c601c34d922024775da23ae2fa6c628811298f59b0ef9baf367f0b61b1f77416fa968330adcb778f82e90a3aadb474b1c7bd71e43f899ad99aa139a8b828a96aaf09b883dc51d013670af41d4e5dee4b5798ff0e525d89ee5787c4fc6d21f9c80b3735708ae072bbe6d537d00d00906a4c219c52188c127f8e5630632614db125f0ceb61dd0cfc6f2cf4f13472aa6ba9679d941aa204ddca", 0xb9}], 0x4, &(0x7f0000001700)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x28, 0x1, 0x1, [r1, r0, 0xffffffffffffffff, r1, r0, r0]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r0, r1, r1, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @rights={{0x2c, 0x1, 0x1, [r1, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0x108, 0x20000000}}, {{&(0x7f0000001840)=@file={0x1, '.\x00'}, 0x6e, &(0x7f0000001dc0)=[{&(0x7f00000018c0)="54e0677192c7e2e21527e4ce052136d4c7929f7cb8516e92957c25797cfc4c7394799478b6645fb502c22d44de818d7340460bddf23f42a7a3a308c779e7b02ceca5f2905a002de1f3d6d5d458dda72c40c8b251e8cdab0e49228837191b6f3897e94eef9fdb41f6be0f9bd0b3b92aafad9d651503636bc8a50191863e62712ffda65ef973dfe8249f159b74", 0x8c}, {&(0x7f0000001980)="ab37dd50f22fdc1f1de7769c1e6b80ef3b3075f465d49b859287a671979e43947e749500e3b802471e645a8bc348ff3e6e15c24d0545194cfadd03e78baa90b08c8be1454568b55dfef0be6409f60624139f85ba35e4a5882248cf8b60fb77a599fb0ed705c0b56ee82ac740f6b25805fe16514cecc853d6908a3d9fc6812e54a809", 0x82}, {&(0x7f0000001a40)="796c5a828d3d0a7c6e506d27a493aaf87fd10dcbe072b11f98b13c50e26625d3e33a4e2edb9304c3d051369d3006ae28ddc8d2763b825b97074d6670097ca6a60d5e9af3576a7f5f1857a3ccf42e3af5a5594752384ecbb78ba6aa0d91ddd92e9dc936a4c116f799d705386f707d9e8116a23a8dbdb2269ae3f5f938", 0x7c}, {&(0x7f0000001ac0)="12b80de5d42d771d33e5d1de7020c7c44b15d8c25fa017f7046e13e8fa0de0ea84588381cd7c02f4db808b018225fe61f9bd20bed2403f7379daec897532ca19abce48672a", 0x45}, {&(0x7f0000001b40)="f87683214916c131f92ccc53355c900b41aef7855647cee77ecb03a27ef74cdd7ab3c3d7ecce8681653a7b98748877195c", 0x31}, {&(0x7f0000001b80)="6712273e539ec51dcb8b716a11f50add6d8d652157c1f76fda89f2189b0ca24f4e9772efd0a68917cfeaf514ef5ba0bcd3875e97a21e79a577b1a70bac8b", 0x3e}, {&(0x7f0000001bc0)="fe1a68ee74b0496c678ed113f93ddabb5171ee386def41b01b3b3885814f2b6b5e93abf24714ecdcce5ec848b4d81a3f8625568f92fc7f3866ee5ad61a647879b57b5a90c1584add30c57a9f819321e6dd77499f12e5eed8aa024c76108cfd1f38d319ad18c1e70b82284e1020dd4c7fe35cd08960997a40dc18d2a794aa3aaf208b13655d29e863d4d2c6b1dc4c1c871c91c38d8ab76c07409b56eb8bf92f58", 0xa0}, {&(0x7f0000001c80)="61d54ce93babf9ae76c29e33b6cb3c33bb195196292469e47bbd47414b82cf693967829afdce133b615bd3ab53295f2d846debc0face72fc14a2a597684fd3aa8a0d1ef65f99eefc0fa231b5efd452a8d4752eac5f9e765510660039b7e25f6357588c61cf3ff29dbe04914183f14b0631424a40d4a9075552414ee6e34d65ed67a4c872ceee25b7a7d5ee76d0fe098c2bc355e0cc4e807d60f9f129fda5acf939cae12a5bcc6bb12b275002a97f64a4385993", 0xb3}, {&(0x7f0000001d40)="8c5c81ede8042b62841d56feadd946422a6264ceb459f24e73c9be075f14205a4ee0dab7caeadd5cbd8b6d53963e3b56d3b1aaaccd1aaa2cbe0c290897b6a516fa6ca9a6d584a14061a37b9a6f8b9a7f5dce3cbd69695020ebb2c93997ab8953", 0x60}], 0x9, &(0x7f0000009b80)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, r0]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xee01}}}], 0xb8, 0x40000}}, {{&(0x7f0000009c40)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000009d00)=[{&(0x7f0000009cc0)="4269b81cae160a7e3eb03b85597c7434e826ae59ea154891e303cddca19de6f21a64d0abcee5c51286d8dba41216a1287b", 0x31}], 0x1, &(0x7f0000009dc0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, 0xee01}}}, @cred={{0x1c}}], 0x60, 0x8000}}, {{&(0x7f0000009e40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f000000a040)=[{&(0x7f0000009ec0)="ff6356629ebae32016b20496450ecf32ba2e0411bdaa84143302c96916b3236b809af141ec4d62f8420cd4204907b9b891a8464d0d0c0a442c6e64df2343e248c46e21cea82cc3a213c6c7774e907bc770bdfdc9e86046b8de5e6984294cf069", 0x60}, {&(0x7f0000009f40)="01537100ce9b55f0f31b927db1071a9648903d7fe673afd212fb478c835953e47d82bf867be90593a5bbd8ab4aa77a83e11fbca4b556d8a9aedca071c65e0dcb4703641ab1fad0daf9da0af1c6edb2749f69172b9d727260b335b02349dd270ac2855bc8c3ad3ab5e8d44ad9ff8d2cd65edb959dad5ecb2e0b2ffef1c399588d7bf76860346f95a5bee12721a5e91f6622fa2cdd7961567c49a5f9820c4772f692235a09cd63a7083ca33f99f1258e38a319", 0xb2}, {&(0x7f000000a000)="887f1f42", 0x4}], 0x3, &(0x7f000000a440)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r1]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd0, 0x40}}, {{&(0x7f000000a540)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f000000a700)=[{&(0x7f000000a5c0)="25c7dc269790a88d2a28cbf1f546b2e66cea9571862877a2b7bd4603a69c7b930692026c143d07872ccd25396c52e8d3f60f7fdaa902a015569278ad443f3ec4aa63db093b22dd3d4a66d3d3fb3ed258df6778a631639f49b3f00bf302df2d221c731bc963dffd44583a3ab3", 0x6c}, {&(0x7f000000a640)="f3bd6f7995442e83338495edd03435eb07e17e63faa9182fa043585424104ff3bcabc286c596acaded3818f268e4bd90871f1a76520349f10af9d885b4920adc061d08fa53ef114a7212acc53d8585546fc40b614dd59a31659bb513d056163c83a3884489f87dff297bb8ad1072db2bfec361b4f74b0147c0ae9c8b0418dd512a667370a3f3531a03db92a072d53862f22dd391995a293b5a0df580f7859150ed850b623d19ea9cfd6f8a5a59c14f6a0b40977e3c4e50c8456f44165c38", 0xbe}], 0x2, &(0x7f000000ab80)=[@rights={{0x28, 0x1, 0x1, [r0, r1, 0xffffffffffffffff, 0xffffffffffffffff, r0, r2]}}, @rights={{0x30, 0x1, 0x1, [r0, r1, r3, r4, r1, r5, r1, r6]}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r12}}}], 0x78, 0x44}}], 0x9, 0x4004800) [ 999.222235] loop3: detected capacity change from 0 to 274 17:22:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000000)) mount_setattr(r1, &(0x7f0000000000)='./file0\x00', 0x1000, &(0x7f0000000040)={0x78, 0xd2197213c865127c, 0x100000, {r3}}, 0x20) r4 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r4, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) [ 999.252661] loop2: detected capacity change from 0 to 274 [ 999.258160] loop4: detected capacity change from 0 to 274 [ 999.275217] FAT-fs (loop4): invalid media value (0x00) [ 999.276157] FAT-fs (loop4): Can't find a valid FAT filesystem [ 999.279391] FAT-fs (loop2): bogus number of reserved sectors [ 999.280530] FAT-fs (loop2): Can't find a valid FAT filesystem [ 999.285173] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 999.285798] FAT-fs (loop3): Filesystem has been set read-only [ 1000.055258] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1000.056945] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1000.061404] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1000.062358] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1000.067928] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1000.068686] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1000.072423] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1000.074405] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1000.079306] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1000.080986] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1000.084713] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1000.086074] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1000.091440] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1000.093030] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1000.096776] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1000.097952] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1001.269558] Bluetooth: hci0: command 0x0406 tx timeout [ 1002.102297] Bluetooth: hci7: command 0x0406 tx timeout [ 1002.102835] Bluetooth: hci6: command 0x0406 tx timeout [ 1002.103311] Bluetooth: hci5: command 0x0406 tx timeout [ 1002.103821] Bluetooth: hci4: command 0x0406 tx timeout [ 1002.104304] Bluetooth: hci3: command 0x0406 tx timeout [ 1002.104803] Bluetooth: hci2: command 0x0406 tx timeout [ 1002.105275] Bluetooth: hci1: command 0x0406 tx timeout [ 1003.317611] Bluetooth: hci0: command 0x0406 tx timeout [ 1004.149700] Bluetooth: hci1: command 0x0406 tx timeout [ 1004.151152] Bluetooth: hci2: command 0x0406 tx timeout [ 1004.152406] Bluetooth: hci3: command 0x0406 tx timeout [ 1004.153416] Bluetooth: hci4: command 0x0406 tx timeout [ 1004.154440] Bluetooth: hci5: command 0x0406 tx timeout [ 1004.155448] Bluetooth: hci6: command 0x0406 tx timeout [ 1004.156459] Bluetooth: hci7: command 0x0406 tx timeout 17:22:28 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000080)=[{0x0}], 0x1) 17:22:28 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e", 0x21, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:22:28 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xf8) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x7f) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x1f) ioctl$sock_SIOCOUTQ(r5, 0x5411, &(0x7f0000000000)) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e22, 0x4, @remote, 0x10001}}, 0x0, 0x0, 0x16, 0x0, "b953594347ea2a39b03bb926b4e4ed0688a945e9ae010aa84f8e9530f35d54fe3bb7301b227e6c6ea3679c348f193430310f1674f4e57ae94716245e5828312ef1c5f497e48bd1b64a3d14e21667f75d"}, 0xd8) readv(r2, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) write$binfmt_misc(r3, &(0x7f0000000200)={'syz1', "7c056a5e30ea7210c9d6cbd1f258b02ad1f7b8c9d0e80e6046b767f1ac1890ec9a6f860a891314d5e1ed4008c2e5b0d6b38fb4b5ed6e477613e5e36bf2e9a04df9079c9e4809eab1f2259ddb729ad1457d6e83cca48d4a244320e0c38d570b14f1e3a38275499bc06215601bfe612bdfb9c1c05d7a5af124e075f9edb125142f9c71064b84593097322953ce8befaff416310c28cc10facd91ac01c13ef0c9eb3da06dc2a6a46bf5c1ed59f4a026aae799b22a4a913f6b459fe5b3669b5119d4fd3ea4495e"}, 0xc9) 17:22:28 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{0x0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:22:28 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) 17:22:28 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440", 0x12}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:22:28 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x5000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r2 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x0) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/255) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:22:28 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001c00), 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/127, 0x7f) setresuid(0x0, r0, 0x0) llistxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) 17:22:28 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x15) 17:22:28 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8) [ 1009.712053] loop3: detected capacity change from 0 to 274 [ 1009.729009] loop4: detected capacity change from 0 to 274 [ 1009.732161] loop2: detected capacity change from 0 to 274 [ 1009.753791] FAT-fs (loop2): bogus number of reserved sectors [ 1009.754803] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1009.756744] FAT-fs (loop4): invalid media value (0x00) [ 1009.757661] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1009.762396] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 1009.763067] FAT-fs (loop3): Filesystem has been set read-only 17:22:38 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:22:38 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004", 0x15}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:22:38 executing program 1: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$instantiate(0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='update ecryp4fs user:{\\,}\x00'], 0x1a, r0) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:22:38 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e2020202020", 0x27, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:22:38 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 17:22:38 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001c00), 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) write$binfmt_script(r2, &(0x7f0000000040)={'#! ', './file0', [{0x20, 'trusted.overlay.redirect\x00'}], 0xa, "d9f5efa61b2577dc70c70c2a385284e15c69a38bfb5653185f4c793bd14884cd33b1c7a2e3abe5537ed6fefd42c140a3718780e3f942085f8151e1e940736cb1ca7e94a4a0009dfeca5ffa9e143449d15c702387a3d4e2178e624b0f998397adbf14248adef0ca10139e7e3212b81f59e79f419da526aa919acb5e5bc672fa1cf873cfa667b6b42b742868c84e"}, 0xb2) setresuid(0x0, r1, 0x0) llistxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) 17:22:38 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) recvmmsg$unix(r1, &(0x7f0000005dc0)=[{{&(0x7f0000000000), 0x6e, &(0x7f00000016c0)=[{&(0x7f00000000c0)=""/246, 0xf6}, {&(0x7f00000001c0)=""/125, 0x7d}, {&(0x7f0000000240)=""/232, 0xe8}, {&(0x7f00000003c0)=""/162, 0xa2}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/254, 0xfe}], 0x6, &(0x7f0000000480)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000001740)=@abs, 0x6e, &(0x7f0000002b40)=[{&(0x7f00000017c0)=""/126, 0x7e}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/218, 0xda}, {&(0x7f0000002940)=""/196, 0xc4}, {&(0x7f0000002a40)=""/186, 0xba}, {&(0x7f0000002b00)=""/25, 0x19}], 0x6, &(0x7f0000002bc0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x100}}, {{&(0x7f0000002cc0), 0x6e, &(0x7f0000002dc0)=[{&(0x7f0000002d40)=""/128, 0x80}], 0x1, &(0x7f0000002e00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}, {{&(0x7f0000002f00), 0x6e, &(0x7f00000032c0)=[{&(0x7f0000002f80)=""/35, 0x23}, {&(0x7f0000002fc0)=""/220, 0xdc}, {&(0x7f00000030c0)=""/247, 0xf7}, {&(0x7f00000031c0)=""/104, 0x68}, {&(0x7f0000003240)=""/52, 0x34}, {&(0x7f0000003280)=""/15, 0xf}], 0x6, &(0x7f0000003340)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f0000003380), 0x6e, &(0x7f0000003740)=[{&(0x7f0000003400)=""/198, 0xc6}, {&(0x7f0000003500)=""/24, 0x18}, {&(0x7f0000003540)=""/245, 0xf5}, {&(0x7f0000003640)=""/71, 0x47}, {&(0x7f00000036c0)=""/91, 0x5b}], 0x5, &(0x7f00000037c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000003840), 0x6e, &(0x7f0000003900)=[{&(0x7f00000038c0)=""/59, 0x3b}], 0x1, &(0x7f0000003940)=[@cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f0000003a40), 0x6e, &(0x7f0000003d40)=[{&(0x7f0000003ac0)=""/104, 0x68}, {&(0x7f0000003b40)=""/169, 0xa9}, {&(0x7f0000003c00)=""/115, 0x73}, {&(0x7f0000003c80)=""/89, 0x59}, {&(0x7f0000003d00)=""/22, 0x16}], 0x5, &(0x7f0000003dc0)}}, {{&(0x7f0000003e00)=@abs, 0x6e, &(0x7f0000004400)=[{&(0x7f0000003e80)=""/253, 0xfd}, {&(0x7f0000003f80)=""/22, 0x16}, {&(0x7f0000003fc0)=""/140, 0x8c}, {&(0x7f0000004080)=""/182, 0xb6}, {&(0x7f0000004140)=""/4, 0x4}, {&(0x7f0000004180)=""/251, 0xfb}, {&(0x7f0000004280)=""/90, 0x5a}, {&(0x7f0000004300)=""/121, 0x79}, {&(0x7f0000004380)=""/93, 0x5d}], 0x9, &(0x7f00000044c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}}, {{0x0, 0x0, &(0x7f0000005800)=[{&(0x7f0000004580)=""/76, 0x4c}, {&(0x7f0000004600)=""/171, 0xab}, {&(0x7f00000046c0)=""/50, 0x32}, {&(0x7f0000004700)=""/130, 0x82}, {&(0x7f00000047c0)=""/26, 0x1a}, {&(0x7f0000004800)=""/4096, 0x1000}], 0x6, &(0x7f0000005880)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f0000005980)=@abs, 0x6e, &(0x7f0000005c80)=[{&(0x7f0000005a00)=""/160, 0xa0}, {&(0x7f0000005ac0)=""/27, 0x1b}, {&(0x7f0000005b00)=""/231, 0xe7}, {&(0x7f0000005c00)=""/127, 0x7f}], 0x4, &(0x7f0000005cc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}], 0xa, 0x0, &(0x7f0000006040)={0x0, 0x3938700}) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) 17:22:38 executing program 0: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ffc000/0x4000)=nil) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) r2 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x80, &(0x7f0000ffe000/0x2000)=nil, 0x4) shmdt(r1) shmat(r2, &(0x7f0000ffc000/0x2000)=nil, 0xf000) shmat(r2, &(0x7f0000ffb000/0x1000)=nil, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) [ 1018.989960] loop3: detected capacity change from 0 to 274 17:22:38 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf253a00000008000300", @ANYRES32=r1, @ANYRESDEC], 0x1c}}, 0x4000) r2 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) [ 1019.026775] loop2: detected capacity change from 0 to 274 17:22:38 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb) [ 1019.032068] loop4: detected capacity change from 0 to 274 [ 1019.043273] FAT-fs (loop2): bogus number of reserved sectors [ 1019.044202] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1019.050330] FAT-fs (loop4): invalid media value (0x00) [ 1019.050884] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1019.056657] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 1019.057235] FAT-fs (loop3): Filesystem has been set read-only [ 1019.062293] FAT-fs (loop3): error, corrupted directory (invalid entries) 17:22:38 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e2020202020", 0x27, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:22:38 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004", 0x15}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:22:38 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x10) 17:22:38 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000000)=0x4) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) 17:22:38 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 17:22:38 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001c00), 0x0, 0x16, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) llistxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) [ 1019.177029] loop3: detected capacity change from 0 to 274 17:22:38 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:22:38 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x200, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) [ 1019.236697] loop4: detected capacity change from 0 to 274 [ 1019.244223] loop2: detected capacity change from 0 to 274 [ 1019.249051] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 1019.250080] FAT-fs (loop3): Filesystem has been set read-only [ 1019.252404] FAT-fs (loop2): bogus number of reserved sectors [ 1019.253000] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1019.255721] FAT-fs (loop4): invalid media value (0x00) [ 1019.256712] FAT-fs (loop4): Can't find a valid FAT filesystem 17:22:38 executing program 6: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x6c, 0xff}, {0x0, 0xb9}, 0xe58, 0x2, 0xff}) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001c00), 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r1, 0x0) llistxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) [ 1019.276132] FAT-fs (loop3): error, corrupted directory (invalid entries) 17:22:38 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fcntl$getown(r0, 0x9) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x8400, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r3) kcmp$KCMP_EPOLL_TFD(r1, 0x0, 0x7, r2, &(0x7f00000001c0)={0xffffffffffffffff, r3, 0x1}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x4b95, @loopback, 0x4000000}, 0x1c) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f0000000180)='.log\x00', 0x0, 0x70) setsockopt$inet6_tcp_int(r5, 0x6, 0x10, &(0x7f00000000c0)=0x5868, 0x4) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x5}}, './file0\x00'}) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) 17:22:38 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:22:38 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x14) [ 1019.365597] loop2: detected capacity change from 0 to 274 [ 1019.377912] FAT-fs (loop2): bogus number of reserved sectors [ 1019.378393] FAT-fs (loop2): Can't find a valid FAT filesystem 17:22:47 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400", 0xc}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:22:47 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x18) 17:22:47 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001c00), 0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) r3 = syz_open_dev$usbmon(&(0x7f0000000780), 0x8b, 0x200) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r5, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000700)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000e40)=[{&(0x7f0000000940)="8242956707b5c7416f9195d0bb2aec21dfb55b8808ffcde523db23a58f8e833002835051e8f6c7af04f05db5e26d20d89bb85857ecd2a2daa919a5caabd4fcc828347e89297af89232102eaf8a397b72ea69b2554c41c3b78bdad747cf93b29477d84635c4e8a7b7c8c6c512", 0x6c}, {&(0x7f00000009c0)="d43ee9a5d3b12a7c70daf1e59af24a9a75c429a66ece3fbaf76e4d20aae25d694e9b5b82b87a7d67dd7c165ce1016d3af71fb97b06a1318aaba7a758b1b1c985e24e68440aa2a80bdc5b47ac02c457476124cd725899057335bb2a80d6ce57126d75b89f6f51c04a5c8bd69c72978210bba6bc1279d5e2658261ab8bf3cda87ba8e38c2d10848630145d3b2290cdd45483cd85e64d30c6e944da296a315b555a12f2adc3598f4c592f3c3d12fe5cd343680288eccd29f27bcf98890e63efa81c3ebc9d27e8834d6a1a9ecbb69d484919503e7b98405cb8dab18cbb77a3eb645afb418518", 0xe4}, {&(0x7f0000000ac0)="cea01c8867707d121397aca2026a3796b77957b29a33cd7621d031ab8a75258dfbfa26a910b12bd30a23c433f7abe70f1ec7a0e5a1478987822d81635061f54270ed30bfb443c67feb6d9b615f39f9098b7610a35c93c3c94dfad51a5eaa07fa7ff4b462cfc4c63fc730dec74f96a26d233af04d63d70a948b88f87eb5cdcf47b37e6b13f7ed38fb0771890a71e64b0d0918dd112a16eb32666118f4bae4352bdb2ae36f853a2d8ccc71", 0xaa}, {&(0x7f0000000b80)="9003c72d96819bf5dd2c6b22f20a547a5c3a812c48183faf0521b42eef285bc2f8dff5c833d3a0f461b8b2eb0b1ee0880bc057ab6aefcc509c67814ae310d7692979eca0956efa1130572545c5fdfdc90f6c342d3f8ca456d88895d0dd3dd7ed20e473ec3e31b258239a6a34f34c082b0b6a047cdb557b5829c250a6235382fc726cec3c00ea835ef31e4caca6db1d8be37d89e9c8e046b04c1b8550ab61ffec7adcedd5a2fd5f6f3e7c41f1d6d64eb7", 0xb0}, {&(0x7f0000000c40)="c01651e7eb2c27765ec4d31c502292aeb248ba7a74a381aa130519849a00c01fddfe2cd5e75522a40a50b29eed840d893e22cb8bbdd94ba149a2cc0cc3ec63b2ea862e3af22b832629851a93fa5b16c0d683d13b213703b36e1bda762952390fa388de2e9eb93474cc46c07dad1362adb6e77299157d5d3422a3a7c7ca14b82952530a6f128ce4c86d91c8315a5eee25d90d157bc01e44e32a2e6f3de7eeb0a900fed1908bde05aca8134be34afad656790769f6d5b12de2a8c38a01", 0xbc}, {&(0x7f0000000d00)="3da3287b44b0b4f6ded2367c39d555fee5d4146464de47d1df8e62c17a6b80c0d707dbcba121a73c389ceb21745de89c573b768358ea9bb1758191307a2e9925aa8df22a65cfec5190d99e78d9b9ee42323618c9eb1bb8a24846906f5d9175af8da9d8f2cb2ba0778cced739", 0x6c}, {&(0x7f0000000d80)="10dfe67ee3ce1d70dda5d18bb303ffe2c67d766ee180cf8459360ee5032c45bdf5ef28fb2a8aceb6f5d120ffa0783e025696b48ae5a000e776cae34ce2290cccbf5c4a93d54106a84ebffcc4c5764b7d5a152c22fa6a864e7864a5abae19ae1521c2412f653485fdbe4a2a858582158f89c94fbc7d9bb5eeaa11555c4d20ceebb5dd", 0x82}], 0x7, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="20000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYRES32=r2, @ANYBLOB="037a7645"], 0xb0, 0x4000}, 0x20000000) openat(r0, &(0x7f0000000680)='./file0\x00', 0x101001, 0x100) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$sock_SIOCOUTQ(r7, 0x5411, &(0x7f0000000000)) inotify_add_watch(r7, &(0x7f0000000640)='./file0\x00', 0x80000100) mknodat$loop(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x10, 0x0) setresuid(0x0, r1, 0x0) r8 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r8, 0x4008941a, &(0x7f00000000c0)=0x2) llistxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x679, 0x6, &(0x7f0000000fc0)=[{&(0x7f00000001c0)="fb42d3d3ced313b094fa7be1a34e811c21a4e3019713a959c30b6e9d6425d55156776ef1623248b0d267f191ab3d1a5bb93d31fbcf7afce3efbef42688788ca9bfc4e72b32e6204d0be8bee8b9abc7494e6e7611f4fb5edc39f4a0e5dc865ee891c3a6f7c45f3d75ac82b007258dbd529c0b92c5e7a7b22faea999278d690d9d89237871fa295024e7be9d183f86d08884104eef91fa77d5800922e2063420be57b4529580545fbdcbb906327090a93f11d8964995b5d332819d58", 0xbb, 0x7ff}, {&(0x7f0000000280)="52f392fa38c6b7d639dafa6c9faec43871c852de6fc788e2aa0c0e5fc8d280102cd57e069f73ea836fb2e9a8ee36df19ad7ab8aab117eda650648fd8a92c5bba542577071b099e056ca03c8190846cec475760eda683a196071a2af2e32dcf1c531bf505c2669769f4b83e359ed0b33f39", 0x71, 0x1000}, {&(0x7f00000003c0)="919932b73a74bc101e6d6a70a2ed6990d80efaa1ae279e9e98eacc9f8c5fe956a992a8480d8b453eccba4d5c7c44b9be9ded4bdcd3407b5b0cfc89d10d8ff7f09ed1f11b3da47e07019acfef463f4d37fba768e77f3fe3f5464897b66505cff3b145b1edd89c21be67e9189b3c24cd6ca4a3ca1f9b526b6abb89f52bafa0f3e655d20fc127be7a2b4749fa5d67acc5209c", 0x91, 0x101}, {&(0x7f0000000300)="3f8db57575194c13de67eb7400fac8e2310801694dd467a019c8ec77239de5dc9bddab471b337337623ce80e43f4a12eb77702f8da3d6116d67fdd16da019cf4050cd590c2798c13087ac2bf75ef89311c34fef10a1ab6aaa6f4f457f572ea4a6ff86a96521d8bef83", 0x69, 0x7}, {&(0x7f0000000480)="b957d4fb0e43092fa80693f0f331bbb3c6e7d34cd351ce757dfbb24f2de547812fad6a73ca368c4aa49eee988fc6bcfae06a8e10f465b9cd3672c40bdf647b62b9cc124b570e22160d1f7aeaf058c315ceb7d9e0bb6c5013b12604435130559e1eb0963c00b427fecd987f9ba0dd", 0x6e, 0x5}, {&(0x7f0000000500)="6771165fb1a8e0680ca633d52db139f2dda1860e652d5bf5f39384f416d3bd266a7a720d5fca551b27dca5f5fb46a2d1242c567c6e", 0x35}], 0xe9029, &(0x7f00000007c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c73686f7274018000003d77696e39352c757466383d302c726f6469722c696f63686172190ffeeb69736f383835392d31342c666f776e65723cfd39d6481aa0113bb191babea56a391a352ac5cc822a0d1b45041566c72ae439d3d12c117a260ee9b95603a613ecd28ce274e8ad8b53befdc9773ad561e9e42877b77341125dddefbec9d6880d51dd454204022d98824536b700aa0c61218133bb0568828d78fc693b6b603ed63a6271325829b7d1c593ad41b22e50aafe00fa0e657d65b893", @ANYRESDEC=r1, @ANYBLOB="2c736d61636b66736465ae66c8b1ac9440be1ee7aca53b9ec383ce7d9b0bfcd0c1206623545232a4f4dc58c8e73c805adf712355c6bdbabcd55b9ff5b086de884ad85d56f805a89ec293f45af65d88ae7362bd1213eaf9071dd19773649febd4577372416d796e509f4b5dab7d0f4887d21d3de855a4fbb17e5f90e7db5c1a78b100"/141]) 17:22:47 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004", 0x15}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:22:47 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e2020202020", 0x27, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:22:47 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fork() kcmp(r2, 0xffffffffffffffff, 0x1, r0, r1) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) 17:22:47 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffb000/0x3000)=nil) r2 = shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r3 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x2000) shmat(r3, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r3, &(0x7f0000ffb000/0x3000)=nil, 0x1000) r4 = shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x4000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000fff000/0x1000)=nil, 0x2800) r5 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r5, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$SHM_LOCK(r5, 0xb) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) shmdt(r4) r6 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r6, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r6, &(0x7f0000ffa000/0x4000)=nil, 0x2000) shmdt(r4) shmdt(r2) 17:22:47 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) [ 1028.109381] loop2: detected capacity change from 0 to 274 [ 1028.116046] loop3: detected capacity change from 0 to 274 [ 1028.124231] loop4: detected capacity change from 0 to 274 [ 1028.130708] FAT-fs (loop2): bogus number of reserved sectors [ 1028.131638] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1028.157852] FAT-fs (loop4): invalid media value (0x00) [ 1028.158327] FAT-fs (loop4): Can't find a valid FAT filesystem 17:22:47 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x7000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:22:47 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x19) 17:22:47 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001c00), 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r1, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r2, 0x0) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x20000, &(0x7f0000000140)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@rq={'rq', 0x3d, 0x7}}], [{@appraise_type}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x35, 0x0, 0x39, 0x35, 0x37, 0x36, 0x65], 0x2d, [0x0, 0x66, 0x37, 0x38], 0x2d, [0x35, 0x64, 0x63, 0x30], 0x2d, [0x30, 0x62, 0x65, 0x64], 0x2d, [0x44, 0x38, 0x30, 0x32, 0x33, 0x64, 0x1333dd4b9b732aac, 0x66]}}}, {@permit_directio}, {@euid_lt={'euid<', r1}}, {@appraise_type}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@seclabel}, {@euid_eq={'euid', 0x3d, r2}}, {@fowner_lt={'fowner<', r0}}, {@obj_user={'obj_user', 0x3d, '{'}}]}}) llistxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) 17:22:47 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000000)) setsockopt$inet6_tcp_int(r3, 0x6, 0xc, &(0x7f00000007c0)=0x8, 0x4) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000), 0x6e, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/199, 0xc7}, {&(0x7f00000001c0)=""/177, 0xb1}, {&(0x7f0000000280)=""/152, 0x98}, {&(0x7f00000003c0)=""/248, 0xf8}, {&(0x7f00000005c0)=""/255, 0xff}], 0x5, &(0x7f0000000740)}, 0x40002002) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000740), 0x4) [ 1028.230360] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 1028.231659] FAT-fs (loop3): Filesystem has been set read-only 17:22:47 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) 17:22:47 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f8", 0x16}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 1028.257745] FAT-fs (loop3): error, corrupted directory (invalid entries) 17:22:47 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400", 0xc}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 1028.342893] loop2: detected capacity change from 0 to 274 [ 1028.349683] FAT-fs (loop2): bogus number of reserved sectors [ 1028.350158] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1028.396048] loop4: detected capacity change from 0 to 274 [ 1028.403687] FAT-fs (loop4): bogus number of FAT sectors [ 1028.404602] FAT-fs (loop4): Can't find a valid FAT filesystem 17:22:59 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f8", 0x16}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:22:59 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffc000/0x2000)=nil) shmat(r1, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:22:59 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) 17:22:59 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e2020202020202020", 0x2a, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:22:59 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001c00), 0x0, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) llistxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) 17:22:59 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x66) 17:22:59 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400", 0xc}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:22:59 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000000040)=""/60, 0x3c, 0x5) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x80000000) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) [ 1040.056160] loop2: detected capacity change from 0 to 274 [ 1040.068337] loop3: detected capacity change from 0 to 274 [ 1040.074980] FAT-fs (loop2): bogus number of reserved sectors [ 1040.076221] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1040.093053] loop4: detected capacity change from 0 to 274 [ 1040.110306] FAT-fs (loop4): bogus number of FAT sectors [ 1040.111177] FAT-fs (loop4): Can't find a valid FAT filesystem 17:22:59 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001c00), 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x3100) setresuid(0x0, r0, 0x0) llistxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r1, 0x0) quotactl(0x4000000000, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000040)="a6b0466feb12de8b5fc10c7f201587a62e79149567d7cc9bd343bd69f52b5213833caa5743ec7c025b5ea1242d89fcfc1964ca3c2708c3a8117a7c03b04a0d43f6bac366a96604b4991d83fbe5f16a5057ddc690b0c20232c35e32d707448d7ac21766594d0251cc24dd82d8ff8e4fba5ebd2dedd4b877c74183bcc5eff5b09b93f729e079f8d186a925c53c690b1ca8c5bb92") 17:22:59 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) 17:22:59 executing program 0: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) 17:22:59 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440", 0x12}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 1040.198672] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 1040.199793] FAT-fs (loop3): Filesystem has been set read-only 17:22:59 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1c) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4000, &(0x7f0000000000)=0x1, 0x4, 0x0) r2 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r2, 0x0) shmdt(r1) [ 1040.212857] FAT-fs (loop3): error, corrupted directory (invalid entries) 17:22:59 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f8", 0x16}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:22:59 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x67) [ 1040.291528] loop2: detected capacity change from 0 to 274 [ 1040.312762] FAT-fs (loop2): invalid media value (0x00) [ 1040.313619] FAT-fs (loop2): Can't find a valid FAT filesystem 17:22:59 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e2020202020202020", 0x2a, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 1040.370051] loop4: detected capacity change from 0 to 274 [ 1040.391625] FAT-fs (loop4): bogus number of FAT sectors [ 1040.392521] FAT-fs (loop4): Can't find a valid FAT filesystem 17:22:59 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e22, @private=0xa010102}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x110, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x4, 0x1ff, 0x7}) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000080)={'ip_vti0\x00', {0x2, 0x0, @multicast2}}) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) [ 1040.461739] loop3: detected capacity change from 0 to 274 [ 1040.520990] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 1040.522433] FAT-fs (loop3): Filesystem has been set read-only 17:23:08 executing program 0: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) 17:23:08 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e2020202020202020", 0x2a, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:23:08 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, 0x0) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:23:08 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x104400, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001c00), 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000140)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r1, 0x0) llistxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) 17:23:08 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x2000) 17:23:08 executing program 1: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r0 = shmget(0x1, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:23:08 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440", 0x12}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:23:08 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xed, 0x9b, 0x5, 0x16, 0x0, 0x7, 0x8428, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000000), 0x8}, 0x11, 0x3ff, 0xc5, 0x2, 0x3ff, 0xffff, 0x4, 0x0, 0x40400000, 0x0, 0x100}, 0xffffffffffffffff, 0xc, r1, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) [ 1049.838935] loop2: detected capacity change from 0 to 274 [ 1049.853159] FAT-fs (loop2): invalid media value (0x00) [ 1049.853793] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1049.864547] loop4: detected capacity change from 0 to 274 [ 1049.865637] loop3: detected capacity change from 0 to 274 17:23:09 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) 17:23:09 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001c00), 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) setresuid(0x0, r0, 0x0) llistxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) 17:23:09 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440", 0x12}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:23:09 executing program 0: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) 17:23:09 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x1000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) [ 1049.995628] FAT-fs (loop3): error, corrupted directory (invalid entries) 17:23:09 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) r1 = shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x0) shmdt(r1) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) [ 1049.996811] FAT-fs (loop3): Filesystem has been set read-only 17:23:09 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, 0x0) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 1050.017598] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 1050.022114] loop2: detected capacity change from 0 to 274 [ 1050.038006] FAT-fs (loop2): invalid media value (0x00) [ 1050.038723] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1050.120174] loop4: detected capacity change from 0 to 274 17:23:20 executing program 5: arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000)) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000040)) 17:23:20 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, 0x0) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:23:20 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) 17:23:20 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004", 0x15}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:23:20 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001c00), 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) llistxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) 17:23:20 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e202020202020202020", 0x2b, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:23:20 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x400, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x4000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x17) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) 17:23:20 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x6000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) [ 1061.322345] loop2: detected capacity change from 0 to 274 [ 1061.325955] loop3: detected capacity change from 0 to 274 [ 1061.337151] loop4: detected capacity change from 0 to 274 [ 1061.341536] FAT-fs (loop2): invalid media value (0x00) [ 1061.342348] FAT-fs (loop2): Can't find a valid FAT filesystem 17:23:20 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x9, 0x101c02) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r0) shmget$private(0x0, 0x5000, 0x54000000, &(0x7f0000ffb000/0x5000)=nil) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:23:20 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001c00), 0x0, 0x0, 0x0) unlink(&(0x7f0000000000)='./file0\x00') newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r0, 0x0) llistxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) 17:23:20 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) 17:23:20 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) setsockopt$inet6_tcp_int(r1, 0x6, 0x3, &(0x7f0000000000)=0x3ff, 0x4) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/241, 0xf1}], 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000040)={0x3, 'batadv_slave_1\x00', {0xffff}, 0x7}) 17:23:20 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 1061.471739] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 1061.473144] FAT-fs (loop3): Filesystem has been set read-only [ 1061.483466] FAT-fs (loop3): error, corrupted directory (invalid entries) 17:23:20 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004", 0x15}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:23:20 executing program 7: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:23:20 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e202020202020202020", 0x2b, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:23:20 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) [ 1061.656610] loop4: detected capacity change from 0 to 274 [ 1061.679654] loop2: detected capacity change from 0 to 274 17:23:20 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) [ 1061.700343] FAT-fs (loop2): invalid media value (0x00) [ 1061.701215] FAT-fs (loop2): Can't find a valid FAT filesystem 17:23:20 executing program 1: mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x200000, &(0x7f00000000c0)={'trans=unix,', {[{@noextend}, {@fscache}, {@dfltgid={'dfltgid', 0x3d, 0xee01}}, {@msize={'msize', 0x3d, 0x8}}, {@loose}, {@nodevmap}, {@version_u}], [{@subj_type={'subj_type', 0x3d, '*]'}}, {@obj_type={'obj_type', 0x3d, '#.&$($'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@hash}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x33, 0x63, 0x32, 0x33, 0x35, 0x62, 0x30, 0x34], 0x2d, [0x37, 0x30, 0x63, 0x63], 0x2d, [0x62, 0x33, 0x0, 0x31], 0x2d, [0x38, 0x61, 0x30, 0x34], 0x2d, [0x30, 0x35, 0x52, 0x34, 0x38, 0x63, 0x64, 0x39]}}}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@smackfsroot}, {@fowner_eq={'fowner', 0x3d, 0xee01}}]}}) semtimedop(0x0, &(0x7f0000000100)=[{}, {}], 0x2, &(0x7f0000000180)) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) sigaltstack(&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)) [ 1061.754616] loop3: detected capacity change from 0 to 274 [ 1061.886540] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 1061.888086] FAT-fs (loop3): Filesystem has been set read-only [ 1061.892574] FAT-fs (loop3): error, corrupted directory (invalid entries) 17:23:30 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e202020202020202020", 0x2b, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:23:30 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x7, &(0x7f0000fff000/0x1000)=nil, 0x5) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r1 = shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x0) shmdt(r1) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:23:30 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004", 0x15}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:23:30 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) 17:23:30 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffc000/0x2000)=nil) shmat(r1, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:23:30 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4, 0x1, 0x1f, 0x1, 0x0, 0x6, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x52d, 0x1}, 0x20, 0x4, 0x4, 0x4, 0x7fffffff, 0x800, 0x22, 0x0, 0x8, 0x0, 0x8}, 0x0, 0xf, r0, 0x9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) setsockopt$inet6_tcp_int(r2, 0x6, 0x8, &(0x7f0000000040)=0x53ae, 0x4) 17:23:30 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:23:30 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) [ 1071.594116] loop4: detected capacity change from 0 to 274 [ 1071.619443] loop3: detected capacity change from 0 to 274 [ 1071.637031] loop2: detected capacity change from 0 to 274 [ 1071.661838] FAT-fs (loop2): invalid media value (0x00) [ 1071.662924] FAT-fs (loop2): Can't find a valid FAT filesystem 17:23:30 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:23:30 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x7000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) [ 1071.740281] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 1071.741328] FAT-fs (loop3): Filesystem has been set read-only [ 1071.754572] FAT-fs (loop3): error, corrupted directory (invalid entries) 17:23:30 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x6}, 0x0, 0x20000, 0xffffffffffffffff, 0x1) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0x40505331, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000200)={0x0, 0x2, 'client1\x00', 0x6, "bfd7442df4440d83", "addcd6b141dbf16bca23cd42f81e86aabd4d56b17d1033538313b4ca8967244c", 0xffffffff, 0x6}) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x2, @rand_addr=' \x01\x00', 0x8}, 0x1c) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) 17:23:30 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x0) 17:23:30 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2002, 0x17) 17:23:30 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f8", 0x16}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:23:30 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 1071.912858] loop2: detected capacity change from 0 to 274 [ 1071.927040] FAT-fs (loop2): bogus number of FAT sectors [ 1071.928006] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1071.971319] loop3: detected capacity change from 0 to 10 [ 1071.994714] FAT-fs (loop3): invalid media value (0x00) [ 1072.001193] FAT-fs (loop3): Can't find a valid FAT filesystem 17:23:41 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:23:41 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f8", 0x16}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:23:41 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:23:41 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2002, 0x17) 17:23:41 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x0) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:23:41 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003180)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/4, 0x4}, {&(0x7f0000000100)=""/109, 0x6d}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f00000001c0)=""/122, 0x7a}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f0000000240)=""/212, 0xd4}, {&(0x7f00000003c0)=""/19, 0x13}, {&(0x7f0000000400)}], 0x8, &(0x7f00000015c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001640), 0x6e, &(0x7f0000002d80)=[{&(0x7f00000016c0)=""/226, 0xe2}, {&(0x7f00000017c0)=""/14, 0xe}, {&(0x7f0000001800)=""/210, 0xd2}, {&(0x7f0000001900)=""/83, 0x53}, {&(0x7f0000001980)=""/205, 0xcd}, {&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f0000002a80)=""/171, 0xab}, {&(0x7f0000002b40)=""/101, 0x65}, {&(0x7f0000002bc0)=""/228, 0xe4}, {&(0x7f0000002cc0)=""/182, 0xb6}], 0xa, &(0x7f0000002e40)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}}, {{&(0x7f0000002f00), 0x6e, &(0x7f0000003140)=[{&(0x7f0000002f80)=""/77, 0x4d}, {&(0x7f0000003000)=""/54, 0x36}, {&(0x7f0000003040)=""/217, 0xd9}], 0x3}}], 0x3, 0x40000000, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x2) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1) 17:23:41 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x0) 17:23:41 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) statx(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x400, 0x100, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setregid(r6, r4) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r7, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000180), 0x6e, &(0x7f0000001400)=[{&(0x7f0000000200)=""/205, 0xcd}, {&(0x7f0000000300)=""/202, 0xca}, {&(0x7f0000000400)=""/4096, 0x1000}], 0x3, &(0x7f0000001440)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000a36b000000000001000000020800000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x100}, 0x1) r9 = gettid() shmctl$IPC_SET(r1, 0x1, &(0x7f0000001580)={{0x0, r2, r4, r7, r8, 0x40, 0x2}, 0xff, 0x2, 0xfffffffffffffff7, 0xfffffffffffffffe, 0xffffffffffffffff, r9, 0x101}) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) [ 1082.693113] loop4: detected capacity change from 0 to 274 [ 1082.699157] loop3: detected capacity change from 0 to 10 [ 1082.711383] loop2: detected capacity change from 0 to 274 [ 1082.722131] FAT-fs (loop3): invalid media value (0x00) [ 1082.723064] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1082.732968] FAT-fs (loop2): bogus number of FAT sectors [ 1082.734130] FAT-fs (loop2): Can't find a valid FAT filesystem 17:23:41 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x0) 17:23:41 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) pkey_mprotect(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x1000000, 0xffffffffffffffff) 17:23:41 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2002, 0x17) 17:23:41 executing program 5: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x0) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:23:51 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, 0x0, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:23:51 executing program 6: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2002, 0x17) 17:23:51 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:23:51 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x2000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:23:51 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:23:51 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x7000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:23:51 executing program 5: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ff4000/0xc000)=nil, 0x4000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:23:51 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f8", 0x16}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 1091.997421] loop3: detected capacity change from 0 to 10 [ 1092.006064] FAT-fs (loop3): invalid media value (0x00) [ 1092.006593] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1092.027140] loop4: detected capacity change from 0 to 274 [ 1092.030469] loop2: detected capacity change from 0 to 274 17:23:51 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x1800) syz_io_uring_setup(0x5efe, &(0x7f0000000000)={0x0, 0xafd5, 0x8, 0x3, 0x18e}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 1092.060536] FAT-fs (loop2): bogus number of FAT sectors [ 1092.061446] FAT-fs (loop2): Can't find a valid FAT filesystem 17:23:51 executing program 5: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ff4000/0xc000)=nil, 0x4000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:23:51 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 1092.119882] loop3: detected capacity change from 0 to 274 17:23:51 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffc000/0x1000)=nil) shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 17:23:51 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) (fail_nth: 1) 17:23:51 executing program 6: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2002, 0x17) 17:23:51 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, 0x0) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:23:51 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:23:51 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, 0x0, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:23:51 executing program 5: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ff4000/0xc000)=nil, 0x4000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:23:51 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x1000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) [ 1092.253229] loop3: detected capacity change from 0 to 274 17:23:51 executing program 6: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2002, 0x17) [ 1092.300591] FAULT_INJECTION: forcing a failure. [ 1092.300591] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1092.301743] CPU: 1 UID: 0 PID: 8629 Comm: syz-executor.0 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 1092.301759] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1092.301767] Call Trace: [ 1092.301771] [ 1092.301775] dump_stack_lvl+0xfa/0x120 [ 1092.301799] should_fail_ex+0x4d7/0x5e0 [ 1092.301820] should_fail_alloc_page+0xe0/0x110 [ 1092.301839] prepare_alloc_pages+0x1af/0x500 [ 1092.301863] __alloc_frozen_pages_noprof+0x17f/0x1f10 [ 1092.301891] ? __lock_acquire+0xc65/0x1b70 [ 1092.301908] ? __lock_acquire+0x694/0x1b70 [ 1092.301920] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1092.301938] ? look_up_lock_class+0x56/0x150 [ 1092.301960] ? __lock_acquire+0x694/0x1b70 [ 1092.301973] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1092.301994] ? policy_nodemask+0xeb/0x4e0 [ 1092.302019] alloc_pages_mpol+0xed/0x340 [ 1092.302034] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1092.302053] alloc_pages_noprof+0xa1/0x380 [ 1092.302068] __pmd_alloc+0x3b/0x980 [ 1092.302086] __handle_mm_fault+0xcae/0x30f0 [ 1092.302101] ? mtree_load+0xe8/0xa10 [ 1092.302118] ? find_held_lock+0x2b/0x80 [ 1092.302135] ? __pfx___handle_mm_fault+0x10/0x10 [ 1092.302150] ? lock_release+0xc8/0x290 [ 1092.302161] ? lock_is_held_type+0x9e/0x120 [ 1092.302195] handle_mm_fault+0x2c3/0x900 [ 1092.302224] __get_user_pages+0x58a/0x2f10 [ 1092.302261] ? find_held_lock+0x2b/0x80 [ 1092.302286] ? __pfx___get_user_pages+0x10/0x10 [ 1092.302315] ? lock_is_held_type+0x9e/0x120 [ 1092.302344] faultin_page_range+0x2f3/0x9d0 [ 1092.302378] madvise_do_behavior+0x8d8/0xe20 [ 1092.302401] ? __pfx_madvise_do_behavior+0x10/0x10 [ 1092.302422] ? down_read+0x1b1/0x470 [ 1092.302443] ? find_held_lock+0x2b/0x80 [ 1092.302477] do_madvise+0x16b/0x240 [ 1092.302493] ? __pfx_do_madvise+0x10/0x10 [ 1092.302516] ? lock_acquire+0xdf/0x2e0 [ 1092.302532] ? __might_fault+0xe0/0x190 [ 1092.302549] ? find_held_lock+0x2b/0x80 [ 1092.302572] ? __might_fault+0x138/0x190 [ 1092.302584] ? lock_release+0xc8/0x290 [ 1092.302596] ? __might_fault+0xe0/0x190 [ 1092.302608] ? find_held_lock+0x2b/0x80 [ 1092.302623] ? syscall_trace_enter+0x1cf/0x260 [ 1092.302643] ? lock_release+0xc8/0x290 [ 1092.302653] ? perf_trace_sys_enter+0x2d/0x170 [ 1092.302673] __x64_sys_madvise+0xa9/0x110 [ 1092.302685] do_syscall_64+0xbf/0x360 [ 1092.302698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.302710] RIP: 0033:0x7f8a8fcbeb19 [ 1092.302720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1092.302731] RSP: 002b:00007f8a8d234188 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1092.302746] RAX: ffffffffffffffda RBX: 00007f8a8fdd1f60 RCX: 00007f8a8fcbeb19 [ 1092.302757] RDX: 0000000000000017 RSI: 0000000000002003 RDI: 0000000020ffe000 [ 1092.302768] RBP: 00007f8a8d2341d0 R08: 0000000000000000 R09: 0000000000000000 [ 1092.302778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1092.302788] R13: 00007ffec0c975ff R14: 00007f8a8d234300 R15: 0000000000022000 [ 1092.302804] [ 1092.323816] loop2: detected capacity change from 0 to 274 [ 1092.420001] loop4: detected capacity change from 0 to 274 17:24:00 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:24:00 executing program 5: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ff4000/0xc000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:24:00 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:24:00 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, 0x0) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:24:00 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) (fail_nth: 2) 17:24:00 executing program 6: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2002, 0x17) 17:24:00 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf) 17:24:00 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, 0x0, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 1101.394167] loop4: detected capacity change from 0 to 274 [ 1101.426034] loop2: detected capacity change from 0 to 274 [ 1101.434791] loop3: detected capacity change from 0 to 274 17:24:00 executing program 1: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x800) shmat(0xffffffffffffffff, &(0x7f0000ffe000/0x2000)=nil, 0x7000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) r1 = shmget(0x2, 0x4000, 0x4, &(0x7f0000ffa000/0x4000)=nil) shmat(r1, &(0x7f0000ff9000/0x3000)=nil, 0x4000) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r2 = shmget(0x1, 0x3000, 0x200, &(0x7f0000ffa000/0x3000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x6000) [ 1101.474333] FAULT_INJECTION: forcing a failure. [ 1101.474333] name failslab, interval 1, probability 0, space 0, times 0 [ 1101.475244] CPU: 0 UID: 0 PID: 8661 Comm: syz-executor.0 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 1101.475260] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1101.475267] Call Trace: [ 1101.475271] [ 1101.475276] dump_stack_lvl+0xfa/0x120 [ 1101.475302] should_fail_ex+0x4d7/0x5e0 [ 1101.475326] ? __pmd_alloc+0x98/0x980 [ 1101.475342] should_failslab+0xc2/0x120 [ 1101.475355] kmem_cache_alloc_noprof+0x5f/0x470 [ 1101.475376] __pmd_alloc+0x98/0x980 [ 1101.475393] __handle_mm_fault+0xcae/0x30f0 [ 1101.475409] ? mtree_load+0xe8/0xa10 [ 1101.475426] ? find_held_lock+0x2b/0x80 [ 1101.475444] ? __pfx___handle_mm_fault+0x10/0x10 [ 1101.475459] ? lock_release+0xc8/0x290 [ 1101.475474] ? lock_is_held_type+0x9e/0x120 [ 1101.475504] handle_mm_fault+0x2c3/0x900 [ 1101.475522] __get_user_pages+0x58a/0x2f10 [ 1101.475548] ? find_held_lock+0x2b/0x80 [ 1101.475564] ? __pfx___get_user_pages+0x10/0x10 [ 1101.475583] ? lock_is_held_type+0x9e/0x120 [ 1101.475601] faultin_page_range+0x2f3/0x9d0 [ 1101.475623] madvise_do_behavior+0x8d8/0xe20 [ 1101.475638] ? __pfx_madvise_do_behavior+0x10/0x10 [ 1101.475652] ? down_read+0x1b1/0x470 [ 1101.475667] ? find_held_lock+0x2b/0x80 [ 1101.475686] do_madvise+0x16b/0x240 [ 1101.475697] ? __pfx_do_madvise+0x10/0x10 [ 1101.475712] ? lock_acquire+0xdf/0x2e0 [ 1101.475724] ? __might_fault+0xe0/0x190 [ 1101.475736] ? find_held_lock+0x2b/0x80 [ 1101.475751] ? __might_fault+0x138/0x190 [ 1101.475763] ? lock_release+0xc8/0x290 [ 1101.475775] ? __might_fault+0xe0/0x190 [ 1101.475787] ? find_held_lock+0x2b/0x80 [ 1101.475802] ? syscall_trace_enter+0x1cf/0x260 [ 1101.475824] ? lock_release+0xc8/0x290 [ 1101.475834] ? perf_trace_sys_enter+0x2d/0x170 [ 1101.475854] __x64_sys_madvise+0xa9/0x110 [ 1101.475867] do_syscall_64+0xbf/0x360 [ 1101.475879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.475892] RIP: 0033:0x7f8a8fcbeb19 [ 1101.475902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1101.475913] RSP: 002b:00007f8a8d234188 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1101.475925] RAX: ffffffffffffffda RBX: 00007f8a8fdd1f60 RCX: 00007f8a8fcbeb19 [ 1101.475933] RDX: 0000000000000017 RSI: 0000000000002003 RDI: 0000000020ffe000 [ 1101.475940] RBP: 00007f8a8d2341d0 R08: 0000000000000000 R09: 0000000000000000 [ 1101.475947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1101.475954] R13: 00007ffec0c975ff R14: 00007f8a8d234300 R15: 0000000000022000 [ 1101.475970] 17:24:00 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, 0x0) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:24:00 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {0x0, 0x0, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 1101.568643] loop2: detected capacity change from 0 to 274 [ 1101.574178] loop3: detected capacity change from 0 to 274 17:24:09 executing program 6: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2002, 0x17) 17:24:09 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:24:09 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmdt(r1) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9) 17:24:09 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:24:09 executing program 5: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ff4000/0xc000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:24:09 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {0x0, 0x0, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:24:09 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) (fail_nth: 3) 17:24:09 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ff8000/0x5000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r2 = shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r2) r3 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r4 = shmat(r3, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r4) r5 = shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ffc000/0x4000)=nil) r6 = shmat(r5, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r6) r7 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r8 = shmat(r7, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r8) shmat(r7, &(0x7f0000ffc000/0x4000)=nil, 0x6000) r9 = shmat(r7, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmdt(r9) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) [ 1110.080391] loop4: detected capacity change from 0 to 274 [ 1110.082229] loop3: detected capacity change from 0 to 274 [ 1110.099790] loop2: detected capacity change from 0 to 274 17:24:09 executing program 6: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2002, 0x17) 17:24:09 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {0x0, 0x0, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:24:09 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:24:09 executing program 6: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2002, 0x17) 17:24:09 executing program 5: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ff4000/0xc000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:24:09 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) (fail_nth: 4) 17:24:09 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x4000) 17:24:09 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500), 0x0, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 1110.273125] loop4: detected capacity change from 0 to 274 17:24:09 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x1000) 17:24:09 executing program 6: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2002, 0x0) [ 1110.318443] loop3: detected capacity change from 0 to 274 17:24:09 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:24:09 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500), 0x0, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 1110.385220] FAULT_INJECTION: forcing a failure. [ 1110.385220] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1110.387265] CPU: 1 UID: 0 PID: 8719 Comm: syz-executor.0 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 1110.387296] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1110.387309] Call Trace: [ 1110.387317] [ 1110.387325] dump_stack_lvl+0xfa/0x120 [ 1110.387367] should_fail_ex+0x4d7/0x5e0 [ 1110.387406] should_fail_alloc_page+0xe0/0x110 [ 1110.387431] prepare_alloc_pages+0x1af/0x500 [ 1110.387463] __alloc_frozen_pages_noprof+0x17f/0x1f10 [ 1110.387504] ? kernel_text_address+0x5b/0xc0 [ 1110.387531] ? unwind_get_return_address+0x59/0xa0 [ 1110.387565] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1110.387593] ? arch_stack_walk+0x9c/0xf0 [ 1110.387623] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1110.387673] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1110.387701] ? policy_nodemask+0xeb/0x4e0 [ 1110.387733] alloc_pages_mpol+0xed/0x340 [ 1110.387762] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1110.387801] alloc_pages_noprof+0xa1/0x380 [ 1110.387831] pte_alloc_one+0x1e/0x360 [ 1110.387862] __do_fault+0x30d/0x480 [ 1110.387890] __handle_mm_fault+0xfea/0x30f0 [ 1110.387924] ? find_held_lock+0x2b/0x80 [ 1110.387959] ? __pfx___handle_mm_fault+0x10/0x10 [ 1110.387988] ? lock_release+0xc8/0x290 [ 1110.388010] ? lock_is_held_type+0x9e/0x120 [ 1110.388067] handle_mm_fault+0x2c3/0x900 [ 1110.388105] __get_user_pages+0x58a/0x2f10 [ 1110.388153] ? find_held_lock+0x2b/0x80 [ 1110.388186] ? __pfx___get_user_pages+0x10/0x10 [ 1110.388223] ? lock_is_held_type+0x9e/0x120 [ 1110.388260] faultin_page_range+0x2f3/0x9d0 [ 1110.388303] madvise_do_behavior+0x8d8/0xe20 [ 1110.388333] ? __pfx_madvise_do_behavior+0x10/0x10 [ 1110.388360] ? down_read+0x1b1/0x470 [ 1110.388388] ? find_held_lock+0x2b/0x80 [ 1110.388426] do_madvise+0x16b/0x240 [ 1110.388448] ? __pfx_do_madvise+0x10/0x10 [ 1110.388478] ? lock_acquire+0xdf/0x2e0 [ 1110.388501] ? __might_fault+0xe0/0x190 [ 1110.388525] ? find_held_lock+0x2b/0x80 [ 1110.388556] ? __might_fault+0x138/0x190 [ 1110.388579] ? lock_release+0xc8/0x290 [ 1110.388603] ? __might_fault+0xe0/0x190 [ 1110.388627] ? find_held_lock+0x2b/0x80 [ 1110.388658] ? syscall_trace_enter+0x1cf/0x260 [ 1110.388696] ? lock_release+0xc8/0x290 [ 1110.388717] ? perf_trace_sys_enter+0x2d/0x170 [ 1110.388757] __x64_sys_madvise+0xa9/0x110 [ 1110.388781] do_syscall_64+0xbf/0x360 [ 1110.388805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1110.388829] RIP: 0033:0x7f8a8fcbeb19 [ 1110.388847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1110.388869] RSP: 002b:00007f8a8d234188 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1110.388891] RAX: ffffffffffffffda RBX: 00007f8a8fdd1f60 RCX: 00007f8a8fcbeb19 [ 1110.388907] RDX: 0000000000000017 RSI: 0000000000002003 RDI: 0000000020ffe000 [ 1110.388921] RBP: 00007f8a8d2341d0 R08: 0000000000000000 R09: 0000000000000000 [ 1110.388936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1110.388949] R13: 00007ffec0c975ff R14: 00007f8a8d234300 R15: 0000000000022000 [ 1110.388980] [ 1110.427500] loop3: detected capacity change from 0 to 274 [ 1110.435175] loop2: detected capacity change from 0 to 274 17:24:09 executing program 6: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2002, 0x0) 17:24:20 executing program 7: r0 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xc) shmdt(r0) shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/220) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000001, 0xffffffffffffffff) 17:24:20 executing program 6: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2002, 0x0) 17:24:20 executing program 5: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:24:20 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) (fail_nth: 5) 17:24:20 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500), 0x0, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:24:20 executing program 1: madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x66) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000100)=""/216) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000003, 0xffffffffffffffff) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3) 17:24:20 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200) 17:24:20 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 1121.360846] loop2: detected capacity change from 0 to 274 [ 1121.366272] loop4: detected capacity change from 0 to 274 [ 1121.368451] FAULT_INJECTION: forcing a failure. [ 1121.368451] name failslab, interval 1, probability 0, space 0, times 0 [ 1121.370248] CPU: 0 UID: 0 PID: 8748 Comm: syz-executor.0 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 1121.370270] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1121.370280] Call Trace: [ 1121.370286] [ 1121.370293] dump_stack_lvl+0xfa/0x120 [ 1121.370325] should_fail_ex+0x4d7/0x5e0 [ 1121.370353] ? ptlock_alloc+0x21/0x70 [ 1121.370377] should_failslab+0xc2/0x120 [ 1121.370393] kmem_cache_alloc_noprof+0x5f/0x470 [ 1121.370428] ptlock_alloc+0x21/0x70 [ 1121.370461] pte_alloc_one+0x86/0x360 [ 1121.370493] __do_fault+0x30d/0x480 [ 1121.370512] __handle_mm_fault+0xfea/0x30f0 [ 1121.370535] ? find_held_lock+0x2b/0x80 [ 1121.370561] ? __pfx___handle_mm_fault+0x10/0x10 [ 1121.370581] ? lock_release+0xc8/0x290 [ 1121.370596] ? lock_is_held_type+0x9e/0x120 [ 1121.370636] handle_mm_fault+0x2c3/0x900 [ 1121.370661] __get_user_pages+0x58a/0x2f10 [ 1121.370695] ? find_held_lock+0x2b/0x80 [ 1121.370718] ? __pfx___get_user_pages+0x10/0x10 [ 1121.370743] ? lock_is_held_type+0x9e/0x120 [ 1121.370768] faultin_page_range+0x2f3/0x9d0 [ 1121.370798] madvise_do_behavior+0x8d8/0xe20 [ 1121.370818] ? __pfx_madvise_do_behavior+0x10/0x10 [ 1121.370837] ? down_read+0x1b1/0x470 [ 1121.370856] ? find_held_lock+0x2b/0x80 [ 1121.370882] do_madvise+0x16b/0x240 [ 1121.370897] ? __pfx_do_madvise+0x10/0x10 [ 1121.370918] ? lock_acquire+0xdf/0x2e0 [ 1121.370934] ? __might_fault+0xe0/0x190 [ 1121.370950] ? find_held_lock+0x2b/0x80 [ 1121.370971] ? __might_fault+0x138/0x190 [ 1121.370987] ? lock_release+0xc8/0x290 [ 1121.371004] ? __might_fault+0xe0/0x190 [ 1121.371020] ? find_held_lock+0x2b/0x80 [ 1121.371041] ? syscall_trace_enter+0x1cf/0x260 [ 1121.371069] ? lock_release+0xc8/0x290 [ 1121.371083] ? perf_trace_sys_enter+0x2d/0x170 [ 1121.371110] __x64_sys_madvise+0xa9/0x110 [ 1121.371127] do_syscall_64+0xbf/0x360 [ 1121.371144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1121.371161] RIP: 0033:0x7f8a8fcbeb19 [ 1121.371173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1121.371189] RSP: 002b:00007f8a8d234188 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1121.371205] RAX: ffffffffffffffda RBX: 00007f8a8fdd1f60 RCX: 00007f8a8fcbeb19 [ 1121.371216] RDX: 0000000000000017 RSI: 0000000000002003 RDI: 0000000020ffe000 [ 1121.371226] RBP: 00007f8a8d2341d0 R08: 0000000000000000 R09: 0000000000000000 [ 1121.371236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1121.371245] R13: 00007ffec0c975ff R14: 00007f8a8d234300 R15: 0000000000022000 [ 1121.371267] [ 1121.374698] loop3: detected capacity change from 0 to 274 17:24:20 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) (fail_nth: 6) 17:24:20 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) r1 = shmget(0x0, 0x2000, 0x1000, &(0x7f0000ffd000/0x2000)=nil) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) 17:24:20 executing program 5: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:24:20 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:24:31 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, 0x0, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:24:31 executing program 1: ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000000000)={0x2, {0x0, 0x8, 0x9, 0x9, 0x7}}) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:24:31 executing program 5: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:24:31 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200) 17:24:31 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc", 0x2e, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:24:31 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) (fail_nth: 7) 17:24:31 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:24:31 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r1, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 17:24:31 executing program 5: shmat(0x0, &(0x7f0000ff4000/0xc000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:24:31 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xb) r1 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_LOCK(r1, 0xb) [ 1132.779263] loop2: detected capacity change from 0 to 274 [ 1132.784193] loop6: detected capacity change from 0 to 274 [ 1132.791206] loop3: detected capacity change from 0 to 274 [ 1132.797794] FAULT_INJECTION: forcing a failure. [ 1132.797794] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1132.799781] CPU: 0 UID: 0 PID: 8788 Comm: syz-executor.0 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 1132.799810] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1132.799822] Call Trace: [ 1132.799830] [ 1132.799838] dump_stack_lvl+0xfa/0x120 [ 1132.799878] should_fail_ex+0x4d7/0x5e0 [ 1132.799915] _copy_to_user+0x32/0xd0 [ 1132.799942] simple_read_from_buffer+0xe0/0x180 [ 1132.799974] proc_fail_nth_read+0x189/0x270 [ 1132.800007] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1132.800039] ? security_file_permission+0x22/0x90 [ 1132.800064] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1132.800095] vfs_read+0x1eb/0xbe0 [ 1132.800131] ? __pfx_vfs_read+0x10/0x10 [ 1132.800163] ? lock_release+0xc8/0x290 [ 1132.800191] ? __fget_files+0x20d/0x3b0 [ 1132.800231] ksys_read+0x121/0x240 [ 1132.800261] ? __pfx_ksys_read+0x10/0x10 [ 1132.800292] ? perf_trace_sys_enter+0x2d/0x170 [ 1132.800334] do_syscall_64+0xbf/0x360 [ 1132.800357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1132.800379] RIP: 0033:0x7f8a8fc7169c [ 1132.800396] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1132.800416] RSP: 002b:00007f8a8d234170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1132.800437] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f8a8fc7169c [ 1132.800452] RDX: 000000000000000f RSI: 00007f8a8d2341e0 RDI: 0000000000000003 [ 1132.800465] RBP: 00007f8a8d2341d0 R08: 0000000000000000 R09: 0000000000000000 [ 1132.800486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1132.800498] R13: 00007ffec0c975ff R14: 00007f8a8d234300 R15: 0000000000022000 [ 1132.800527] [ 1132.804640] loop4: detected capacity change from 0 to 274 17:24:32 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) 17:24:32 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc", 0x2e, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:24:32 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 17:24:32 executing program 5: shmat(0x0, &(0x7f0000ff4000/0xc000)=nil, 0x0) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:24:32 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200) 17:24:32 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, 0x0, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:24:32 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:24:32 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 1133.137322] loop4: detected capacity change from 0 to 274 [ 1133.139566] loop3: detected capacity change from 0 to 274 17:24:32 executing program 5: shmat(0x0, &(0x7f0000ff4000/0xc000)=nil, 0x0) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) [ 1133.207278] loop6: detected capacity change from 0 to 274 17:24:32 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2002, 0x17) 17:24:41 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2004, 0x17) 17:24:41 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc", 0x2e, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:24:41 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:24:41 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, 0x0, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:24:41 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, 0x0, 0x200) 17:24:41 executing program 5: shmat(0x0, &(0x7f0000ff4000/0xc000)=nil, 0x0) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:24:41 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000000)=""/129) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:24:41 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r2 = shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r2) shmdt(r2) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) r3 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r3, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r3, &(0x7f0000ffb000/0x4000)=nil, 0x7000) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = shmget(0x1, 0x4000, 0x1, &(0x7f0000ffc000/0x4000)=nil) shmat(r4, &(0x7f0000ffc000/0x3000)=nil, 0x0) [ 1142.049362] loop2: detected capacity change from 0 to 274 [ 1142.049996] loop6: detected capacity change from 0 to 274 [ 1142.090253] loop4: detected capacity change from 0 to 274 [ 1142.132387] loop3: detected capacity change from 0 to 274 17:24:41 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000000)=""/53) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:24:41 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:24:41 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:24:41 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x200f, 0x17) 17:24:41 executing program 5: shmat(0x0, &(0x7f0000ff4000/0xc000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) [ 1142.239161] loop2: detected capacity change from 0 to 274 17:24:49 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:24:49 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) r1 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, r1) 17:24:49 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x3) 17:24:49 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x8, &(0x7f0000ffc000/0x1000)=nil) shmat(r0, &(0x7f0000fec000/0x14000)=nil, 0x7000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x1000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r2 = shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r2) shmdt(r2) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:24:49 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200) 17:24:49 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, 0x0, 0x200) 17:24:49 executing program 5: shmat(0x0, &(0x7f0000ff4000/0xc000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:24:49 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 1150.618560] loop6: detected capacity change from 0 to 274 17:24:49 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x4) [ 1150.659349] loop3: detected capacity change from 0 to 274 [ 1150.661134] loop4: detected capacity change from 0 to 274 [ 1150.673798] loop2: detected capacity change from 0 to 274 17:24:49 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x6000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x1000, 0x200, &(0x7f0000ffc000/0x1000)=nil) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 17:24:49 executing program 6: unlinkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200) 17:24:49 executing program 5: shmat(0x0, &(0x7f0000ff4000/0xc000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:24:49 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x8) 17:24:49 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 1150.887114] loop3: detected capacity change from 0 to 274 17:24:58 executing program 6: unlinkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200) 17:24:58 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, 0x0, 0x200) 17:24:58 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:24:58 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffd000/0x2000)=nil) 17:24:58 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200) 17:24:58 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x9) 17:24:58 executing program 5: shmat(0x0, &(0x7f0000ff4000/0xc000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) 17:24:58 executing program 7: r0 = shmget$private(0x0, 0x2000, 0x20, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) [ 1159.784809] loop2: detected capacity change from 0 to 274 [ 1159.819394] loop4: detected capacity change from 0 to 274 17:24:58 executing program 6: unlinkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200) [ 1159.825807] loop3: detected capacity change from 0 to 274 17:24:58 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0xb) 17:24:59 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200) 17:24:59 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x10) 17:24:59 executing program 5: shmat(0x0, &(0x7f0000ff4000/0xc000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) 17:24:59 executing program 6: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:24:59 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70", 0x50, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:24:59 executing program 1: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r0 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) shmget$private(0x0, 0x2000, 0x20, &(0x7f0000ffd000/0x2000)=nil) shmget$private(0x0, 0x1000, 0x100, &(0x7f0000ffd000/0x1000)=nil) shmget(0x1, 0x4000, 0x1, &(0x7f0000ffc000/0x4000)=nil) [ 1159.963998] loop2: detected capacity change from 0 to 274 [ 1159.971943] loop6: detected capacity change from 0 to 274 17:24:59 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x200, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:24:59 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:24:59 executing program 6: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 1160.093429] loop6: detected capacity change from 0 to 274 [ 1160.101823] loop3: detected capacity change from 0 to 274 [ 1160.114790] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 1160.115358] FAT-fs (loop3): Filesystem has been set read-only [ 1160.174730] loop4: detected capacity change from 0 to 274 17:25:08 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, 0x0, 0x200) 17:25:08 executing program 5: shmat(0x0, &(0x7f0000ff4000/0xc000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) 17:25:08 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000001280)={{0x0, 0xffffffffffffffff}}) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:25:08 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x14) 17:25:08 executing program 6: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:25:08 executing program 7: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x6000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:25:08 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70", 0x50, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:25:08 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) [ 1169.426928] loop4: detected capacity change from 0 to 274 [ 1169.443177] loop2: detected capacity change from 0 to 274 [ 1169.447880] loop6: detected capacity change from 0 to 274 17:25:08 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r1 = shmget(0x3, 0x11000, 0x20, &(0x7f0000fef000/0x11000)=nil) shmctl$SHM_LOCK(r1, 0xb) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) [ 1169.506257] loop3: detected capacity change from 0 to 274 17:25:08 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:25:08 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x12) [ 1169.552264] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 1169.554648] FAT-fs (loop3): Filesystem has been set read-only 17:25:08 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, 0x0, 0x200) [ 1169.568622] loop6: detected capacity change from 0 to 274 17:25:08 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x18) [ 1169.627656] loop2: detected capacity change from 0 to 274 17:25:08 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ffd000/0x3000)=nil) shmat(r1, &(0x7f0000ffd000/0x2000)=nil, 0x6000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:25:17 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:25:17 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:25:17 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:25:17 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70", 0x50, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:25:17 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmdt(r1) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xe) 17:25:17 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x19) 17:25:17 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, 0x0, 0x200) 17:25:17 executing program 1: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) [ 1178.422494] loop2: detected capacity change from 0 to 274 17:25:17 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x66) [ 1178.464111] loop6: detected capacity change from 0 to 274 17:25:17 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x0) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/245) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) [ 1178.488459] loop3: detected capacity change from 0 to 274 17:25:17 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) [ 1178.516307] loop4: detected capacity change from 0 to 274 [ 1178.519128] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 1178.520264] FAT-fs (loop3): Filesystem has been set read-only [ 1178.533564] loop5: detected capacity change from 0 to 274 17:25:17 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:25:17 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x67) 17:25:17 executing program 7: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x101801, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r2 = shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmdt(r2) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) r3 = shmget(0x2, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000080)=""/54) 17:25:17 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x0) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) [ 1178.600845] loop2: detected capacity change from 0 to 274 [ 1178.617546] loop6: detected capacity change from 0 to 274 17:25:17 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000", 0x56, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 1178.732386] loop3: detected capacity change from 0 to 274 [ 1178.740188] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 1178.740771] FAT-fs (loop3): Filesystem has been set read-only 17:25:25 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:25:25 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:25:25 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x11) madvise(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x4) 17:25:25 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000", 0x56, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:25:25 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f0000000000)={0x2, 0x2, 0x8002, 0x40, 0x6, 0x10009}) r2 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffc000/0x3000)=nil) shmat(r2, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmat(r2, &(0x7f0000ffe000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r1, 0x9, 0x6, 0xffff}) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x4) 17:25:25 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmdt(r1) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xe) 17:25:25 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:25:25 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r2 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$SHM_LOCK(r2, 0xb) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x0) mincore(&(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/207) [ 1186.511259] No source specified [ 1186.530937] loop2: detected capacity change from 0 to 274 [ 1186.535890] loop3: detected capacity change from 0 to 274 17:25:25 executing program 0: shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) shmctl$IPC_RMID(0x0, 0x0) [ 1186.544094] loop5: detected capacity change from 0 to 274 17:25:25 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x10) shmctl$IPC_RMID(r0, 0x0) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x6000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x0) 17:25:25 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 1186.566216] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 1186.567410] FAT-fs (loop3): Filesystem has been set read-only [ 1186.633988] No source specified 17:25:25 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:25:25 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 17:25:25 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:25:25 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:25:25 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000", 0x56, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 1186.756132] loop4: detected capacity change from 0 to 274 [ 1186.758329] No source specified 17:25:25 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:25:25 executing program 1: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xd000000f}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x200}}, './file0\x00'}) r1 = socket$packet(0x11, 0x2, 0x300) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)={0x80000014}) shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r2 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r3 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r3, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r3, &(0x7f0000ffe000/0x1000)=nil, 0x7000) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r2, &(0x7f0000ffd000/0x2000)=nil, 0xb000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:25:25 executing program 7: r0 = shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:25:25 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000002c0), &(0x7f0000000300)=0x14) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) 17:25:25 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 1186.857928] loop3: detected capacity change from 0 to 274 [ 1186.860692] loop2: detected capacity change from 0 to 274 [ 1186.873121] loop6: detected capacity change from 0 to 10 [ 1186.887926] loop5: detected capacity change from 0 to 274 [ 1186.916195] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 1186.916968] FAT-fs (loop3): Filesystem has been set read-only [ 1187.003589] FAT-fs (loop6): Directory bread(block 137) failed [ 1187.004141] FAT-fs (loop6): Directory bread(block 138) failed [ 1187.007764] FAT-fs (loop6): Directory bread(block 139) failed [ 1187.008253] FAT-fs (loop6): Directory bread(block 140) failed [ 1187.008794] FAT-fs (loop6): Directory bread(block 141) failed [ 1187.010575] FAT-fs (loop6): Directory bread(block 142) failed [ 1187.012534] FAT-fs (loop6): Directory bread(block 143) failed [ 1187.013028] FAT-fs (loop6): Directory bread(block 144) failed [ 1187.018406] FAT-fs (loop6): Directory bread(block 145) failed [ 1187.020528] FAT-fs (loop6): Directory bread(block 146) failed [ 1187.022770] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 1187.023333] FAT-fs (loop6): Filesystem has been set read-only 17:25:34 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:25:34 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:25:34 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec7032", 0x59, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:25:34 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x0) 17:25:34 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:25:34 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:25:34 executing program 0: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r1, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6948}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x45}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x4001) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x168, r1, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x40}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xd75}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff9}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1200000}]}]}, @TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth0_virt_wifi\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x44091}, 0x8000) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3) 17:25:34 executing program 4: shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) shmctl$IPC_RMID(0x0, 0x0) [ 1195.685764] loop3: detected capacity change from 0 to 274 [ 1195.693210] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 1195.694266] FAT-fs (loop3): Filesystem has been set read-only [ 1195.746143] loop6: detected capacity change from 0 to 10 17:25:34 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec7032", 0x59, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 1195.764119] loop5: detected capacity change from 0 to 274 [ 1195.823888] FAT-fs (loop6): Directory bread(block 137) failed [ 1195.831752] loop3: detected capacity change from 0 to 274 [ 1195.832203] FAT-fs (loop6): Directory bread(block 138) failed [ 1195.841805] FAT-fs (loop6): Directory bread(block 139) failed [ 1195.843267] FAT-fs (loop6): Directory bread(block 140) failed [ 1195.847817] FAT-fs (loop6): Directory bread(block 141) failed [ 1195.853536] FAT-fs (loop6): Directory bread(block 142) failed [ 1195.854224] FAT-fs (loop6): Directory bread(block 143) failed [ 1195.860160] FAT-fs (loop6): Directory bread(block 144) failed [ 1195.864221] FAT-fs (loop6): Directory bread(block 145) failed [ 1195.866815] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 1195.867942] FAT-fs (loop3): Filesystem has been set read-only 17:25:34 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:25:35 executing program 4: shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) shmctl$IPC_RMID(0x0, 0x0) [ 1195.872588] FAT-fs (loop6): Directory bread(block 146) failed [ 1195.881086] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 1195.881914] FAT-fs (loop6): Filesystem has been set read-only 17:25:35 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x1000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:25:35 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:25:35 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:25:35 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:25:35 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec7032", 0x59, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 1196.060387] loop5: detected capacity change from 0 to 274 [ 1196.062959] loop6: detected capacity change from 0 to 10 [ 1196.094324] FAT-fs (loop6): Directory bread(block 137) failed [ 1196.101678] FAT-fs (loop6): Directory bread(block 138) failed [ 1196.104178] FAT-fs (loop6): Directory bread(block 139) failed [ 1196.115922] FAT-fs (loop6): Directory bread(block 140) failed [ 1196.116884] FAT-fs (loop6): Directory bread(block 141) failed [ 1196.120809] FAT-fs (loop6): Directory bread(block 142) failed [ 1196.121754] FAT-fs (loop6): Directory bread(block 143) failed [ 1196.124910] FAT-fs (loop6): Directory bread(block 144) failed [ 1196.128815] FAT-fs (loop6): Directory bread(block 145) failed [ 1196.130624] FAT-fs (loop6): Directory bread(block 146) failed [ 1196.135690] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 1196.136725] FAT-fs (loop6): Filesystem has been set read-only 17:25:45 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:25:45 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:25:45 executing program 7: statx(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x400, 0x80, &(0x7f0000000180)) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000140)='.log\x00', 0x400480, 0x96) execveat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)=[&(0x7f0000000080)='#+].+.**\x00', &(0x7f00000000c0)='.log\x00', &(0x7f0000000100)='{-&r:!:\x00', &(0x7f0000000280)='.log\x00', &(0x7f00000002c0)='+,@/\x00'], &(0x7f00000003c0)=[&(0x7f0000000340)='\x00', &(0x7f0000000380)='.log\x00'], 0x2c00) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x17) 17:25:45 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:25:45 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x11) r0 = shmat(0xffffffffffffffff, &(0x7f0000ffe000/0x2000)=nil, 0x5000) shmdt(r0) 17:25:45 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec703251", 0x5a, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:25:45 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {0x0, 0x0, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:25:45 executing program 4: shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) shmctl$IPC_RMID(0x0, 0x0) [ 1206.165873] loop3: detected capacity change from 0 to 274 [ 1206.186763] loop5: detected capacity change from 0 to 274 [ 1206.190371] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 1206.191121] FAT-fs (loop3): Filesystem has been set read-only [ 1206.221292] loop6: detected capacity change from 0 to 274 17:25:45 executing program 0: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x40, 0x5}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40040d0) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000000)=""/41) 17:25:45 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec703251", 0x5a, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:25:45 executing program 4: shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) 17:25:45 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x1000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) [ 1206.366442] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 1206.367677] FAT-fs (loop6): Filesystem has been set read-only 17:25:45 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x0) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:25:54 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ffc000/0x2000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) socket$nl_xfrm(0x10, 0x3, 0x6) setregid(0x0, r4) r5 = fork() process_vm_readv(r5, &(0x7f0000000180)=[{&(0x7f0000000000)=""/211, 0xd3}, {&(0x7f0000000100)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/30, 0x1e}, {&(0x7f00000011c0)=""/4096, 0x1000}], 0x3, 0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, r2, 0x0, 0x1, 0x2}, 0x4, 0x2, 0x2, 0xfffffffffffffff7, r5}) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x1000)=nil, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:25:54 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {0x0, 0x0, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:25:54 executing program 4: shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) 17:25:54 executing program 0: shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x4000)=nil, 0x9d70542c0d6f5f74) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) 17:25:54 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/247) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) r2 = shmget(0x3, 0x9000, 0x40, &(0x7f0000ff7000/0x9000)=nil) shmat(r2, &(0x7f0000ff7000/0x1000)=nil, 0x2000) shmctl$SHM_UNLOCK(r1, 0xc) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:25:54 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec703251", 0x5a, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:25:54 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x1000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:25:54 executing program 5: futimesat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) [ 1215.627045] loop6: detected capacity change from 0 to 274 [ 1215.635593] loop3: detected capacity change from 0 to 274 [ 1215.652039] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 1215.652632] FAT-fs (loop3): Filesystem has been set read-only 17:25:54 executing program 5: futimesat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) 17:25:54 executing program 4: shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) 17:25:54 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:25:54 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r0 = shmget(0x0, 0x1000, 0x9, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ff5000/0x2000)=nil, 0x0) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000040)=""/16) r2 = shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) shmat(r2, &(0x7f0000001000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) mbind(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x0, &(0x7f0000000000)=0x3f, 0x2, 0x2) 17:25:54 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x1000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:25:54 executing program 7: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r1, &(0x7f0000ffc000/0x3000)=nil, 0x6000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r0, &(0x7f0000003000/0x4000)=nil, 0x5000) 17:25:54 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:25:54 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r0 = shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffc000/0x3000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r2 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r3 = shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r3) shmctl$IPC_RMID(r2, 0x0) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) [ 1215.822976] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 1215.824599] FAT-fs (loop6): Filesystem has been set read-only [ 1215.873257] loop3: detected capacity change from 0 to 274 [ 1215.878177] FAT-fs (loop3): invalid media value (0x00) [ 1215.878640] FAT-fs (loop3): Can't find a valid FAT filesystem 17:26:05 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmdt(r1) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:26:05 executing program 0: ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000000)={0x0, 0x7, 0x1}) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) 17:26:05 executing program 5: futimesat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) 17:26:05 executing program 4: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) shmctl$IPC_RMID(0x0, 0x0) 17:26:05 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:26:05 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:26:05 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r2 = shmget(0x2, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffd000/0x3000)=nil, 0x1000) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r1, 0x0) shmctl$IPC_RMID(r2, 0x0) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r3 = shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x0) shmget(0x1, 0x1000, 0x100, &(0x7f0000ffb000/0x1000)=nil) shmdt(r3) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:26:05 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {0x0, 0x0, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 1226.669279] loop6: detected capacity change from 0 to 274 17:26:05 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x80, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/4096) [ 1226.716636] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 1226.717606] FAT-fs (loop6): Filesystem has been set read-only [ 1226.728996] loop3: detected capacity change from 0 to 274 17:26:05 executing program 4: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) shmctl$IPC_RMID(0x0, 0x0) [ 1226.742205] FAT-fs (loop3): invalid media value (0x00) [ 1226.742695] FAT-fs (loop3): Can't find a valid FAT filesystem 17:26:05 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:26:05 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700), 0x0, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:26:05 executing program 5: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:26:05 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r0 = shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xd) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x6800) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x13) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 17:26:05 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:26:05 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x80, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/255) r1 = shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x0) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmdt(r1) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) [ 1226.858374] loop3: detected capacity change from 0 to 274 [ 1226.870081] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1226.870932] FAT-fs (loop3): Filesystem has been set read-only [ 1226.881902] loop5: detected capacity change from 0 to 274 [ 1226.885174] loop6: detected capacity change from 0 to 274 [ 1226.972195] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 1226.973314] FAT-fs (loop6): Filesystem has been set read-only 17:26:15 executing program 4: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) shmctl$IPC_RMID(0x0, 0x0) 17:26:15 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:26:15 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700), 0x0, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:26:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) r1 = timerfd_create(0x2, 0x800) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000000)={r1}) r2 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:26:15 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r2 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x2000) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r1, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r3 = shmget$private(0x0, 0x4000, 0x54001c68, &(0x7f0000ffc000/0x4000)=nil) shmat(r3, &(0x7f0000ffc000/0x3000)=nil, 0x1000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:26:15 executing program 5: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:26:15 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:26:15 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0xffffffffffffffff) 17:26:15 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:26:15 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) [ 1236.503698] loop5: detected capacity change from 0 to 274 [ 1236.505053] loop6: detected capacity change from 0 to 274 [ 1236.508795] loop3: detected capacity change from 0 to 274 17:26:15 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0xefe33f423d504795, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_RMID(r1, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) [ 1236.543138] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1236.544349] FAT-fs (loop3): Filesystem has been set read-only 17:26:15 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:26:15 executing program 4: shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) shmctl$IPC_RMID(0x0, 0x0) [ 1236.634819] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 1236.635912] FAT-fs (loop6): Filesystem has been set read-only 17:26:23 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700), 0x0, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:26:23 executing program 7: shmget$private(0x0, 0x1000, 0x400, &(0x7f0000ffb000/0x1000)=nil) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xa000) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x1000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:26:23 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:26:23 executing program 2: shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:26:23 executing program 4: shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) shmctl$IPC_RMID(0x0, 0x0) 17:26:23 executing program 5: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:26:23 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r1, &(0x7f0000ffc000/0x1000)=nil, 0x6000) shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x7000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) 17:26:23 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0xefe33f423d504795, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_RMID(r1, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) [ 1244.539969] loop6: detected capacity change from 0 to 274 [ 1244.545459] loop3: detected capacity change from 0 to 274 [ 1244.554125] loop5: detected capacity change from 0 to 274 17:26:23 executing program 2: shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:26:23 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) munmap(&(0x7f0000fef000/0xe000)=nil, 0xe000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) shmctl$IPC_RMID(r0, 0x0) munlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) shmctl$IPC_RMID(r0, 0x0) 17:26:23 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r2 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x2000) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r1, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r3 = shmget$private(0x0, 0x4000, 0x54001c68, &(0x7f0000ffc000/0x4000)=nil) shmat(r3, &(0x7f0000ffc000/0x3000)=nil, 0x1000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) [ 1244.588955] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1244.590216] FAT-fs (loop3): Filesystem has been set read-only 17:26:23 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) r0 = shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x2000)=nil, 0x6000) shmdt(r0) [ 1244.664190] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 1244.665502] FAT-fs (loop6): Filesystem has been set read-only 17:26:23 executing program 2: shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:26:23 executing program 4: shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) shmctl$IPC_RMID(0x0, 0x0) 17:26:23 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x14000, 0x40, &(0x7f0000fec000/0x14000)=nil) shmctl$IPC_RMID(r1, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:26:23 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:26:23 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {0x0, 0x0, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:26:23 executing program 0: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) 17:26:23 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000", 0x16, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:26:23 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r2 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x2000) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r1, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r3 = shmget$private(0x0, 0x4000, 0x54001c68, &(0x7f0000ffc000/0x4000)=nil) shmat(r3, &(0x7f0000ffc000/0x3000)=nil, 0x1000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:26:23 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:26:23 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) [ 1244.835290] loop3: detected capacity change from 0 to 274 [ 1244.857339] loop6: detected capacity change from 0 to 274 [ 1244.895838] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1244.897460] FAT-fs (loop3): Filesystem has been set read-only 17:26:24 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r1 = shmget(0x2, 0x3000, 0x200, &(0x7f0000ffd000/0x3000)=nil) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x7000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) [ 1244.981702] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 1244.982942] FAT-fs (loop6): Filesystem has been set read-only 17:26:33 executing program 4: shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x0) shmctl$IPC_RMID(0x0, 0x0) 17:26:33 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:26:33 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000000)=""/136) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) 17:26:33 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r2 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x2000) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r1, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r3 = shmget$private(0x0, 0x4000, 0x54001c68, &(0x7f0000ffc000/0x4000)=nil) shmat(r3, &(0x7f0000ffc000/0x3000)=nil, 0x1000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:26:33 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:26:33 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {0x0, 0x0, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:26:33 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffe000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:26:33 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000", 0x16, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 1254.018110] loop6: detected capacity change from 0 to 274 [ 1254.024062] loop3: detected capacity change from 0 to 274 [ 1254.043831] loop5: detected capacity change from 0 to 274 17:26:33 executing program 4: shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x0) shmctl$IPC_RMID(0x0, 0x0) [ 1254.074775] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 1254.075504] FAT-fs (loop6): Filesystem has been set read-only [ 1254.097369] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1254.098747] FAT-fs (loop3): Filesystem has been set read-only 17:26:33 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r2 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x2000) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r1, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r3 = shmget$private(0x0, 0x4000, 0x54001c68, &(0x7f0000ffc000/0x4000)=nil) shmat(r3, &(0x7f0000ffc000/0x3000)=nil, 0x1000) 17:26:33 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffa000/0x3000)=nil) 17:26:33 executing program 0: shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ffb000/0x2000)=nil) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) 17:26:33 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000", 0x16, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:26:33 executing program 4: shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x0) shmctl$IPC_RMID(0x0, 0x0) 17:26:33 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:26:33 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r2 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x2000) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r1, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0x54001c68, &(0x7f0000ffc000/0x4000)=nil) 17:26:33 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) [ 1254.257680] No source specified 17:26:42 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {0x0, 0x0, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:26:42 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r2 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x2000) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r1, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) 17:26:42 executing program 7: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000000)={0x3, 0xfffffffffffffffc}) r0 = shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:26:42 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:26:42 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) 17:26:42 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:26:42 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e", 0x21, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:26:42 executing program 4: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) [ 1263.106711] loop6: detected capacity change from 0 to 274 [ 1263.128297] No source specified [ 1263.131252] loop3: detected capacity change from 0 to 274 [ 1263.151380] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 1263.152103] FAT-fs (loop6): Filesystem has been set read-only 17:26:42 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r2 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x2000) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r1, 0x0) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) 17:26:42 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r1 = shmget(0x1, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x6000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:26:42 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e", 0x21, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 1263.211511] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1263.212711] FAT-fs (loop3): Filesystem has been set read-only 17:26:51 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) 17:26:51 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) 17:26:51 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:26:51 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r2 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x2000) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r1, 0x0) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) 17:26:51 executing program 4: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:26:51 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100), 0x0, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:26:51 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e", 0x21, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:26:51 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x2000) [ 1272.153579] loop6: detected capacity change from 0 to 274 [ 1272.173825] loop3: detected capacity change from 0 to 274 [ 1272.178000] No source specified 17:26:51 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, 0x0, 0x200) 17:26:51 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) 17:26:51 executing program 7: recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)=""/72, 0x48}, {&(0x7f0000000100)=""/218, 0xda}, {&(0x7f0000000200)=""/25, 0x19}, {&(0x7f0000000240)=""/221, 0xdd}, {&(0x7f0000000340)=""/175, 0xaf}], 0x5, &(0x7f0000000480)=""/216, 0xd8}, 0x6}, {{&(0x7f0000000580)=@generic, 0x80, &(0x7f0000001800)=[{&(0x7f0000000600)=""/130, 0x82}, {&(0x7f00000006c0)=""/18, 0x12}, {&(0x7f0000000700)=""/217, 0xd9}, {&(0x7f0000000800)=""/4096, 0x1000}], 0x4, &(0x7f0000001840)=""/48, 0x30}, 0x80}, {{&(0x7f0000001880), 0x80, &(0x7f0000001a00)=[{&(0x7f0000001900)=""/255, 0xff}], 0x1, &(0x7f0000001a40)=""/170, 0xaa}, 0x8001}], 0x3, 0x0, &(0x7f0000001bc0)={0x0, 0x989680}) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000001c00)='bond_slave_1\x00') r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) sendmsg(r2, &(0x7f0000003fc0)={0x0, 0x0, &(0x7f0000003f40)=[{&(0x7f0000001c40)="6bcc5381edcdf59e1072582cad99b389a763f25807298eb843c5afea3454b0808aba569568cca65d47217b45af6a8dd35f1d22cfb3ee1313747303f506cd2958a96786e9086cd7dadd379cb6cc27f13e5c3ddd1644dc31", 0x57}, {&(0x7f0000001cc0)="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", 0x1000}, {&(0x7f0000002cc0)="a92263af4a0b9d9f638cac015c9725c2cfb59155174028a92d681cbed0b7b2cc90b0cd1ce9301feb10a60fe53fb2e42f35809f5c892b7f5a44bf9c514f9cd25068e49322059c69e74fca240fb524f28e8aacf56b349e4d119db37a7e62b510639404089d3ba0eabd332a0a9e627f2007f969f8f63346300186e8a2721e26879e27537e060b3bc1c592707819385367cbf6414c4760954cbf747720cff945b0135a73ef99798b6b50a0c9e3b1221d7c1841efa2e6025b0e10759ac981b64c0409", 0xc0}, {&(0x7f0000002d80)="5571b7e0af7b62bc7aa2f547dcece293f429a88d8931", 0x16}, {&(0x7f0000002dc0)="dcaa5f7f82ceea41ba76331730e5e56c58cdf0ae9a478a48f4c416d332b9a3bdd079dfd3694f19851824b34ad1112ae80c4e0dc5b3129e7f29b28802aff07fd0d583e7be53f35872ad1ff1818dae48984691031426eb33e0c685b1af734e4e5157c52c8a51e61082efb06742c57c3f175c94951c4c5b3c954a8676be6aa4aeac232413415b66fc252a6042a7b9f0641598c21b799eac6d92e276c8a3799071b476d9c9744827a2306912d1b7dc5ad3256031e9133912df86", 0xb8}, {&(0x7f0000002e80)="83071a1a62b9d2e4c37284bbe04993f182c09ca2d034bea49fae766ec73766ebb32230275cd629e923cc38cc69345f4dab55ffcf358f08963b7762dbbabf9ce57c8c0944855dcd3fafdf7510a808a8fb5665e1ce6f901fd767200fd3969963566f4c456a1af361101afe9418180321cfab19a339970d2d777c615221453aedc41951bd8d7634f7be1dc73dabe21eb6d70141a1be", 0x94}, {&(0x7f0000002f40)="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", 0x1000}], 0x7}, 0x4000800) [ 1272.214588] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1272.215253] FAT-fs (loop3): Filesystem has been set read-only [ 1272.251055] loop4: detected capacity change from 0 to 274 17:26:51 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) sigaltstack(&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000040)=""/34) 17:26:51 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r2 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x2000) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r1, 0x0) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) 17:26:51 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) [ 1272.308334] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 1272.309861] FAT-fs (loop6): Filesystem has been set read-only [ 1272.377865] loop5: detected capacity change from 0 to 10 [ 1272.455387] FAT-fs (loop5): Directory bread(block 137) failed [ 1272.460136] FAT-fs (loop5): Directory bread(block 138) failed [ 1272.461198] FAT-fs (loop5): Directory bread(block 139) failed [ 1272.465679] FAT-fs (loop5): Directory bread(block 140) failed [ 1272.466652] FAT-fs (loop5): Directory bread(block 141) failed [ 1272.468936] FAT-fs (loop5): Directory bread(block 142) failed [ 1272.469897] FAT-fs (loop5): Directory bread(block 143) failed [ 1272.470960] FAT-fs (loop5): Directory bread(block 144) failed [ 1272.471913] FAT-fs (loop5): Directory bread(block 145) failed [ 1272.472846] FAT-fs (loop5): Directory bread(block 146) failed [ 1272.474715] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 1272.476168] FAT-fs (loop5): Filesystem has been set read-only 17:27:01 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) 17:27:01 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:27:01 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r2 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x2000) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) 17:27:01 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget(0x2, 0x1000, 0x400, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r2 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r2, &(0x7f0000ffe000/0x1000)=nil, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x17) r3 = shmget(0x3, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_STAT(r3, 0xd, &(0x7f0000000000)=""/220) 17:27:01 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100), 0x0, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:27:01 executing program 4: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x9) 17:27:01 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e2020202020", 0x27, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:27:02 executing program 0: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1, 0x1}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x111080}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x120, r1, 0x100, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x120}, 0x1, 0x0, 0x0, 0x48001}, 0x24000000) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000280)={0x1, 0x0, {0x1, @usage=0x45, 0x0, 0x1, 0xff, 0x154, 0x6341, 0x42, 0x80, @usage=0xec, 0xe7, 0x2755, [0x8, 0x7, 0x20, 0xde4, 0xc7c0, 0x6]}, {0x7f, @struct={0x8, 0xe46}, 0x0, 0x5, 0x6, 0x3b4, 0x0, 0xffffffff00000000, 0x211, @struct={0x80000000}, 0x5514, 0x1, [0x9, 0x101, 0xfd, 0x9, 0xffffffff, 0x6]}, {0x86, @usage=0x3, 0x0, 0x3, 0xffffffffffffffff, 0x8000, 0x4, 0x7f, 0x415, @usage=0x1, 0xfffffffb, 0x9, [0x7, 0x8, 0x0, 0x9, 0x6, 0x95b]}, {0x0, 0x10001, 0x3}}) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000a80), &(0x7f0000000ac0)=0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001780), r3) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f0000001840)={'syztnl1\x00', &(0x7f00000017c0)={'ip6gre0\x00', 0x0, 0x2f, 0x5, 0x3, 0x9, 0x53, @dev={0xfe, 0x80, '\x00', 0xe}, @remote, 0x8, 0x40, 0x4, 0xfffffff9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001900)={'ip6gre0\x00', &(0x7f0000001880)={'ip6tnl0\x00', 0x0, 0x29, 0xbe, 0x81, 0x5, 0x14, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x717, 0x80, 0x101, 0x7}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001a00)={'erspan0\x00', &(0x7f0000001940)={'gretap0\x00', 0x0, 0x80, 0x40, 0xfffffffc, 0x0, {{0x1d, 0x4, 0x3, 0xa, 0x74, 0x66, 0x0, 0x2, 0x2d, 0x0, @broadcast, @loopback, {[@lsrr={0x83, 0x7, 0x11, [@private=0xa010101]}, @timestamp_addr={0x44, 0x34, 0x37, 0x1, 0x2, [{@empty, 0x2}, {@broadcast, 0x8001}, {@empty, 0x2}, {@loopback, 0x1000}, {@loopback, 0x89c}, {@loopback, 0x1}]}, @generic={0x94, 0xf, "08a0a1f5ec75d098217d3e0446"}, @timestamp_addr={0x44, 0x14, 0xd, 0x1, 0x0, [{@broadcast, 0x7}, {@multicast1, 0x1000}]}]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000001a40)={@empty, 0x0}, &(0x7f0000001a80)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001ac0)={0x170, r6, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x4000804}, 0x34000000) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r11, 0x70a24564c27fceab, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000016c0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x7d9e125fd4c1ed8}, 0xc, &(0x7f0000001680)={&(0x7f0000000b40)={0xb14, r11, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x1a}}}}, [@NL80211_ATTR_TID_CONFIG={0x794, 0x11d, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}, {0x1e0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xaf}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1a4, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0xa5, 0x1, 0x8, 0x4, 0x723, 0x2]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x43, 0x9, 0x24, 0x1, 0x4, 0x1b, 0xb, 0xb, 0x12, 0x50, 0x18, 0xb, 0x12, 0x3, 0x36, 0x48, 0x16, 0x5, 0x3, 0x16]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x761, 0xdc8, 0x3ff, 0x7, 0x7, 0x0, 0x8, 0xe5]}}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8, 0x9, 0x7, 0x6, 0x400, 0x200, 0x3]}}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x0, 0x1}, {0x6, 0x7}, {0x5, 0x2}, {0x7, 0x3}, {0x1, 0x9}, {0x7, 0x6}, {0x6, 0x2}, {0x1, 0xa}, {0x7, 0x4}, {0x6, 0x1}, {0x1, 0x7}, {0x2, 0x5}, {}, {0x0, 0x4}, {0x7, 0x8}, {0x7, 0x3}, {0x4, 0x5}, {0x7, 0x1}, {0x1, 0x2}, {0x0, 0x6}, {0x4, 0x4}, {0x6, 0x5}, {0x0, 0xa}, {0x6, 0x7}, {0x4, 0x8}, {0x0, 0x1}, {0x1, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1, 0x48, 0x5, 0x5, 0x1, 0x16]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x9, 0x5, 0x6, 0x3, 0x2, 0x9, 0x220]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0xc, 0x6, 0x36, 0x36, 0x0, 0x16, 0x3, 0x12, 0x2, 0x30, 0x16, 0x3, 0x4, 0x30, 0x1b, 0x51, 0x2, 0x9, 0x3, 0x48, 0x5, 0x5c]}]}, @NL80211_BAND_2GHZ={0xc8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x7, 0xa}, {0x1, 0x6}, {0x1}, {0x3, 0x1}, {0x7, 0x8}, {0x6, 0x3}, {0x1, 0x8}, {0x3, 0x4}, {0x0, 0x2}, {0x0, 0x4}, {0x1, 0x3}, {0x1, 0x2}, {0x5, 0x8}, {0x2, 0x2}, {0x5, 0x7}, {0x7, 0x5}, {0x1, 0x4}, {0x6, 0x3}, {0x6, 0x6}, {0x3, 0x8}, {0x3, 0x8}, {0x4, 0x9}, {0x7, 0xa}, {0x0, 0x8}, {0x1}, {0x3, 0x1}, {0x3, 0x5}, {0x6, 0x8}, {0x1, 0x8}, {0x1, 0x6}, {0x2}, {0x6, 0x6}, {0x5, 0x1}, {0x0, 0x8}, {0x5, 0x5}, {0x7, 0x2}, {0x6, 0xa}, {0x5, 0x2}, {0x7}, {0x2, 0x3}, {0x3, 0xa}, {0x0, 0x3}, {0x4, 0x7}, {0x1, 0x7}, {}, {0x5, 0x4}, {0x0, 0x8}, {0x7, 0x5}, {0x2, 0xa}, {0x1, 0x2}, {}, {0x0, 0x6}, {0x1}, {0x2, 0x3}, {0x2, 0x8}, {0x5, 0x1}, {0x2, 0x7}, {0x7, 0x3}, {0x7, 0xa}, {0x6, 0x2}, {0x7, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3, 0x400, 0x4, 0xff5f, 0x7, 0x40, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x1, 0x4}, {0x2, 0x3}, {0x2, 0x5}, {0x5, 0x6}, {0x7, 0xa}, {0x0, 0x9}, {0x1, 0x3}, {0x7, 0xa}, {0x7, 0xa}, {0x4, 0x7}, {0x5, 0xa}, {0x4, 0x1}, {0x7}, {0x1, 0x9}, {0x6, 0x9}, {0x0, 0x8}, {0x3, 0x6}, {0x0, 0x8}, {0x1, 0x3}, {0x3, 0xa}, {0x0, 0x5}, {0x0, 0x2}, {0x4, 0x9}, {0x6, 0xa}, {0x2, 0x3}, {0x7, 0x5}, {0x0, 0x5}, {0x1, 0x9}, {0x7, 0x2}, {0x5, 0x7}, {0x0, 0xa}, {0x4}, {0x4, 0x2}, {0x6, 0x5}, {0x6, 0x1c}, {0x7, 0x2}, {0x2}, {0x6, 0x4}, {0x3, 0x7}, {0x0, 0x7}, {0x6, 0x4}, {0x4, 0x3}, {0x1, 0x3}, {0x5, 0x3}, {0x2, 0x5}, {0x1}, {0x3, 0x3}, {0x1}, {0x4, 0x5}, {0x5, 0xa}, {0x3, 0x8}, {0x3, 0xa}, {0x7, 0x6}, {0x2, 0x1}, {0x2, 0x6}, {0x5, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x8}, {0x1, 0xa}, {0x2, 0x3}, {0x3, 0x8}, {0x2, 0xa}, {0x6, 0x6}, {}, {0x5, 0xa}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x4, 0x1, 0x4, 0x9, 0x2, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x42}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x1c0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xce}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcf}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x23}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x194, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x0, 0x5, 0x30, 0x3, 0x48, 0x6, 0xc, 0x1, 0x30, 0x6, 0x1, 0x18, 0x18, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8, 0xfff9, 0x3, 0xfff, 0x4, 0x7, 0xfffe]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x2, 0x1f, 0x5, 0x20, 0x1, 0x0, 0x7]}}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x4, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x6, 0xfbff, 0x3, 0x401, 0x176d, 0x7fff, 0x296f]}}]}, @NL80211_BAND_2GHZ={0xa4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3b, 0x2, [{0x7, 0x4}, {0x5, 0x4}, {0x1, 0x5}, {0x5, 0x6}, {0x3}, {0x0, 0x5}, {0x0, 0x6}, {0x4, 0x8}, {0x1}, {0x4, 0x8}, {0x7, 0x7}, {0x4, 0x3}, {0x1, 0x4}, {0x6, 0x3}, {}, {0x6, 0x3}, {0x0, 0xa}, {0x4, 0x7}, {0x0, 0x8}, {0x7, 0x3}, {0x3, 0x1}, {0x6, 0xa}, {0x6, 0x7}, {0x0, 0x9}, {0x7, 0x1}, {0x5, 0xa}, {0x6, 0x3}, {0x6, 0x5}, {0x2, 0x8}, {0x2, 0xa}, {0x4, 0x6}, {0x7, 0x8}, {0x1, 0x9}, {0x0, 0x4}, {0x1, 0x7}, {0x7, 0x6}, {0x4, 0x2}, {0x2, 0x1}, {0x7, 0x4}, {0x7, 0x4}, {0x1, 0x7}, {0x7, 0x6}, {0x6, 0x9}, {0x4, 0x4}, {0x0, 0x6}, {0x0, 0x9}, {0x0, 0x7}, {0x3, 0x9}, {0x4, 0x5}, {0x3, 0xa}, {0x7, 0x5}, {0x6, 0x1}, {0x0, 0x5}, {0x5}, {0x4, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x160, 0x100, 0x7f, 0x81, 0x0, 0x4, 0x100]}}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x0, 0x5}, {0x0, 0x7}, {0x3, 0x5}, {0x7, 0x4}, {0x6, 0x1}, {0x4, 0x3}, {0x4, 0x2}, {0x5, 0x2}, {0x0, 0x2}, {0x6, 0x7}, {0x6, 0x8}, {0x1, 0x5}, {0x5, 0x9}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x8}, {0x2, 0x7}, {0x6}, {0x5, 0x6}, {0x7, 0x5}, {0x7, 0x6}, {0x2, 0x3}, {0x1, 0x8}, {0x5}, {0x7, 0x7}, {0x6, 0x5}, {0x6, 0x1}, {0x2, 0x4}, {0x1, 0x1}, {0x1, 0x3}, {0x0, 0x9}, {0x0, 0x5}, {0x2, 0x9}, {0x7, 0x9}, {0x1, 0x7}, {0x0, 0x9}, {0x5, 0x1}, {0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x5}, {0x6, 0x4}, {0x7, 0x9}, {0x4, 0x8}, {0x0, 0x6}, {0x0, 0x8}, {0x1, 0x9}, {0x0, 0x9}, {0x7, 0x1}, {0x6}, {0x0, 0x3}, {0x0, 0x8}, {0x6, 0x4}, {0x4, 0xa}, {0x0, 0xa}, {0x0, 0x8}, {0x3, 0x1}, {0x2, 0x2}, {0x7, 0x9}, {0x5, 0x5}, {0x0, 0x1}, {0x0, 0x8}, {0x1, 0x4}, {0x2, 0x7}, {0x4, 0x7}, {0x0, 0x6}, {0x5, 0x7}, {0x3, 0x6}, {0x1, 0x3}, {0x3, 0x8}, {0x4, 0x7}, {0x7}, {0x7, 0x1}]}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x5, 0x0, 0xfff8, 0xffff, 0x1, 0x841f, 0x3]}}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x5, 0x5}, {0x5, 0x8}, {0x0, 0x5}, {0x1, 0x3}, {0x6}, {0x0, 0x3}, {0x7, 0x4}, {0x5, 0x6}, {0x4, 0x4}, {0x4, 0x8}, {0x7}, {0x1, 0x8}, {0x1, 0x4}, {0x5, 0x1}, {0x1, 0x8}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0xa}, {0x1, 0x1}, {0x4, 0xa}, {0x0, 0x5}, {0x1}, {0x6, 0xa}, {0x0, 0x5}, {0x1, 0x1}, {0x4}, {0x0, 0x2}, {0x3, 0x5}, {0x3, 0xa}, {0x6, 0x5}, {0x1, 0x3}, {0x4, 0xa}, {0x0, 0x6}, {0x3, 0x9}, {0x5, 0x7}, {0x0, 0x7}, {0x7, 0x9}, {0x0, 0x8}, {0x3, 0x9}, {0x2, 0x6}, {0x7, 0x2}, {0x6, 0x8}, {0x1, 0xa}, {0x0, 0x2}, {0x4, 0x8}, {0x6, 0x5}, {0x1, 0x3}, {0x6, 0x5}, {0x7, 0x1}, {0x4, 0xa}, {0x1, 0x9}]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x36, 0x12, 0x30, 0xb, 0x66, 0x24, 0x5, 0xb, 0x18, 0x6c, 0x1b, 0x24, 0x1, 0x36, 0xc, 0x4, 0x1, 0x48, 0x2]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100000001}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x82}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x394, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x360, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x12, 0xc, 0x20, 0x3, 0x9, 0x18, 0x24, 0x1b, 0x12, 0x24, 0x1, 0x1b, 0x1b, 0x0, 0x60, 0x48, 0x3]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{}, {0x4, 0x6}, {0x6, 0x4}, {0x7, 0x3}, {0x4, 0x3}, {0x4, 0x4}, {0x6, 0xa}, {0x1, 0x6}, {0x1, 0x2}, {0x2, 0xa}, {0x0, 0x4}, {0x2, 0x10}, {0x5}, {0x6, 0x3}, {0x3, 0x5}, {0x3, 0x9}, {0x4, 0x8}, {0x0, 0xa}]}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x4, 0x7}, {0x7, 0x6}, {0x0, 0x9}, {0x2, 0x3}, {0x0, 0x1}, {0x0, 0x8}, {0x1, 0x8}, {0x1, 0x7}, {}, {0x4, 0x7}, {0x1, 0xa}, {0x4, 0x1}, {0x2, 0x3}, {0x1, 0x2}, {0x7, 0x5}, {0x1, 0x3}, {0x6, 0x4}, {0x0, 0x5}, {0x5, 0x1}, {0x4, 0x9}, {0x1}, {0x3, 0x1}, {0x5, 0xa}, {0x7, 0x1}, {0x7, 0x9}, {0x4, 0x4}, {0x6, 0x6}, {0x3, 0x8}, {0x1, 0x4}, {0x7, 0x6}, {0x5, 0x3}, {0x0, 0xa}, {0x4, 0x4}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6, 0x9, 0xe124, 0xaf8, 0x9, 0x400]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7, 0x9, 0x3, 0x9000, 0x401, 0x4, 0xff]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x30, 0x9, 0xb, 0x1b, 0x69, 0x1, 0xb, 0x3]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x43, 0x2, [{0x4}, {0x7}, {0x0, 0x9}, {0x6, 0x2}, {0x0, 0x3}, {0x5, 0x1}, {0x4, 0x6}, {0x1, 0x8}, {0x2, 0x2}, {0x5, 0x2}, {0x3, 0x8}, {0x0, 0x8}, {0x6, 0x2}, {0x3}, {0x7, 0x8}, {0x7, 0x4}, {0x7, 0x9}, {0x7, 0x3}, {0x5, 0x9}, {0x0, 0x4}, {0x6, 0x7}, {0x5, 0x2}, {0x0, 0x1}, {0x6, 0x8}, {0x1, 0x8}, {0x1}, {0x0, 0x1}, {0x3, 0x5}, {0x5, 0x5}, {0x1, 0x8}, {0x3, 0x8}, {0x4, 0x6}, {0x6, 0x6}, {0x6, 0xa}, {0x2, 0x2}, {0x5, 0x6}, {0x0, 0x8}, {0x3}, {0x2, 0x8}, {}, {0x4, 0x2}, {0x2, 0x4}, {0x6, 0x6}, {0x2, 0xa}, {0x2, 0xf}, {0x7, 0x9}, {0x3, 0xa}, {0x6, 0x5}, {0x0, 0x2}, {0x6, 0x5}, {0x7, 0x1}, {0x3, 0x8}, {0x3}, {0x4, 0x2}, {0x5, 0x9}, {0x0, 0x9}, {0x4, 0x8}, {0x3, 0xa}, {0x5, 0x4}, {0x7, 0xa}, {0x4, 0x8}, {0x4, 0x2}, {0x0, 0x5}]}]}, @NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x30, 0x1, 0x6, 0x1, 0x36, 0x24, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xe616, 0x6120, 0x84, 0x98, 0x5, 0x1ff]}}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x7, 0x6}, {0x5, 0x6}, {0x4, 0x7}, {0x2, 0x9}, {0x0, 0x3}, {0x1, 0x3}, {0x2}, {0x1, 0x8}]}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x4, 0xa}, {0x2, 0x2}, {0x7, 0x5}, {0x1, 0x6}, {0x1, 0x3}, {0x2, 0x8}, {0x6, 0x5}, {0x4, 0x8}, {0x7, 0x5}, {0x3, 0x5}, {0x0, 0x6}, {0x4, 0x3}, {0x5, 0x2}, {0x1, 0x1}, {0x1, 0x8}, {0x4, 0x4}, {0x4, 0x2}, {0x1, 0x4}, {0x1, 0xa}, {0x0, 0x1}, {0x3, 0x2}, {0x2, 0xa}, {0x6, 0x3}, {0x2}, {0x1, 0x9}, {0x3, 0x7}, {0x3, 0xa}, {0x3}, {0x7, 0x7}, {0x0, 0x9}, {0x0, 0x8}, {0x6, 0x9}, {0x6, 0x4}, {0x1}, {0x3, 0xa}, {0x3, 0x8}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x124, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x1b, 0x30, 0x1, 0x36, 0x1b, 0xb, 0x5, 0x6c, 0xb, 0x36, 0x48, 0x30, 0x48, 0x48, 0x1b, 0x60, 0x18, 0x6e]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x4, 0x36, 0x4, 0x3, 0x55, 0x1b, 0x9, 0x18, 0x9, 0x9, 0x30, 0x36, 0x3, 0x24, 0x1b]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x5, 0x3}, {0x5, 0x2}, {0x2, 0x3}, {0x0, 0x3}, {0x2, 0x5}, {0x7, 0x6}, {0x0, 0x6}, {0x7, 0x3}, {0x2, 0x4}, {0x7, 0x8}, {0x2, 0x4}, {0x7}, {0x4, 0x3}, {0x7, 0xa}, {0x0, 0x2}, {0x7, 0x1}, {0x3, 0xa}, {0x2, 0x1}, {0x0, 0x4}, {0x0, 0xa}, {0x7, 0x8}, {0x1, 0x6}, {0x3, 0x9}, {0x6, 0x7}, {0x7, 0x9}, {0x1, 0x5}, {0x2}, {0x5, 0x9}, {0x5, 0x8}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x1, 0x9}, {0x6, 0x9}, {0x5, 0x8}, {0x1, 0x6}, {0x2}, {0x3, 0x5}, {0x3}, {0x4, 0x2}, {0x6, 0x9}, {0x4, 0x6}, {0x7, 0x9}, {0x0, 0x8}, {0x5, 0x3}, {0x3, 0x9}, {0x4, 0x4}, {0x1, 0x3}, {0x4, 0x6}, {0x1, 0x4}, {0x7, 0x8}, {0x5, 0x4}, {0x2, 0x1}, {0x6, 0x5}, {0x6, 0x9}, {0x4, 0x6}, {0x1, 0x9}, {0x3, 0x6}, {0x1, 0x8}, {0x3, 0x3}, {0x3, 0x3}, {0x1, 0x8}, {0x3, 0x9}, {0x4}, {0x0, 0x6}, {0x0, 0x1}, {0x2, 0x4}, {0x1, 0x2}, {0x0, 0x5}, {0x1, 0x5}, {0x7, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x6, 0x6}, {0x7, 0x7}, {0x4, 0x2}, {0x0, 0x3}, {0x4}, {0x1}, {0x3, 0x7}, {0x1, 0x6}, {0x4, 0x8}, {0x4, 0x8}, {0x7, 0xa}, {0x3, 0x9}, {0x3, 0x7}, {0x7}, {0x1, 0x1}, {0x4, 0x9}, {0x3, 0x1}, {0x4, 0x7}, {0x7, 0xa}, {0x0, 0xa}, {0x7, 0x1}, {0x4, 0xa}, {0x1}, {0x6, 0x3}, {0x7, 0x7}, {0x1, 0x4}, {0x4, 0x8}, {0x0, 0xa}, {0x3, 0x3}, {0x0, 0x4}, {0x7, 0x2}, {0x3}, {0x2, 0x9}, {0x1, 0x5}, {0x1, 0x5}]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x6c, 0x2, 0x60, 0x36, 0x9, 0x9, 0x9, 0x6c, 0x4, 0x3, 0x18, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x5, 0x1}, {0x0, 0x6}, {0x2, 0x2}, {0x0, 0xa}, {0x1, 0x3}, {0x0, 0x4}, {0x1, 0x7}, {0x3, 0x7}, {0x2, 0x9}, {0x6, 0x2}, {0x0, 0x2}, {0x5, 0x4}, {0x5, 0x6}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x9}, {0x5, 0x2}, {0x0, 0x3}, {0x0, 0x7}, {0x1, 0x6}, {0x6}, {0x3, 0xa}, {0x6, 0xa}, {0x5, 0x1}, {0x7, 0x9}, {0x7, 0x8}, {0x0, 0x9}, {0x1, 0xa}, {0x5, 0x6}, {0x3, 0x8}, {0x1}, {0x2, 0xa}, {0x1, 0x6}, {0x7, 0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x8}, {0x6, 0x1}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0xf, 0x9, 0x65, 0x12, 0x36, 0x12, 0x60, 0x24, 0x36, 0x2, 0x3, 0x18, 0x24, 0x0, 0x6c, 0x0, 0x30, 0x12, 0x4, 0x30, 0x0, 0x60, 0xb, 0xc, 0x5, 0x12, 0x9]}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x3, 0x3}, {0x1, 0x5}, {0x7, 0x3}, {0x2, 0x8}, {0x0, 0x4}, {0x5, 0x7}, {0x3, 0xa}, {0x6, 0x2}, {0x7, 0x4}, {0x5, 0x7}, {0x4, 0x6}]}]}, @NL80211_BAND_2GHZ={0xd0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x7, 0x4}, {0x0, 0x8}, {0x4}, {0x7}, {0x4, 0x9}, {0x7, 0x5}, {0x4, 0x7}, {0x6, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x5, 0x4}, {0x4, 0x4}, {0x5, 0x3}, {0x1, 0x1}, {0x2}, {0x6, 0x8}, {0x2, 0x3}, {0x5, 0x3}, {0x6, 0x8}, {0x7, 0x4}, {0x5, 0x4}, {0x6, 0x4}, {0x5, 0xa}, {0x0, 0x2}, {0x4, 0x3}, {0x5, 0x8}, {0x0, 0x3}, {0x2, 0x6}, {0x5, 0x7}, {0x2, 0x6}, {0x7, 0x8}, {0x4, 0x6}, {0x0, 0x6}, {0x2, 0x8}, {0x5, 0x6}, {0x3, 0x6}, {0x3, 0x5}, {0x4, 0x9}, {0x5, 0x4}, {0x5, 0x1}, {0x7, 0x7}, {0x4, 0x7}, {0x6}, {0x6, 0x9}, {0x7, 0x6}, {0x3, 0x3}, {0x1, 0x3}, {0x7, 0x7}, {0x0, 0x8}, {0x1, 0x4}, {0x1, 0x5}, {0x1, 0x6}, {0x6, 0x7}, {0x4, 0x6}, {0x1, 0xa}, {0x3, 0x8}, {0x4, 0x5}, {0x1, 0x2}, {0x2, 0x2}, {0x7, 0x7}, {0x7, 0x7}, {0x1, 0x9}]}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x1}, {0x3}, {0x0, 0xa}, {0x2, 0x7}, {0x4, 0x5}, {0x5, 0x5}, {0x0, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x6, 0x7}, {0x5, 0x8}, {0x7, 0x8}, {0x3, 0x8}, {0x0, 0x1}, {0x5, 0x4}, {0x3, 0x2}, {0x7, 0x5}, {0x3, 0x6}, {0x6, 0x4}, {0x5, 0x4}, {0x6}, {0x3}, {0x2, 0x3}, {0x7, 0x3}, {0x0, 0x6}, {0x3, 0x8}, {0x3}, {0x3, 0x1}, {0x0, 0x2}, {0x7, 0x6}, {0x6, 0x1}, {0x2, 0x8}, {0x2, 0x3}, {0x6, 0x6}, {0x4, 0xa}, {0x7, 0x3}, {0x7, 0x1}, {0x0, 0x8}, {0x0, 0x3}, {0x1, 0x8}, {0x0, 0x8}, {0x1, 0x4}, {0x6, 0x1}, {0x5, 0xa}, {0x4, 0x2}, {0x6, 0x5}, {0x6}, {0x2, 0x8}, {0x1, 0x3}, {0x0, 0xa}, {}, {0x5}, {0x0, 0x7}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0xa}, {0x5}, {0x3}, {0x4, 0x5}, {0x1, 0x5}, {0x7, 0x4}, {0x0, 0x5}, {0x1, 0x8}, {0x6, 0x1}, {0x2, 0x6}, {}]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0xb, 0x6, 0x60, 0xb, 0xc, 0x7e, 0x1, 0x60, 0x6c, 0x2, 0xb, 0x1, 0x6, 0x1b, 0x60, 0x1, 0x5]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x2, 0xa}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x16, 0x30, 0xc, 0x16, 0x36, 0x6c, 0xb, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6d}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x100, 0x11d, 0x0, 0x1, [{0x98, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x6c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3a, 0x2, [{0x7, 0x7}, {0x6, 0x6}, {0x6, 0x1}, {0x0, 0x4}, {0x2, 0x5}, {0x1, 0x9}, {0x6, 0x4}, {0x1, 0x7}, {0x1, 0x9}, {0x4, 0x9}, {0x4}, {0x5, 0x2}, {0x2, 0x5}, {0x4, 0x6}, {0x0, 0xa}, {0x1, 0x2}, {0x3, 0x3}, {0x7, 0x9}, {0x4}, {0x5, 0x6}, {0x3, 0x3}, {0x7, 0x8}, {0x1, 0x1}, {}, {0x3, 0x3}, {0x7, 0x3}, {0x7, 0x6}, {0x2, 0x7}, {0x7, 0xa}, {0x7, 0x7}, {0x4, 0x2}, {0x7, 0x6}, {0x7, 0x8}, {}, {0x5, 0x5}, {0x1, 0x4}, {0x0, 0x2}, {0x7, 0x8}, {0x2, 0x6}, {0x2, 0x9}, {0x3, 0x4}, {0x0, 0x7}, {0x6, 0x8}, {0x5, 0x3}, {0x3, 0x3}, {0x5, 0x6}, {0x3, 0x7}, {0x0, 0x6}, {0x6, 0x7}, {0x1, 0x9}, {0x2, 0x7}, {0x5, 0x5}, {0x7, 0x3}, {0x5, 0xa}]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0xc, 0x48, 0x61, 0x2, 0x16, 0x1, 0x24, 0x6, 0x30, 0x36, 0x0]}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x400, 0x5c, 0x40, 0x3, 0x1, 0x0, 0x41e1]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x401}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb3}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffffd}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x260, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xbc}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x10, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7ff}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x204, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1ec, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x9, 0x2, [{0x4, 0x2}, {0x6, 0x8}, {0x5}, {0x1, 0x1}, {0x0, 0x5}]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x12, 0x18, 0x3, 0x1, 0x6c, 0x2, 0x16, 0x6c, 0x30]}]}, @NL80211_BAND_6GHZ={0xac, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x8001, 0x80, 0x5, 0xfffc, 0x2, 0x6, 0xf000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7, 0x9, 0x3ff, 0x6, 0x7ff, 0x0, 0x81]}}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x7, 0x1}, {0x6, 0x5}, {0x0, 0xa}, {0x5}, {0x6, 0xa}, {0x2, 0xa}, {0x3, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x7, 0x3}, {0x1, 0x6}, {0x4, 0x3}, {0x5}, {0x2, 0x9}, {0x2, 0x9}, {0x2, 0x1}, {0x4, 0xa}, {0x6, 0x5}, {0x0, 0x1}, {0x6, 0x5}, {0x1, 0x7}, {0x1, 0x1}, {0x4, 0x4}, {0x1, 0x8}, {0x3, 0x9}, {0x6, 0x2}, {0x0, 0x3}, {0x0, 0x7}, {0x4, 0x6}, {0x1, 0x2}, {0x4, 0x3}, {0x4, 0x8}, {0x6, 0x6}, {0x4}, {0x1, 0x9}, {0x0, 0x1}, {0x1, 0x1}, {0x6, 0xa}, {0x2, 0x7}, {0x3, 0xa}, {0x0, 0xa}, {0x1, 0xa}, {0x1, 0x6}, {0x4, 0x6}, {0x5, 0x4}, {0x5, 0x5}, {0x6, 0x2}, {0x5, 0x6}, {0x5, 0xa}, {0x4, 0x8}, {0x5, 0x4}, {0x5, 0x1}, {0x2, 0xa}, {0x1, 0x4}, {0x5, 0x6}, {0x3, 0x7}, {0x6, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x37f, 0x0, 0x3, 0x8, 0x7173, 0x5, 0xc, 0x80]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x24, 0x24, 0x36, 0x1, 0x3, 0x6c, 0x18, 0x24, 0x24, 0x7b, 0x1b, 0x36, 0x5, 0x0, 0x6, 0x63, 0x30, 0x1b, 0x48, 0x1, 0x1b, 0x30, 0x24, 0x6, 0xc, 0x6, 0x36, 0xc, 0x48, 0x9]}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x6}, {0x2, 0x4}, {0x1, 0x1}, {0x4}, {0x0, 0x2}, {0x6, 0x7}, {0x4, 0x2}, {0x3, 0x3}, {0x1, 0x6}, {0x0, 0x4}, {0x3, 0xa}, {0x2, 0x3}, {0x6, 0x8}, {0x5, 0x8}, {0x1, 0x6}, {0x7, 0x5}, {0x4, 0x6}, {0x3, 0x5}, {}, {0x5, 0x3}, {0x1, 0xa}, {0x5, 0x5}, {0x0, 0x8}, {0x0, 0x7}, {0x4, 0x1}, {0x1}, {0x7, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0xff81, 0x1, 0xfccf, 0x5, 0x9, 0x2, 0x7ff]}}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x4, 0x6}, {0x0, 0x2}]}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x2, 0xa}, {0x5, 0x2}, {0x3, 0xa}, {0x5}, {0x4, 0x6}, {0x3, 0x6}, {0x1, 0x1}, {}, {0x5, 0x4}, {0x3, 0x5}, {0x4, 0x9}, {0x2, 0x7}, {0x0, 0x1}, {0x7, 0x6}, {0x0, 0x7}, {0x6, 0x9}, {0x6, 0xa}, {0x0, 0x5}, {0x7, 0x1}, {0x6, 0x1}, {0x0, 0x4}, {0x7, 0x7}, {0x2, 0x9}, {0x0, 0x3}, {0x7, 0x8}, {0x4, 0x7}, {0x4, 0x2}, {}]}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x4, 0x5]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x6, 0x60, 0x48, 0x1, 0x3, 0x9, 0x60, 0x1, 0x3, 0x48, 0x30, 0x30, 0x60, 0xc, 0x1b, 0x16, 0x4, 0xc, 0x5, 0x2, 0x53, 0x30, 0x24, 0x2, 0xb9ed3cca1b1c13be, 0x36, 0x9, 0x12, 0x18, 0x48, 0xb]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x6, 0x41, 0xc, 0x48, 0x3, 0x16, 0x3e, 0x48, 0x16, 0x1e, 0x9, 0x12, 0x1b, 0x4]}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x4, 0x1f, 0x5, 0x6, 0xc67, 0x1b46, 0xc2ca]}}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xae}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}]}, 0xb14}, 0x1, 0x0, 0x0, 0x4008880}, 0x20044010) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000680)={r4, 0x9, 0xffff}) [ 1282.881858] loop5: detected capacity change from 0 to 10 [ 1282.885765] loop6: detected capacity change from 0 to 274 [ 1282.926357] loop3: detected capacity change from 0 to 274 [ 1282.949563] FAT-fs (loop5): Directory bread(block 137) failed [ 1282.950512] FAT-fs (loop5): Directory bread(block 138) failed [ 1282.960974] FAT-fs (loop5): Directory bread(block 139) failed [ 1282.962960] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1282.964139] FAT-fs (loop3): Filesystem has been set read-only [ 1282.968122] FAT-fs (loop5): Directory bread(block 140) failed [ 1282.969052] FAT-fs (loop5): Directory bread(block 141) failed [ 1282.980958] FAT-fs (loop5): Directory bread(block 142) failed [ 1282.987573] FAT-fs (loop5): Directory bread(block 143) failed [ 1283.001644] FAT-fs (loop5): Directory bread(block 144) failed [ 1283.011100] FAT-fs (loop5): Directory bread(block 145) failed [ 1283.015167] FAT-fs (loop5): Directory bread(block 146) failed [ 1283.026515] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 1283.027580] FAT-fs (loop6): Filesystem has been set read-only [ 1283.028840] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 1283.030070] FAT-fs (loop5): Filesystem has been set read-only 17:27:02 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r2 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x2000) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) 17:27:02 executing program 4: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x9) 17:27:02 executing program 7: r0 = semget$private(0x0, 0x1, 0x0) semctl$SEM_STAT_ANY(r0, 0x0, 0x14, &(0x7f0000001040)=""/113) semctl$SETVAL(r0, 0x2, 0x10, &(0x7f0000000000)=0x3) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)=[0x8, 0x9, 0x7, 0x7, 0x9, 0x200, 0xed, 0x2, 0x7]) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:27:02 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100), 0x0, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:27:02 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x3) 17:27:02 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e2020202020", 0x27, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:27:02 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:27:02 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r0 = shmget(0x2, 0x2000, 0x400, &(0x7f0000ffe000/0x2000)=nil) r1 = shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x0) shmdt(r1) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/160) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) 17:27:02 executing program 4: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x9) [ 1283.273764] loop6: detected capacity change from 0 to 274 17:27:02 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x6000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:27:02 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000000)=""/129) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) [ 1283.277976] loop3: detected capacity change from 0 to 274 17:27:02 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r2 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x2000) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) [ 1283.311673] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1283.312991] FAT-fs (loop3): Filesystem has been set read-only [ 1283.398375] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 1283.399452] FAT-fs (loop6): Filesystem has been set read-only 17:27:02 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:27:02 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x7000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) mlock(&(0x7f0000ffa000/0x2000)=nil, 0x2000) 17:27:02 executing program 4: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x9) [ 1283.488283] loop5: detected capacity change from 0 to 1 [ 1283.500030] FAT-fs (loop5): Directory bread(block 5) failed [ 1283.504109] FAT-fs (loop5): Directory bread(block 6) failed [ 1283.506049] FAT-fs (loop5): Directory bread(block 7) failed [ 1283.508295] FAT-fs (loop5): Directory bread(block 8) failed [ 1283.514092] FAT-fs (loop5): Directory bread(block 5) failed [ 1283.517047] FAT-fs (loop5): Directory bread(block 6) failed [ 1283.520569] FAT-fs (loop5): Directory bread(block 7) failed [ 1283.521278] FAT-fs (loop5): Directory bread(block 8) failed [ 1283.523372] FAT-fs (loop5): Directory bread(block 5) failed [ 1283.525799] FAT-fs (loop5): Directory bread(block 6) failed 17:27:12 executing program 4: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2002, 0x17) 17:27:12 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:27:12 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)='\x00'/19, 0x13, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:27:12 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e2020202020", 0x27, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:27:12 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000000)=""/129) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:27:12 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x8000) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x17) shmctl$IPC_RMID(0x0, 0x0) 17:27:12 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40284504, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x4000) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000000)=[0x80e1, 0x8]) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) 17:27:12 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r2 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x2000) shmctl$IPC_RMID(r1, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) [ 1293.670843] loop5: detected capacity change from 0 to 1 [ 1293.682785] FAT-fs (loop5): Directory bread(block 5) failed [ 1293.683443] FAT-fs (loop5): Directory bread(block 6) failed [ 1293.687985] FAT-fs (loop5): Directory bread(block 7) failed [ 1293.688931] FAT-fs (loop5): Directory bread(block 8) failed [ 1293.698702] FAT-fs (loop5): Directory bread(block 5) failed [ 1293.700377] loop6: detected capacity change from 0 to 274 [ 1293.702060] FAT-fs (loop5): Directory bread(block 6) failed [ 1293.705550] FAT-fs (loop5): Directory bread(block 7) failed [ 1293.706168] FAT-fs (loop5): Directory bread(block 8) failed [ 1293.712228] FAT-fs (loop5): Directory bread(block 5) failed [ 1293.713971] loop3: detected capacity change from 0 to 274 [ 1293.715293] FAT-fs (loop5): Directory bread(block 6) failed 17:27:12 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ff8000/0x5000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r2 = shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r2) r3 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r4 = shmat(r3, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r4) r5 = shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ffc000/0x4000)=nil) r6 = shmat(r5, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r6) r7 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r8 = shmat(r7, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r8) shmat(r7, &(0x7f0000ffc000/0x4000)=nil, 0x6000) r9 = shmat(r7, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmdt(r9) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:27:12 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/53) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x17) [ 1293.754315] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1293.755792] FAT-fs (loop3): Filesystem has been set read-only 17:27:12 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:27:12 executing program 7: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) r2 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r3 = shmget(0x0, 0x4000, 0x1, &(0x7f0000ff9000/0x4000)=nil) r4 = shmget(0x2, 0x2000, 0x20, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_STAT_ANY(r4, 0xf, &(0x7f0000000000)=""/152) shmat(r3, &(0x7f0000002000/0x3000)=nil, 0x1000) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0x6000) shmat(r2, &(0x7f0000002000/0x4000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) [ 1293.815973] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 1293.817202] FAT-fs (loop6): Filesystem has been set read-only 17:27:21 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000000)=""/129) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:27:21 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) shmget$private(0x0, 0x4000, 0x40, &(0x7f0000ffa000/0x4000)=nil) shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) 17:27:21 executing program 7: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget(0x3, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:27:21 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e2020202020202020", 0x2a, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:27:21 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ff8000/0x5000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r2 = shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r2) r3 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r4 = shmat(r3, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r4) r5 = shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ffc000/0x4000)=nil) r6 = shmat(r5, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r6) r7 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r8 = shmat(r7, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r8) shmat(r7, &(0x7f0000ffc000/0x4000)=nil, 0x6000) r9 = shmat(r7, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmdt(r9) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:27:21 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)='\x00'/19, 0x13, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:27:21 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:27:21 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r2 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x2000) shmctl$IPC_RMID(r1, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) [ 1302.371305] loop5: detected capacity change from 0 to 10 [ 1302.373712] loop3: detected capacity change from 0 to 274 [ 1302.393714] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1302.394379] FAT-fs (loop3): Filesystem has been set read-only [ 1302.424446] loop6: detected capacity change from 0 to 274 17:27:21 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000000)=""/129) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:27:21 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)='\x00'/19, 0x13, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:27:21 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:27:21 executing program 7: r0 = shmget$private(0x0, 0x13000, 0x10, &(0x7f0000fed000/0x13000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) [ 1302.508333] loop3: detected capacity change from 0 to 274 [ 1302.525880] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1302.526595] FAT-fs (loop3): Filesystem has been set read-only [ 1302.529089] loop5: detected capacity change from 0 to 10 17:27:21 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 17:27:21 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ff8000/0x5000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r2 = shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r2) r3 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r4 = shmat(r3, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r4) r5 = shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ffc000/0x4000)=nil) r6 = shmat(r5, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r6) r7 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r8 = shmat(r7, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r8) shmat(r7, &(0x7f0000ffc000/0x4000)=nil, 0x6000) r9 = shmat(r7, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmdt(r9) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:27:21 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r2 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x2000) shmctl$IPC_RMID(r1, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) [ 1302.554765] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 1302.556165] FAT-fs (loop6): Filesystem has been set read-only 17:27:21 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)='\x00'/29, 0x1d, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:27:21 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500), 0x0, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) [ 1302.644203] loop5: detected capacity change from 0 to 10 [ 1302.646866] loop3: detected capacity change from 0 to 274 [ 1302.662989] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1302.663736] FAT-fs (loop3): Filesystem has been set read-only 17:27:30 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ff8000/0x5000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r2 = shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r2) r3 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r4 = shmat(r3, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r4) r5 = shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ffc000/0x4000)=nil) r6 = shmat(r5, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r6) r7 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r8 = shmat(r7, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r8) shmat(r7, &(0x7f0000ffc000/0x4000)=nil, 0x6000) r9 = shmat(r7, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmdt(r9) 17:27:30 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000000)=""/129) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:27:30 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e2020202020202020", 0x2a, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:27:30 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)='\x00'/29, 0x1d, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:27:30 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500), 0x0, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:27:30 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x1000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 17:27:30 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r2 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r1, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) 17:27:30 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x40, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ffc000/0x4000)=nil) r2 = shmget(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmat(r2, &(0x7f0000ffd000/0x3000)=nil, 0x7000) shmctl$IPC_RMID(r1, 0x0) r3 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r3, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r3, 0x0) [ 1311.867028] loop6: detected capacity change from 0 to 274 [ 1311.892264] loop5: detected capacity change from 0 to 10 [ 1311.895191] loop3: detected capacity change from 0 to 274 [ 1311.941052] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1311.942404] FAT-fs (loop3): Filesystem has been set read-only 17:27:31 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ff3000/0xa000)=nil, 0x1000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) [ 1311.980227] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 1311.981393] FAT-fs (loop6): Filesystem has been set read-only 17:27:39 executing program 0: mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x300000, &(0x7f00000000c0)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@sq={'sq', 0x3d, 0x240000000000000}}, {@sq={'sq', 0x3d, 0x4a}}, {@common=@cache_loose}, {@sq={'sq', 0x3d, 0x3}}, {@sq={'sq', 0x3d, 0x1f}}, {@timeout={'timeout', 0x3d, 0x4}}], [{@dont_appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x34, 0x36, 0x65, 0x66, 0x65, 0x8, 0x39], 0x2d, [0x34, 0x36, 0x64, 0x36], 0x2d, [0x64, 0x63, 0x32, 0x66], 0x2d, [0x31, 0x36, 0x62, 0x37], 0x2d, [0x30, 0x65, 0x66, 0x61, 0x30, 0x34, 0x37, 0x37]}}}, {@subj_role={'subj_role', 0x3d, '@'}}]}}) r0 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) shmdt(r0) 17:27:39 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffa000/0x3000)=nil) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:27:39 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500), 0x0, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:27:39 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r1, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) 17:27:39 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ff8000/0x5000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r2 = shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r2) r3 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r4 = shmat(r3, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r4) r5 = shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ffc000/0x4000)=nil) r6 = shmat(r5, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r6) r7 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r8 = shmat(r7, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r8) shmat(r7, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmat(r7, &(0x7f0000ff9000/0x4000)=nil, 0x0) 17:27:39 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000000)=""/129) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:27:39 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)='\x00'/29, 0x1d, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:27:39 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e2020202020202020", 0x2a, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 1320.623125] loop5: detected capacity change from 0 to 10 [ 1320.676449] loop3: detected capacity change from 0 to 274 [ 1320.684995] loop6: detected capacity change from 0 to 274 17:27:39 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc", 0x2e, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) [ 1320.717770] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1320.718393] FAT-fs (loop3): Filesystem has been set read-only 17:27:39 executing program 7: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:27:39 executing program 0: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xcc9}}, './file0\x00'}) r1 = syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0/file0\x00', 0xff, 0x3, &(0x7f0000000340)=[{&(0x7f0000000100)="f8aef0bd6d6d028858fc22b263429134af9914e053f679f64d3fa4755aab442033b9f549f55d35b9a255726429fffb458a8a94ea3130aac076d50068fbf5f7393b0d3ceddf474167797dddc9af444335331ef83bcbb966b9e4257b4c977b97d6d87e5a6049d3fca3eef73d0a4631aaf7d6e7bda91e3a5f8df206b82fd280a2a49e131c94e1cdc22147ae74e4b95ebaf54e6c157a75f52d26c4010eed73a856ac525eb62e392e719d1b", 0xa9, 0x9}, {&(0x7f00000001c0)="e8cb1dc53d090a3fd76c3189ba4145577a794573d1748d9216378eff745a1ad48b78715a7daac070651c8d68d5dd90308a7a172de2cc5a929a5b71ba357ac4bd5d9740b45efeabf49d8c42df7b1a81bac59cee1c4e1830d145067da70e06cefbacb0f928ae565b773f8b0644982adef615d9663dd7b1857793557f6a5574b11c3eefc3ea5680c2da9b4be36c6a36e676d745fd1d4dbbe2e0b7958faab93930adfaf029d017ceb553a41f1554eefbb022922ce0b5d3a95e9c5eee3be039ae829d948d0f46c320687820557d31d2094f6b3d74f7402e55", 0xd6, 0x800000000}, {&(0x7f00000002c0)="b2dd10df5bc7df0d04b807b1c50c48323c6c73aefa32dd70c164df05088cc00d8fa00d07a8549e96375accdb391d9e1111b395d3c0a4ea0442d88a2a2f5c5a875677397a2b31b2dbf1a27ca39b8e78a256e664bfe150e1c86e5d522bbd61ddd30bf33052c8", 0x65, 0x6}], 0x400, &(0x7f00000003c0)={[{@sbsector={'sbsector', 0x3d, 0x5}}], [{@smackfshat={'smackfshat', 0x3d, '-'}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, '@'}}]}) execveat(r1, &(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000500)=[&(0x7f0000000480)='([.#*\x00', &(0x7f00000004c0)='@$}\x00'], &(0x7f0000000580)=[&(0x7f0000000540)='{[\x00'], 0x56522d4d45c7108d) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x4, @mcast1, 0x8}, 0x1c) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r0, @out_args}, './file0/file0\x00'}) sendmmsg$inet6(r2, &(0x7f0000001b00)=[{{&(0x7f0000000600)={0xa, 0x4e23, 0x6, @private0, 0x81}, 0x1c, &(0x7f0000000e40)=[{&(0x7f0000000640)="b9a731ce4fdaf6d15f2870d9161f1ceb55a49694e6a0bf19fdbea30947878296d16009507d655b64af7ab4989755e7df2c9c832497e60dfa6e517c5142842e97d6226ac795e7f8713ff1fa0377f64891b9fcafffff256a93cd5cf8f3d422a016615cfa486ef1c3fbde35d77d088c706b3f9e65b8892669a95e8cf63be782a3eaf5affa0576a0b6e907feb44b12da242d6538", 0x92}, {&(0x7f0000000700)="66ba232ae855498cfc3f105c0f73056f49751f3a6cfab63b305166f594e490c30c2b65d3acebbb53d32151b290e8e07311a11c5b12d3af305a3b5d1ac9ea71988ee905e883bf70fab952ee0e47b6e11f90d955135ced98909599570c6ba37476443a22e4e3e531c533015b6eba093d9a0da51a742d8667d27656b0ff23de1845261ff3eface353b9ceb4ab950fddc741e191e9e9158c585deca797eac05bba720f923b1a83231234f54322bf664b06c12b731d413172e4c962d9acc9a82cba33d25cefb16e47a34b62e3f03357a9", 0xce}, {&(0x7f0000000800)="364aef953c06f88d2a51db6ea42d85db6571f61112483f6c6c7574cb5f72482a347151b32a8c73424e7f24124e0b162a368aa9ace8b88eeb654e5cc1920554469f354f5b9b303b2e78e2abea88155c55ad35018a4ec22498827c235672b89cb63d7d2d9df6519b94a1964bb0309fcc405461c79ce4d6672c35b89ad341d5b2774501e6a47ea5787c16ed06f8e173dece6fc7a50827b8cc6922575e0cfe2525c4ea034145a51ef6a42a5cc88a70be4676b559f078694315eeb1a480ee00a6655cf355992fd6589f2a34ed5ba833c1f09dcb3f80272fe365aeb47a1080", 0xdc}, {&(0x7f0000000900)="2eb69e6fc6d0c3be10f8a8b74be41abc19b64a23e6294def96f593", 0x1b}, {&(0x7f0000000940)="7b942aa4bc1822475dc2674e3995caeb90b571f63308929e838d7a24fbb2e5be2292e13f14ecaaa9aa9d264b9811f7eff6585624a2c2ce046d10a2da24a18edae3f30f9b767ca4af60afd77c1e4b0cc1912bbfd96d91484e7053db45d93ea633f6071f518b6ad908564f9504c21a880ffbde055f9c09", 0x76}, {&(0x7f00000009c0)="d33f7f964545b5a74082295c5f7ce8f6b18b599af018d20f3c6d9b6fea3bee0aa1b88c72fc7afe50bc53edaa33a0bf62e81dcf17ec429dc1325029beaf2d01f9f217f6dcecb06be4d0e793106cc327999d504bcb6e6a6098354f61dcd858a0d012f2194235118a5251c9f3df9c6ebfbf78fe05c1e5b3f5b6d055509a8254f795f6c06b6762c1887f2761332a77aa4dfcc34547f4b63213bba1b31d9369fc75012b7713e34872912c71465be04995eafc7034120ebc0da03132241c5a9810bdde9fe1480afe5dfeb122cc7366d335b2cdd0ea4fa4cccd480eb550ff4de4c3", 0xde}, {&(0x7f0000000ac0)="93c8b076f521726e6109c902cd4e46fe7d2d2148e3d3b8d16c91479c7d2147c3bc0a788d79fb57261376b14f34b04c2021bea3a89350ccd1770dd308483576e116dab65c831e2655dca3eaca856c2939199a375c84905aa66a88ef348163e4fb6b99f36d5efa39776fce575ba67f9c8d93ad418c1d50372424495bad509a8fc5d309e69faf40130f7a50488056fe194c28df203b17856820c19199e8c3268c299a5663cee4d81b7abb5992e02773ee3a211d34f1d27fcef6ddbb24a2e0ed63ea74eac8", 0xc3}, {&(0x7f0000000bc0)="78189508b7c33f54152c5f656e8c7b3482ca3d86db07787850aa25af228ffc99bb60e9c38c2068d37cef98890056e377bacad816974dfd82a164c57da39f4348dd385a0c176f2c200a6211cd5d7a6185d6e46495125ba151dcc12279df070705669911817df14627bf6e0f541c707d7054ad4bb5397f53a2c1effb465f31837744db6ded8977b8a8e44d5e3525c31d154ae62f49343218f6bf057ff3d9de8f7b977af7f6f3c93cd8b279002db47c7d5ad83fd60bd87b348452db0c29f38642c591ba4d80a8d896474b1a1f6efafe72bf7d81abe93a846f619f", 0xd9}, {&(0x7f0000000cc0)="db9a3a6742bb0e6bc539a7260fa9f9b142a56ba60b6ba47909bfe121650630fe09e55db64fb68aed28e8ca7a8ab436405833444f0ec77971e1106310660745a29a8016ce864bbd1c2349c738f14fafe694d585b36911b18445e117feca3c5affebc1de639f1cfe028e419afa45e7abba34d6b2ffea9156ed7514e52d4b8276f515cf0c8df61d3f45dfa8469dc211d33035eda738378bb66b198dae", 0x9b}, {&(0x7f0000000d80)="b71a53796e2e922021b1896f312172ac3e9f132d7a912d95dbbad24cbfb36b78160eab1be49083aceff94c02815ff43c32a03cbcb2484c040b3e9371eb849c6e8379bb2e77d480ecb6875a0c2c81a5749aafd287d70e9608c72088f00d0d2961f5d6cb7d1d9915592495b3c0f0989bb96b10f85f2a950eac44fda0469c8b227a43ec1fa0a0a51d7a3afbd4b03e7daef8b4718b273695da74ffe59b7982593f5d", 0xa0}], 0xa, &(0x7f0000000f00)=[@dontfrag={{0x14, 0x29, 0x3e, 0x1}}, @pktinfo={{0x24, 0x29, 0x32, {@private0={0xfc, 0x0, '\x00', 0x1}}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xffffffff}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x3b, 0x6, 0x0, 0x8, 0x0, [@dev={0xfe, 0x80, '\x00', 0x30}, @remote, @dev={0xfe, 0x80, '\x00', 0x3d}]}}}], 0xa0}}, {{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000fc0)="69fb5aaae7e48191048e5834a31a4c57209748e7c0f6c032866399204e438b82612a145f2ab77037f029f96a36b9fe87f1d386382ae23e567657ca87a1f32aff6cca157d4573880ca0bb74e8420155ed545e2116b611a743c218e25e85892fd998aaf2abc3a0e9389ecc82cba1ef07aeaeed70a0baf9e155ff1cea04f650984099f25b87961b99e893687f45a259c8ccb6af9d1aad45ef88dac20f05a237c7dd1f4f0422a8f8689cfa79e4f485127709349159bb22", 0xb5}, {&(0x7f0000001080)="ecc74f28f4a7bd32c0cd745ecbb71b52c7f1d90a725246619aad4d362ac1001819473afcb3a290ab0d7ffd5a3de8b9201fb90cd29d7503458eba0c69eb63744e749162e46a000a70e8b9b21bfa2aa7e23bbff291f17b1e14c5cf029f4d8165985f8ada1650c664138f12e6f7ce55cb45e5f0754aa49425a3812c676f5f16784e9a9045f76dc4fb998237bb32f25eb9f15660e920751707102db74c8b725b43949a97d9b32d21a99c8b176ff547ecfe4f7cf9a399c99f16deff604ba9c61719586730eca37d2b5e38d0219aaf3fcd", 0xce}, {&(0x7f0000001180)="2cb1c5bfc99d58f4056a719641367d7916146e3eef5c492baaeccfbae901a1d027c61b4435a8b261bbbd889c6326e0717a659a7ce01ea38bd906f36bf42fcfdc83d017487d98cb3fea2e6934963539ebdd4afda0261337fa3567b94722212bae27f37efa53e82c3630f941475c8859c53d3346ce722542c33db2c0db778baae34f0562c905798cca28166f38db331b3a9b480a54e3b42d91225fe9052c336a174ed2b76d55add467f19e8b0b82ce7ae61414e18e090279a9ba19c0fe50d4bafbf40c1d191333299767f18da690496a1c6ee0832f26cc700b87623470f4ed4723f2cb7cce7a79ca", 0xe7}], 0x3}}, {{&(0x7f00000012c0)={0xa, 0x4e20, 0x9, @mcast1, 0x2}, 0x1c, &(0x7f0000001340)=[{&(0x7f0000001300)="81609b235d7bb3500c56", 0xa}], 0x1, &(0x7f0000001380)=[@dstopts_2292={{0x168, 0x29, 0x4, {0x2e, 0x29, '\x00', [@generic={0x4, 0x82, "b0e41f4dd639edfe566f93ddb0a74dc1a3e1622cc3bab3854ba4740f415d54678128859cc5acf346078a838ecd91fb79c1ed4d4a2eebc788c768e1be32bd9a72c484ce7fc8a16a22ed5768f2c9e7984f14fe36aafbedbd2d96b5c131087b3b52a139b0f983d2aa31b958457c5ad41df9d567d34577723377f90a87373a5a3f87e227"}, @jumbo={0xc2, 0x4, 0x1}, @hao={0xc9, 0x10, @mcast2}, @ra={0x5, 0x2, 0x2e7}, @calipso={0x7, 0x50, {0x1, 0x12, 0xb9, 0x6, [0x8000, 0x2, 0x1000, 0x9, 0x2, 0x40, 0x9, 0x3, 0x4]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @empty}, @calipso={0x7, 0x40, {0x1, 0xe, 0x9, 0x40, [0x6, 0x3, 0x20, 0x75, 0xb9, 0x3, 0x9]}}]}}}, @hopopts={{0x128, 0x29, 0x36, {0x2e, 0x21, '\x00', [@generic={0x3, 0xf4, "0b27b4e76e12a12c78192f68c81742088fdfb1a8bd5e4c4feabb520ea1a9fe2e9842de03f69997c332e9bc5fee2baab98f15a9325a9c8d47910539b237280b0806bb4cf8dfb5d960dcb3b21e74d4680afd00d77b23b3d972cb5e7493c439c3ef0560916bfe3845ae9977e90733da1064c997a322fb424ac077a253772488a8bc795d8d19d7571146e170d23f834299a0accc30f374a5d045d9412937eb4da59438fc1e692b6738b5257cd412cee675ff7baf1c829950c0a27c97b14e44f9b9bcc7ea6aad1f721953b4b37bcdb59ff72cdce940a49ba3b47572f108f5fa7ba5d650543133188909edc8897ba25dbd308170619481"}, @jumbo, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0x1}, @pad1, @enc_lim={0x4, 0x1, 0x7}]}}}], 0x290}}, {{&(0x7f0000001640)={0xa, 0x4e22, 0x23, @local, 0x4}, 0x1c, &(0x7f00000018c0)=[{&(0x7f0000001680)="a50c345b22621f5f65e74d5f6391bcf53fe53ac8b548ef3c38b4b25de40eef46315a0e5bbcbad8f027", 0x29}, {&(0x7f00000016c0)="e6de0c49f4b9645a6b3677496c2ac4922fa9ff7de6daa0d1e72cbbeb74a1253d5f443fcf3128457a03ad9bfeb214c68fe9830ab2a135d51011964d2d8af8262f83fa4568afd43abad7d35697d657c81eb0a23b86070a4aa5733eefdf443280f1135c2091fba1d6a82fc7bcddd3c1278eb5114aca29b4d10b8dccdce010f5e577c0c62e76ef", 0x85}, {&(0x7f0000001780)="ac0e28a3322135f2f6e6290d7273ad5c594756199bf3426525ff3c607f1719af5881c255f40fabdfe0b51e0296a03765f620660c7d4ef0de9ae9b01f4f8ac97113a4d459db764640d4e257d3a334fac17d0794cde55d", 0x56}, {&(0x7f0000001800)="1d98d72b9eafd8cba682ac39ebd0e826bb9ba44d541ac2903e931286a82fb0fbb7365a062b50d0cb52afe418dc3b0098880a846224222c71ad3e06281ed382f07bf8ea3938e9427ae65a542e53a51bd6f70771b9ee8834a5ad672b135b46212c76ca9bb8dae70c391d9f53e8d6f105e45d5a211c61f2ae8e3fdd5498aed2ecd1891407e47c9d0edf362df53fd5", 0x8d}], 0x4, &(0x7f0000001900)=[@rthdrdstopts={{0x28, 0x29, 0x37, {0x2e, 0x1, '\x00', [@padn={0x1, 0x1, [0x0]}, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0x8}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback}}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @tclass={{0x14, 0x29, 0x43, 0x6}}, @flowinfo={{0x14, 0x29, 0xb, 0x7}}, @dstopts={{0xc0, 0x29, 0x37, {0x0, 0x14, '\x00', [@calipso={0x7, 0x38, {0x2, 0xc, 0x3f, 0x6, [0xff, 0x401, 0x800, 0x100, 0x100, 0x0]}}, @calipso={0x7, 0x40, {0x1, 0xe, 0x8, 0x1f, [0xffff, 0x9, 0xf000000000000000, 0x0, 0x2a4, 0x4, 0x1]}}, @calipso={0x7, 0x28, {0x2, 0x8, 0x1, 0xffff, [0xfffffffffffffffd, 0x40000000000, 0xe55, 0x2]}}]}}}, @rthdr={{0x38, 0x29, 0x39, {0x84, 0x4, 0x2, 0x5, 0x0, [@private2, @private1={0xfc, 0x1, '\x00', 0x1}]}}}, @hopopts={{0x30, 0x29, 0x36, {0x32, 0x2, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x7}, @enc_lim={0x4, 0x1, 0x25}, @ra={0x5, 0x2, 0xa674}]}}}], 0x1e8}}], 0x4, 0x8010) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) 17:27:39 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r1, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) [ 1320.756328] loop5: detected capacity change from 0 to 10 17:27:39 executing program 2: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/129) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:27:39 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ff", 0x22, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:27:39 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) r1 = shmget(0x2, 0x1000, 0x78000000, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x3000)=nil, 0x3000) [ 1320.809097] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 1320.810374] FAT-fs (loop6): Filesystem has been set read-only 17:27:39 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(0x0, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) 17:27:39 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ff8000/0x5000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r2 = shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r2) r3 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r4 = shmat(r3, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r4) r5 = shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ffc000/0x4000)=nil) r6 = shmat(r5, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r6) r7 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r8 = shmat(r7, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r8) shmat(r7, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 17:27:39 executing program 0: r0 = shmget(0x3, 0x4000, 0x78000000, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) 17:27:40 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc", 0x2e, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) [ 1320.940234] loop3: detected capacity change from 0 to 274 17:27:40 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e202020202020202020", 0x2b, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 1320.982715] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1320.984108] FAT-fs (loop3): Filesystem has been set read-only 17:27:40 executing program 2: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/129) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:27:40 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x8000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) 17:27:40 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(0x0, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) 17:27:40 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ff8000/0x5000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r2 = shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r2) r3 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r4 = shmat(r3, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r4) r5 = shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ffc000/0x4000)=nil) r6 = shmat(r5, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r6) r7 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r7, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r7, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 17:27:40 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ff", 0x22, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 1321.107429] loop6: detected capacity change from 0 to 274 17:27:40 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc", 0x2e, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) [ 1321.208144] loop5: detected capacity change from 0 to 10 [ 1321.221587] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 1321.222722] FAT-fs (loop6): Filesystem has been set read-only [ 1321.278205] loop3: detected capacity change from 0 to 274 [ 1321.307254] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1321.308499] FAT-fs (loop3): Filesystem has been set read-only 17:27:49 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ff", 0x22, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:27:49 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:27:49 executing program 7: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r0 = shmget(0x0, 0x3000, 0x4, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:27:49 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ff8000/0x5000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r2 = shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r2) r3 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r4 = shmat(r3, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r4) r5 = shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ffc000/0x4000)=nil) r6 = shmat(r5, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r6) r7 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r7, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 17:27:49 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(0x0, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) 17:27:49 executing program 2: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/129) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:27:49 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r0 = shmget$private(0x0, 0x1000, 0x8, &(0x7f0000fff000/0x1000)=nil) shmat(r0, &(0x7f0000ff4000/0xc000)=nil, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) 17:27:49 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e202020202020202020", 0x2b, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 1330.897072] loop5: detected capacity change from 0 to 10 [ 1330.909513] loop6: detected capacity change from 0 to 274 [ 1330.923257] loop3: detected capacity change from 0 to 274 17:27:50 executing program 0: ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000000)="fd7e0a08bbf880bfc95a7c966f295a604e0494b2ca28c1b4471d77e7beeffa2b3d489b2edd9e8e2532f0171931975321ac14e4fe5f55b78d76ac9b161237576ff2ab3e4327f622dc41416d21373f04641f32d666820099dce17a830ffd7dc7b3020f8c874135aa79be7bb0e22f3e0866307e935583084dcda1adb5358a79bfb4b7407947e1c14308cd53d182ea0d34de7bec8b9dd165d0e5ed283bfd3704e6fa94d129eb8b1a843085a920b4788b41d5544cca52b7bada25ffacfacf273cab2cca55f62e3e69b52eef8f0b2784c0f2358e067218") shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) [ 1330.961110] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1330.961852] FAT-fs (loop3): Filesystem has been set read-only [ 1331.041534] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 1331.042988] FAT-fs (loop6): Filesystem has been set read-only 17:28:00 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:28:00 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r0, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) 17:28:00 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e202020202020202020", 0x2b, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:28:00 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ff8000/0x5000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r2 = shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r2) r3 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r4 = shmat(r3, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r4) r5 = shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ffc000/0x4000)=nil) r6 = shmat(r5, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r6) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 17:28:00 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:28:00 executing program 0: shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ff9000/0x4000)=nil) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r0, &(0x7f0000ff0000/0x4000)=nil, 0x7000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) 17:28:00 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00", 0x24, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:28:00 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0xfa10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r2) getsockopt$sock_buf(r2, 0x1, 0x1f, &(0x7f0000000080)=""/52, &(0x7f00000000c0)=0x34) r3 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r3, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r4 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) dup(r4) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) shmat(r3, &(0x7f0000ffc000/0x2000)=nil, 0xc000) [ 1341.473175] loop5: detected capacity change from 0 to 10 17:28:00 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:28:00 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) [ 1341.531857] loop3: detected capacity change from 0 to 274 [ 1341.533137] loop6: detected capacity change from 0 to 274 [ 1341.562793] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1341.563987] FAT-fs (loop3): Filesystem has been set read-only 17:28:00 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ff8000/0x5000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r2 = shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r2) r3 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r4 = shmat(r3, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r4) r5 = shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ffc000/0x4000)=nil) r6 = shmat(r5, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r6) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) [ 1341.611223] loop5: detected capacity change from 0 to 10 17:28:00 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r0, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) 17:28:00 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x1000) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xc) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) 17:28:00 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:28:00 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00", 0x24, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 1341.687360] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 1341.688671] FAT-fs (loop6): Filesystem has been set read-only 17:28:00 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70", 0x50, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:28:00 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ff8000/0x5000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r2 = shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r2) r3 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r4 = shmat(r3, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r4) r5 = shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ffc000/0x4000)=nil) r6 = shmat(r5, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r6) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 17:28:00 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x6000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) r1 = shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ffb000/0x4000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r1, &(0x7f0000ffc000/0x1000)=nil, 0x2000) shmat(r1, &(0x7f0000ffc000/0x1000)=nil, 0x6000) 17:28:00 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:28:00 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) [ 1341.810938] loop3: detected capacity change from 0 to 274 [ 1341.849718] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1341.850928] FAT-fs (loop3): Filesystem has been set read-only [ 1341.889420] loop6: detected capacity change from 0 to 10 [ 1341.895165] FAT-fs (loop6): invalid media value (0x00) [ 1341.895644] FAT-fs (loop6): Can't find a valid FAT filesystem 17:28:09 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r0, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) 17:28:09 executing program 7: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget(0x0, 0x12000, 0x1, &(0x7f0000fee000/0x12000)=nil) shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) r0 = shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ff6000/0x2000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/61) madvise(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xc) 17:28:09 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:28:09 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70", 0x50, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:28:09 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ff8000/0x5000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r2 = shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r2) r3 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r4 = shmat(r3, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r4) r5 = shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ffc000/0x4000)=nil) shmat(r5, &(0x7f0000ffb000/0x2000)=nil, 0xf000) r6 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r6, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 17:28:09 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00", 0x24, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:28:09 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:28:09 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000640)={'raw\x00', 0x7b, "bff76afdb6f5a19d3fb01ae57d723b0244de1451bd5013b99a2f650aa4556a42eda16d7f7b3147164b9d52b9322aa6781ce55a2ab8c9fac029ba8ead3d9757675f8990940e455deeffa8a71e90891318b9bf1b7fbe592f0a605f1b606bdfab4e150fc9754c1b7f36b746dc560b2ff05750d12adb49d3ee7191bdc6"}, &(0x7f0000000700)=0x9f) r1 = dup(r0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000005080)={@private0, @loopback, @empty, 0x3, 0x8, 0x5, 0x0, 0x8, 0x40008000}) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x1000, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r1) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r3, &(0x7f0000005040)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000005000)={&(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="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"], 0x47f8}, 0x1, 0x0, 0x0, 0x40004}, 0xc080) ioctl$INCFS_IOC_FILL_BLOCKS(r3, 0x80106720, &(0x7f0000005280)={0x2, &(0x7f0000005240)=[{0x6, 0xb, &(0x7f0000005100)="1a1936a0a5bbe20f524095"}, {0x46, 0xdf, &(0x7f0000005140)="ef59f1424e7530bd5d0105c47f1116370e1b8855c989c53839329d7e2ab7a9d8e2d410529fef6c00af53b112e8d6d226812c67512d9446732c09d883cd678d9c5e73f43fbdfa41aa725dab063a2fc403b328b9afa54062eb122e5083715766e61ee56c00327cf3051ed040c5d74ae9edad98cdefa70ae24e6990d096f16e515d4cd7b7ce751c3717e7fe901552195e8109bdea2ebb7049720b634ac110d22fdaf3406b6c127fbbd94ad17d0ada007c6e4ebf504fc5331451b2f8c9d75603ffbed516f6aa666bdef53f75f9a81cef8868d690fb03d3fb825dfaf303ee4a80fc"}]}) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xc8, r2, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1000}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x10001}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x10001}]}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x33}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x8}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x35}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x7}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xff}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4}, 0x8010) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000400)={0x2a, 0x10}) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) ioctl$VT_ACTIVATE(r1, 0x5606, 0x6) [ 1350.318142] loop3: detected capacity change from 0 to 274 [ 1350.340822] loop6: detected capacity change from 0 to 10 [ 1350.346083] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1350.346960] FAT-fs (loop3): Filesystem has been set read-only [ 1350.353143] loop5: detected capacity change from 0 to 10 [ 1350.359520] FAT-fs (loop6): invalid media value (0x00) [ 1350.359958] FAT-fs (loop6): Can't find a valid FAT filesystem 17:28:09 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r1, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) [ 1350.378735] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 1350.379551] FAT-fs (loop5): Filesystem has been set read-only 17:28:09 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:28:18 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r1, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) 17:28:18 executing program 2: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:28:18 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x13) 17:28:18 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x3000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r2 = shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r2) r3 = shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x3000) shmdt(r3) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:28:18 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ff8000/0x5000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r2 = shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r2) r3 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r4 = shmat(r3, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r4) shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ffc000/0x4000)=nil) r5 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r5, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 17:28:18 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0", 0x25, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:28:18 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:28:18 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70", 0x50, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) [ 1359.318123] loop3: detected capacity change from 0 to 274 [ 1359.330167] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000000f) [ 1359.330791] FAT-fs (loop3): Filesystem has been set read-only 17:28:18 executing program 7: pause() r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:28:18 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0", 0x25, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 1359.376614] loop5: detected capacity change from 0 to 10 [ 1359.383668] loop6: detected capacity change from 0 to 10 [ 1359.397089] FAT-fs (loop6): invalid media value (0x00) [ 1359.398036] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1359.398941] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 1359.399716] FAT-fs (loop5): Filesystem has been set read-only [ 1359.430031] loop3: detected capacity change from 0 to 274 17:28:18 executing program 2: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:28:18 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r1, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) [ 1359.452292] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000000f) [ 1359.453001] FAT-fs (loop3): Filesystem has been set read-only 17:28:18 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000", 0x56, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:28:18 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ff8000/0x5000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r2 = shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r2) r3 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r4 = shmat(r3, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r4) r5 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r5, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 17:28:18 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0", 0x25, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:28:18 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xa800) r0 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000ffc000/0x1000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) r2 = shmget(0x2, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000000000)=""/114) r3 = shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x3000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) shmdt(r3) shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x2000) shmat(r2, &(0x7f0000ffe000/0x1000)=nil, 0x0) shmat(r2, &(0x7f0000ffc000/0x1000)=nil, 0x1000) 17:28:18 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 1359.514137] loop3: detected capacity change from 0 to 274 17:28:18 executing program 2: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) [ 1359.526845] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000000f) [ 1359.527421] FAT-fs (loop3): Filesystem has been set read-only 17:28:18 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:28:18 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x4000)=nil, 0x2000) 17:28:18 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) [ 1359.600334] loop5: detected capacity change from 0 to 10 [ 1359.624064] loop3: detected capacity change from 0 to 274 [ 1359.630823] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 1359.631898] FAT-fs (loop5): Filesystem has been set read-only [ 1359.633811] loop6: detected capacity change from 0 to 274 [ 1359.635524] FAT-fs (loop3): bogus number of reserved sectors [ 1359.636018] FAT-fs (loop3): Can't find a valid FAT filesystem 17:28:18 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x0) shmctl$IPC_RMID(r1, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) 17:28:18 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 1359.753675] loop3: detected capacity change from 0 to 274 [ 1359.759178] FAT-fs (loop3): bogus number of reserved sectors [ 1359.759932] FAT-fs (loop3): Can't find a valid FAT filesystem 17:28:28 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000", 0x56, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:28:28 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:28:28 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x0) shmctl$IPC_RMID(r1, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) 17:28:28 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:28:28 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x6000) 17:28:28 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:28:28 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x1000) 17:28:28 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ff8000/0x5000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r2 = shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r2) r3 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r3, &(0x7f0000ffb000/0x2000)=nil, 0xf000) r4 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r4, &(0x7f0000ffc000/0x4000)=nil, 0x6000) [ 1369.266873] loop5: detected capacity change from 0 to 10 [ 1369.278640] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 1369.279213] FAT-fs (loop5): Filesystem has been set read-only 17:28:28 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000", 0x56, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) [ 1369.328394] loop3: detected capacity change from 0 to 274 [ 1369.332126] FAT-fs (loop3): bogus number of reserved sectors [ 1369.332658] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1369.353835] loop6: detected capacity change from 0 to 274 17:28:28 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:28:28 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 1369.427449] loop6: detected capacity change from 0 to 274 [ 1369.441055] loop5: detected capacity change from 0 to 10 [ 1369.462023] loop3: detected capacity change from 0 to 274 [ 1369.464995] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 1369.466041] FAT-fs (loop5): Filesystem has been set read-only [ 1369.490244] FAT-fs (loop3): bogus number of reserved sectors [ 1369.491318] FAT-fs (loop3): Can't find a valid FAT filesystem 17:28:36 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:28:36 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec7032", 0x59, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:28:36 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x0) shmctl$IPC_RMID(r1, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) 17:28:36 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:28:36 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget(0x0, 0x3000, 0x1000, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r1, 0x0) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc) 17:28:36 executing program 0: r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) poll(&(0x7f0000000080)=[{r0, 0x463}, {r1, 0xc400}, {r2, 0x4018}, {0xffffffffffffffff, 0x8}, {0xffffffffffffffff, 0x101}], 0x5, 0x1) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) 17:28:36 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ff8000/0x5000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r2 = shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r2) shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r3 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 17:28:36 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {0x0, 0x0, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 1377.667532] loop6: detected capacity change from 0 to 274 17:28:36 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) [ 1377.712522] loop3: detected capacity change from 0 to 274 17:28:36 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {0x0, 0x0, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 1377.725540] loop5: detected capacity change from 0 to 10 17:28:36 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(0x0, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) [ 1377.728437] FAT-fs (loop3): bogus number of reserved sectors [ 1377.729569] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1377.754600] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 1377.755265] FAT-fs (loop5): Filesystem has been set read-only [ 1377.787126] loop6: detected capacity change from 0 to 274 17:28:36 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ff8000/0x5000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r2 = shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r2) r3 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 17:28:36 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec7032", 0x59, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:28:36 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:28:36 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {0x0, 0x0, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:28:36 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(0x0, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) 17:28:36 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r1 = shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x5000) shmdt(r1) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x65) 17:28:37 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2773220a7e608e65) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) [ 1377.897257] loop3: detected capacity change from 0 to 274 17:28:37 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) [ 1377.912231] FAT-fs (loop3): bogus number of reserved sectors [ 1377.912818] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1377.919343] loop5: detected capacity change from 0 to 10 [ 1377.926157] loop6: detected capacity change from 0 to 274 17:28:37 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(0x0, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) [ 1377.945919] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 1377.947120] FAT-fs (loop5): Filesystem has been set read-only 17:28:37 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x14) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r2 = shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r2) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x2000) r3 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r4 = shmget(0x2, 0x4000, 0x100, &(0x7f0000ffa000/0x4000)=nil) r5 = shmget$private(0x0, 0x2000, 0x54000014, &(0x7f0000ffa000/0x2000)=nil) shmat(r5, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r5, &(0x7f0000ffa000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r4, 0x0) shmctl$IPC_RMID(r3, 0x0) 17:28:37 executing program 0: shmat(0xffffffffffffffff, &(0x7f0000ffa000/0x4000)=nil, 0x5000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) 17:28:37 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{0x0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 1378.077346] loop3: detected capacity change from 0 to 274 [ 1378.086772] FAT-fs (loop3): bogus number of reserved sectors [ 1378.087310] FAT-fs (loop3): Can't find a valid FAT filesystem 17:28:50 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ff8000/0x5000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) r2 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 17:28:50 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) 17:28:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="800000000000000000000000000000007edad3aacf933fe09356f5c39d9c49709fa5a71e71c203d469dadc96a4a5a18a416180ed39d863401f032a903e31f1e3ac2ea5c84f0718a7a522dfd3e360b7f9356b0595fa12816f20eda6e81518214920ac7dd873ee982d39e3832fa07a84", @ANYRES16=0x0, @ANYRES32=r1]) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) 17:28:50 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{0x0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:28:50 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec7032", 0x59, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:28:50 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500), 0x0, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:28:50 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffd000/0x3000)=nil) 17:28:50 executing program 1: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r0, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) [ 1391.750819] loop6: detected capacity change from 0 to 274 [ 1391.763352] loop3: detected capacity change from 0 to 274 [ 1391.764889] loop5: detected capacity change from 0 to 10 [ 1391.775604] FAT-fs (loop3): bogus number of reserved sectors [ 1391.776115] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1391.802540] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 1391.803897] FAT-fs (loop5): Filesystem has been set read-only 17:28:50 executing program 0: shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x13) r0 = shmget$private(0x0, 0x2000, 0x20, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/2) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xd) 17:28:50 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500), 0x0, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:28:50 executing program 1: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r0, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) [ 1391.883625] loop6: detected capacity change from 0 to 274 17:29:02 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500), 0x0, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:29:02 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec703251", 0x5a, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:29:02 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000000)=""/129) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:29:02 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmdt(0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:29:02 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{0x0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:29:02 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ff8000/0x5000)=nil, 0x4000) shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 17:29:02 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xd) 17:29:02 executing program 1: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r0, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) [ 1402.940541] loop5: detected capacity change from 0 to 10 [ 1402.942901] loop3: detected capacity change from 0 to 274 [ 1402.972246] FAT-fs (loop3): bogus number of reserved sectors [ 1402.973180] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1402.987173] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 1402.988292] FAT-fs (loop5): Filesystem has been set read-only [ 1403.013358] loop6: detected capacity change from 0 to 274 17:29:02 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ff8000/0x5000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r2 = shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r2) r3 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r4 = shmat(r3, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r4) r5 = shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ffc000/0x4000)=nil) r6 = shmat(r5, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r6) r7 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r8 = shmat(r7, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r8) shmat(r7, &(0x7f0000ffc000/0x4000)=nil, 0x6000) r9 = shmat(r7, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmdt(r9) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:29:02 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x6, &(0x7f0000ffa000/0x2000)=nil) 17:29:02 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x100, &(0x7f0000ffb000/0x5000)=nil) r1 = shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) shmdt(r1) 17:29:02 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r1, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x0) 17:29:02 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:29:02 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ff8000/0x5000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 17:29:02 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec703251", 0x5a, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:29:02 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc", 0x2e, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 1403.223880] loop3: detected capacity change from 0 to 274 17:29:02 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x1000) [ 1403.281693] FAT-fs (loop3): bogus number of reserved sectors [ 1403.282807] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1403.334233] loop6: detected capacity change from 0 to 274 17:29:14 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 17:29:14 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f0000000000)=""/235) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) 17:29:14 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc", 0x2e, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:29:14 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$inet6(r0, &(0x7f0000000140)=""/16, 0x10, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x400, @empty, 0x8}, 0x1c) r1 = dup(r0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) utimensat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={{0x77359400}}, 0x0) fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) r2 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x232100, 0x0) getsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f0000000040)=0x8, &(0x7f0000000080)=0x2) mknodat$loop(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x8, 0x0) r4 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) shmat(r4, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:29:14 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:29:14 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec703251", 0x5a, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:29:14 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:29:14 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r1, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x0) [ 1415.492806] loop2: detected capacity change from 0 to 274 [ 1415.495371] loop5: detected capacity change from 0 to 10 [ 1415.496879] loop3: detected capacity change from 0 to 274 [ 1415.508092] loop6: detected capacity change from 0 to 274 [ 1415.510110] FAT-fs (loop3): bogus number of reserved sectors [ 1415.510991] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1415.523827] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 1415.524889] FAT-fs (loop5): Filesystem has been set read-only 17:29:14 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 17:29:14 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r1, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x0) 17:29:14 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 17:29:14 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:29:14 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:29:14 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc", 0x2e, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:29:14 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r1, &(0x7f0000ffc000/0x3000)=nil, 0x1000) 17:29:14 executing program 0: r0 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmdt(r0) [ 1415.805654] loop3: detected capacity change from 0 to 274 [ 1415.826725] loop6: detected capacity change from 0 to 274 17:29:14 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 1415.830574] FAT-fs (loop3): bogus number of reserved sectors [ 1415.831505] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1415.850885] loop5: detected capacity change from 0 to 1 [ 1415.886025] FAT-fs (loop5): invalid media value (0x00) [ 1415.886896] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1415.991785] loop2: detected capacity change from 0 to 274 17:29:27 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 17:29:27 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, 0x0, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:29:27 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:29:27 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400", 0xc}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:29:27 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xb) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x64) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/153) 17:29:27 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:29:27 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:29:27 executing program 7: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x1, 0x6000, @fd_index=0x6, 0x6, &(0x7f0000000340)=[{&(0x7f0000000000)="133d9f3a2eed783e739fd19d78f86a985fa1a1acf73c811b5f1e08eef25d3d2f8b115e857586ce46d960", 0x2a}, {&(0x7f0000000040)="681a5934b5f17f017450b8526ef24a", 0xf}, {&(0x7f0000000080)="b3fe28c0d8e31c4e92162773c6ef09c7ec73c2aff40a4307d7c45567affb61611d0293e1a9f86aef916059568fd1ef6666c655b711916c0b1c4731779c7ce3fb6121d77517555033ff46e786f58c6578f75afe77b2e83183c0f295e555691a3884e7374435be227785c796b759b92f391749285cd547586e3d34449c87905c60d8570b", 0x83}, {&(0x7f0000000140)="2293f423a104d2c62568f824292621e200dcb0fb61e937bd3905a69cfaec0f45e871b61ab0114ab83ebae6fee041b0eb8847a7f04e13d7fe118aae8a265e035c27800f1d637d8be7a5275da4cf4765492925772d45d68e1a1eb4b74d5d809755", 0x60}, {&(0x7f00000001c0)="6da7ea8b170cb705f0790a77454cddead5718753fb40e0566a8702420e04fc118468a00df66e55", 0x27}, {&(0x7f0000000200)="166ba5e629255c97799d822c9506472a4c3838a924ad059c3e1a2dc6b2b426410457d8b0e2e0b172bb6a39fc343a86ec7e56136ed6dc", 0x36}, {&(0x7f0000000240)="c491527e96e618cb81d97a7513fe982894ec1b9eae5b43b85e520ce5ed8859908686ffc6e600878164263dcd426a0cb79010ce880cd49257283d5a8ee439a16c5f5acfadbe5a8e7df63467cba354965d3fc04f2ae58a3a0a9d46be8f145d717021a02bd808bdea75df043230b4f99e007107115bb387640ec65e4cb5ba1bd8b5d10ab77b", 0x84}, {&(0x7f0000000300)="ab34a3fb4224919b2f01e3cc1a10e03b2dc66d86f3fdb74a8bd01b344f5141435e30240579eb6e74e8d84e7d158d8abd4778cb6fe9d61c0067ddb88357d4", 0x3e}], 0x8, 0xc, 0x1, {0x3}}, 0x400) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) r2 = syz_io_uring_setup(0x720e, &(0x7f0000000400)={0x0, 0xec41, 0x2882a877dc080216, 0x1, 0x2df}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000002, 0x10, 0xffffffffffffffff, 0x10000000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$sock_SIOCOUTQ(r5, 0x5411, &(0x7f0000000000)) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x300000d, 0x30, r5, 0x10000000) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r6, 0x0) syz_io_uring_submit(r7, 0x0, 0x0, 0x0) dup2(r6, r2) syz_io_uring_submit(r7, r3, &(0x7f0000000540)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1, 0x0, r6, 0x0, 0x0, 0x0, 0x2, 0x1, {0x2}}, 0x44ef) [ 1428.706046] loop3: detected capacity change from 0 to 274 [ 1428.708764] loop2: detected capacity change from 0 to 274 [ 1428.718062] FAT-fs (loop3): bogus number of reserved sectors [ 1428.718603] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1428.746055] loop6: detected capacity change from 0 to 274 [ 1428.747935] loop5: detected capacity change from 0 to 1 [ 1428.771727] FAT-fs (loop5): invalid media value (0x00) [ 1428.771921] loop1: detected capacity change from 0 to 274 [ 1428.772728] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1428.793087] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1428.793995] blk_print_req_error: 63 callbacks suppressed [ 1428.794011] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1428.796085] buffer_io_error: 62 callbacks suppressed [ 1428.796098] Buffer I/O error on dev sr0, logical block 0, async page read 17:29:27 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400", 0xc}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 1428.826373] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1428.827273] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1428.828588] Buffer I/O error on dev sr0, logical block 1, async page read 17:29:27 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0000001ac1414aa000000000000000000000000000000000000000000000000000000000000000000000000000000008000"/184]}) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x7000) r1 = shmget(0x1, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x6000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) r2 = pkey_alloc(0x0, 0x1) shmctl$IPC_RMID(r1, 0x0) pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000006, r2) 17:29:27 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x6000) [ 1428.856796] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1428.857984] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1428.859603] Buffer I/O error on dev sr0, logical block 2, async page read [ 1428.900058] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1428.901350] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1428.902614] Buffer I/O error on dev sr0, logical block 3, async page read [ 1428.929556] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1428.929868] loop3: detected capacity change from 0 to 274 [ 1428.930408] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1428.932530] Buffer I/O error on dev sr0, logical block 4, async page read 17:29:28 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:29:28 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) [ 1428.944406] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1428.945680] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1428.947268] Buffer I/O error on dev sr0, logical block 5, async page read [ 1428.954058] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1428.954945] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1428.956201] Buffer I/O error on dev sr0, logical block 6, async page read [ 1428.956531] FAT-fs (loop3): bogus number of reserved sectors [ 1428.958245] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1428.962645] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1428.964273] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1428.966006] Buffer I/O error on dev sr0, logical block 7, async page read [ 1428.969757] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1428.970905] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1428.972370] Buffer I/O error on dev sr0, logical block 0, async page read [ 1429.000733] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1429.001331] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1429.002303] Buffer I/O error on dev sr0, logical block 1, async page read [ 1429.005722] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1429.011628] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1429.015626] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1429.016260] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 17:29:28 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 1429.026081] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1429.031855] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1429.037593] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1429.038228] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1429.045416] loop6: detected capacity change from 0 to 274 [ 1429.048186] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1429.048863] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1429.051023] loop5: detected capacity change from 0 to 1 [ 1429.058920] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 17:29:28 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400", 0xc}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:29:28 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x6000) [ 1429.061544] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1429.062175] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1429.062862] FAT-fs (loop5): invalid media value (0x00) [ 1429.063996] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1429.073619] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1429.074326] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 17:29:28 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x4000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x17) r0 = shmget(0x1, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x5000) [ 1429.084639] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1429.085275] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1429.090546] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1429.093073] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1429.099581] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1429.100216] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1429.110959] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1429.113640] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1429.114270] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 17:29:28 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0000001ac1414aa000000000000000000000000000000000000000000000000000000000000000000000000000000008000"/184]}) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x7000) r1 = shmget(0x1, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x6000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) r2 = pkey_alloc(0x0, 0x1) shmctl$IPC_RMID(r1, 0x0) pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000006, r2) [ 1429.115651] loop1: detected capacity change from 0 to 274 [ 1429.123742] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1429.125232] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1429.132613] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1429.137062] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1429.143624] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1429.144245] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1429.145184] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1429.146276] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1429.191541] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1429.205756] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 17:29:28 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:29:28 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 17:29:28 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 1429.222653] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1429.223322] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1429.224052] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1429.224702] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1429.299066] loop5: detected capacity change from 0 to 10 [ 1429.322148] loop6: detected capacity change from 0 to 274 17:29:28 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440", 0x12}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:29:28 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r1) r2 = shmget(0x1, 0x3000, 0xa0, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000000)=""/46) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x17) [ 1429.351160] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1429.351979] FAT-fs (loop5): Filesystem has been set read-only [ 1429.390191] loop3: detected capacity change from 0 to 274 [ 1429.400772] FAT-fs (loop3): invalid media value (0x00) [ 1429.401212] FAT-fs (loop3): Can't find a valid FAT filesystem 17:29:39 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440", 0x12}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:29:39 executing program 7: r0 = shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:29:39 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r1, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) (fail_nth: 1) 17:29:39 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 17:29:39 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:29:39 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) (fail_nth: 1) 17:29:39 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70", 0x50, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:29:39 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11) [ 1440.853370] loop3: detected capacity change from 0 to 274 [ 1440.856643] FAULT_INJECTION: forcing a failure. [ 1440.856643] name failslab, interval 1, probability 0, space 0, times 0 [ 1440.857107] loop5: detected capacity change from 0 to 10 [ 1440.858266] CPU: 0 UID: 0 PID: 10210 Comm: syz-executor.1 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 1440.858296] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1440.858310] Call Trace: [ 1440.858317] [ 1440.858325] dump_stack_lvl+0xfa/0x120 [ 1440.858367] should_fail_ex+0x4d7/0x5e0 [ 1440.858405] should_failslab+0xc2/0x120 [ 1440.858427] __kmalloc_cache_noprof+0x73/0x4a0 [ 1440.858464] ? find_held_lock+0x2b/0x80 [ 1440.858494] ? do_shmat+0x576/0x1310 [ 1440.858526] ? lock_release+0xc8/0x290 [ 1440.858551] ? do_shmat+0x576/0x1310 [ 1440.858580] do_shmat+0x576/0x1310 [ 1440.858616] ? __pfx_do_shmat+0x10/0x10 [ 1440.858645] ? find_held_lock+0x2b/0x80 [ 1440.858674] ? __might_fault+0x138/0x190 [ 1440.858697] ? lock_release+0xc8/0x290 [ 1440.858723] __x64_sys_shmat+0xcf/0x160 [ 1440.858752] ? syscall_trace_enter+0x1cf/0x260 [ 1440.858788] ? __pfx___x64_sys_shmat+0x10/0x10 [ 1440.858824] ? syscall_trace_enter+0xf2/0x260 [ 1440.858859] do_syscall_64+0xbf/0x360 [ 1440.858881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1440.858904] RIP: 0033:0x7f4d1ff19b19 [ 1440.858920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1440.858941] RSP: 002b:00007f4d1d48f188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 1440.858962] RAX: ffffffffffffffda RBX: 00007f4d2002cf60 RCX: 00007f4d1ff19b19 [ 1440.858976] RDX: 0000000000004000 RSI: 0000000020ffb000 RDI: 00000000000001f0 [ 1440.858990] RBP: 00007f4d1d48f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1440.859003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1440.859015] R13: 00007ffdc9aa13bf R14: 00007f4d1d48f300 R15: 0000000000022000 [ 1440.859043] [ 1440.873960] FAT-fs (loop3): invalid media value (0x00) [ 1440.887337] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1440.894402] loop6: detected capacity change from 0 to 274 [ 1440.907899] FAULT_INJECTION: forcing a failure. [ 1440.907899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1440.909996] CPU: 1 UID: 0 PID: 10215 Comm: syz-executor.2 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 1440.910029] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1440.910042] Call Trace: [ 1440.910050] [ 1440.910059] dump_stack_lvl+0xfa/0x120 [ 1440.910104] should_fail_ex+0x4d7/0x5e0 [ 1440.910143] _copy_to_user+0x32/0xd0 [ 1440.910172] simple_read_from_buffer+0xe0/0x180 [ 1440.910208] proc_fail_nth_read+0x189/0x270 [ 1440.910244] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1440.910279] ? security_file_permission+0x22/0x90 [ 1440.910305] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1440.910339] vfs_read+0x1eb/0xbe0 [ 1440.910379] ? __pfx_vfs_read+0x10/0x10 [ 1440.910414] ? lock_release+0xc8/0x290 [ 1440.910445] ? __fget_files+0x20d/0x3b0 [ 1440.910497] ksys_read+0x121/0x240 [ 1440.910530] ? __pfx_ksys_read+0x10/0x10 [ 1440.910564] ? perf_trace_sys_enter+0x2d/0x170 [ 1440.910610] do_syscall_64+0xbf/0x360 [ 1440.910634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1440.910660] RIP: 0033:0x7f8c919a469c [ 1440.910678] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1440.910700] RSP: 002b:00007f8c8ef67170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1440.910723] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8c919a469c [ 1440.910739] RDX: 000000000000000f RSI: 00007f8c8ef671e0 RDI: 0000000000000003 [ 1440.910753] RBP: 00007f8c8ef671d0 R08: 0000000000000000 R09: 0000000000000000 [ 1440.910767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1440.910781] R13: 00007ffc5edb229f R14: 00007f8c8ef67300 R15: 0000000000022000 [ 1440.910812] [ 1440.942442] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 1440.943872] FAT-fs (loop6): Filesystem has been set read-only 17:29:40 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r1, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) (fail_nth: 2) 17:29:40 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) write$P9_RFLUSH(r1, &(0x7f0000000000)={0x7, 0x6d, 0x1}, 0x7) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) 17:29:40 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffa000/0x2000)=nil, 0x4000) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 17:29:40 executing program 7: r0 = shmget$private(0x0, 0x1000, 0x200, &(0x7f0000fff000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:29:50 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70", 0x50, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:29:50 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440", 0x12}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:29:50 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:29:50 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r1, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) (fail_nth: 3) 17:29:50 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) r0 = shmget(0x0, 0x2000, 0x1000, &(0x7f0000ffb000/0x2000)=nil) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) 17:29:50 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffa000/0x2000)=nil, 0x4000) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 17:29:50 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:29:50 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r2 = shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r2) shmdt(r2) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x0) r3 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r3, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r3, &(0x7f0000ffc000/0x1000)=nil, 0x1000) r4 = shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) r5 = msgget$private(0x0, 0x12) msgctl$MSG_STAT(r5, 0xb, &(0x7f0000000000)=""/124) shmat(r4, &(0x7f0000ffc000/0x3000)=nil, 0x1000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x65) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) [ 1451.651313] loop5: detected capacity change from 0 to 10 [ 1451.665352] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1451.666127] FAT-fs (loop5): Filesystem has been set read-only [ 1451.690382] loop3: detected capacity change from 0 to 274 [ 1451.690402] FAULT_INJECTION: forcing a failure. [ 1451.690402] name failslab, interval 1, probability 0, space 0, times 0 [ 1451.692566] CPU: 0 UID: 0 PID: 10247 Comm: syz-executor.1 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 1451.692583] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1451.692591] Call Trace: [ 1451.692595] [ 1451.692600] dump_stack_lvl+0xfa/0x120 [ 1451.692625] should_fail_ex+0x4d7/0x5e0 [ 1451.692646] ? alloc_empty_file+0x58/0x1e0 [ 1451.692661] should_failslab+0xc2/0x120 [ 1451.692673] kmem_cache_alloc_noprof+0x5f/0x470 [ 1451.692691] ? __create_object+0x59/0x80 [ 1451.692710] alloc_empty_file+0x58/0x1e0 [ 1451.692724] alloc_file_clone+0x5f/0x110 [ 1451.692738] do_shmat+0x61f/0x1310 [ 1451.692761] ? __pfx_do_shmat+0x10/0x10 [ 1451.692777] ? find_held_lock+0x2b/0x80 [ 1451.692794] ? __might_fault+0x138/0x190 [ 1451.692807] ? lock_release+0xc8/0x290 [ 1451.692822] __x64_sys_shmat+0xcf/0x160 [ 1451.692839] ? syscall_trace_enter+0x1cf/0x260 [ 1451.692863] ? __pfx___x64_sys_shmat+0x10/0x10 [ 1451.692883] ? syscall_trace_enter+0xf2/0x260 [ 1451.692902] do_syscall_64+0xbf/0x360 [ 1451.692914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1451.692927] RIP: 0033:0x7f4d1ff19b19 [ 1451.692936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1451.692948] RSP: 002b:00007f4d1d48f188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 1451.692959] RAX: ffffffffffffffda RBX: 00007f4d2002cf60 RCX: 00007f4d1ff19b19 [ 1451.692967] RDX: 0000000000004000 RSI: 0000000020ffb000 RDI: 00000000000001f4 [ 1451.692975] RBP: 00007f4d1d48f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1451.692982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1451.692989] R13: 00007ffdc9aa13bf R14: 00007f4d1d48f300 R15: 0000000000022000 [ 1451.693004] [ 1451.714659] FAT-fs (loop3): invalid media value (0x00) [ 1451.715684] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1451.718288] loop6: detected capacity change from 0 to 274 17:29:50 executing program 7: r0 = shmget$private(0x0, 0x2000, 0x54000200, &(0x7f0000ffd000/0x2000)=nil) r1 = shmget$private(0x0, 0x1000, 0x80, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) [ 1451.751730] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 1451.753098] FAT-fs (loop6): Filesystem has been set read-only 17:30:00 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004", 0x15}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:30:00 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70", 0x50, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:30:00 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {0x0, 0x0, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:30:00 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r1, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) (fail_nth: 4) 17:30:00 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffa000/0x2000)=nil, 0x4000) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 17:30:00 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x400, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ff9000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:30:00 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1002, 0x9) 17:30:00 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) [ 1461.673161] loop3: detected capacity change from 0 to 274 [ 1461.684793] FAT-fs (loop3): invalid media value (0x00) [ 1461.685621] FAT-fs (loop3): Can't find a valid FAT filesystem 17:30:00 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x6000) [ 1461.735350] loop5: detected capacity change from 0 to 10 [ 1461.764570] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1461.765768] FAT-fs (loop5): Filesystem has been set read-only [ 1461.772537] loop6: detected capacity change from 0 to 274 17:30:00 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004", 0x15}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 1461.808941] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 1461.810051] FAT-fs (loop6): Filesystem has been set read-only 17:30:00 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r1, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) (fail_nth: 5) 17:30:00 executing program 7: ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000380)={0x8, 0x10, '\x00', 0x0, &(0x7f00000000c0)=[0x0, 0x0]}) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x6000) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)={0x0, 0x0}) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000300)={{0x1, 0x0, r2, 0xee01, r3, 0x10, 0x1}, 0x7fff, 0x9, 0x7, 0x8, 0xffffffffffffffff, r4, 0x4}) shmdt(r1) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) shmget$private(0x0, 0x1000, 0x80, &(0x7f0000ffc000/0x1000)=nil) 17:30:01 executing program 0: shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x2000)=nil, 0x5000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) 17:30:01 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1003, 0x9) 17:30:01 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 17:30:01 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {0x0, 0x0, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) [ 1461.909117] loop3: detected capacity change from 0 to 274 17:30:01 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000", 0x56, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 1461.940922] FAT-fs (loop3): invalid media value (0x00) [ 1461.941757] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1461.979350] FAULT_INJECTION: forcing a failure. [ 1461.979350] name failslab, interval 1, probability 0, space 0, times 0 [ 1461.981116] CPU: 0 UID: 0 PID: 10294 Comm: syz-executor.1 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 1461.981146] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1461.981158] Call Trace: [ 1461.981165] [ 1461.981173] dump_stack_lvl+0xfa/0x120 [ 1461.981218] should_fail_ex+0x4d7/0x5e0 [ 1461.981255] ? security_file_alloc+0x35/0x130 [ 1461.981276] should_failslab+0xc2/0x120 [ 1461.981299] kmem_cache_alloc_noprof+0x5f/0x470 [ 1461.981329] ? __create_object+0x59/0x80 [ 1461.981359] security_file_alloc+0x35/0x130 [ 1461.981381] init_file+0x95/0x4c0 [ 1461.981405] alloc_empty_file+0x76/0x1e0 [ 1461.981431] alloc_file_clone+0x5f/0x110 [ 1461.981464] do_shmat+0x61f/0x1310 [ 1461.981502] ? __pfx_do_shmat+0x10/0x10 [ 1461.981531] ? find_held_lock+0x2b/0x80 [ 1461.981562] ? __might_fault+0x138/0x190 [ 1461.981585] ? lock_release+0xc8/0x290 [ 1461.981610] __x64_sys_shmat+0xcf/0x160 [ 1461.981640] ? syscall_trace_enter+0x1cf/0x260 [ 1461.981676] ? __pfx___x64_sys_shmat+0x10/0x10 [ 1461.981711] ? syscall_trace_enter+0xf2/0x260 [ 1461.981746] do_syscall_64+0xbf/0x360 [ 1461.981768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1461.981790] RIP: 0033:0x7f4d1ff19b19 [ 1461.981807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1461.981827] RSP: 002b:00007f4d1d48f188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 1461.981848] RAX: ffffffffffffffda RBX: 00007f4d2002cf60 RCX: 00007f4d1ff19b19 [ 1461.981863] RDX: 0000000000004000 RSI: 0000000020ffb000 RDI: 00000000000001f8 [ 1461.981876] RBP: 00007f4d1d48f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1461.981889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1461.981902] R13: 00007ffdc9aa13bf R14: 00007f4d1d48f300 R15: 0000000000022000 [ 1461.981930] [ 1462.043440] loop5: detected capacity change from 0 to 10 17:30:01 executing program 0: memfd_secret(0x0) r0 = syz_io_uring_complete(0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x3) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) [ 1462.078415] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1462.079770] FAT-fs (loop5): Filesystem has been set read-only 17:30:01 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x6000) [ 1462.090225] loop6: detected capacity change from 0 to 274 17:30:01 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004", 0x15}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:30:01 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1004, 0x9) [ 1462.117796] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 1462.118831] FAT-fs (loop6): Filesystem has been set read-only 17:30:01 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {0x0, 0x0, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:30:01 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r1, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) (fail_nth: 6) [ 1462.176205] loop3: detected capacity change from 0 to 274 [ 1462.195651] FAT-fs (loop3): invalid media value (0x00) [ 1462.196347] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1462.280325] loop5: detected capacity change from 0 to 10 [ 1462.294585] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1462.295755] FAT-fs (loop5): Filesystem has been set read-only 17:30:12 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000", 0x56, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:30:12 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100), 0x0, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:30:12 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r1, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) (fail_nth: 7) 17:30:12 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 17:30:12 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f8", 0x16}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:30:12 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1005, 0x9) 17:30:12 executing program 0: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) shmdt(0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) 17:30:12 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r1, &(0x7f0000ffc000/0x3000)=nil, 0x5000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) [ 1473.234080] loop3: detected capacity change from 0 to 274 [ 1473.241105] loop6: detected capacity change from 0 to 274 [ 1473.252328] FAT-fs (loop3): bogus number of FAT sectors [ 1473.253312] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1473.257173] loop5: detected capacity change from 0 to 10 [ 1473.283306] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 1473.284398] FAT-fs (loop6): Filesystem has been set read-only [ 1473.292943] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1473.294266] FAT-fs (loop5): Filesystem has been set read-only 17:30:12 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1006, 0x9) 17:30:12 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r1, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) (fail_nth: 8) 17:30:24 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f8", 0x16}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:30:24 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) 17:30:24 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1007, 0x9) 17:30:24 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r1, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) (fail_nth: 9) 17:30:24 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000000)=""/56) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:30:24 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000", 0x56, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:30:24 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100), 0x0, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:30:24 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x6000) [ 1485.059912] loop5: detected capacity change from 0 to 10 [ 1485.061003] loop3: detected capacity change from 0 to 274 [ 1485.067332] loop6: detected capacity change from 0 to 274 [ 1485.076105] FAT-fs (loop3): bogus number of FAT sectors [ 1485.077179] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1485.088195] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1485.089508] FAT-fs (loop5): Filesystem has been set read-only [ 1485.090449] FAULT_INJECTION: forcing a failure. [ 1485.090449] name failslab, interval 1, probability 0, space 0, times 0 [ 1485.092630] CPU: 1 UID: 0 PID: 10374 Comm: syz-executor.1 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 1485.092661] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1485.092675] Call Trace: [ 1485.092682] [ 1485.092691] dump_stack_lvl+0xfa/0x120 [ 1485.092734] should_fail_ex+0x4d7/0x5e0 [ 1485.092772] ? vm_area_alloc+0x20/0x170 [ 1485.092794] should_failslab+0xc2/0x120 [ 1485.092817] kmem_cache_alloc_noprof+0x5f/0x470 [ 1485.092851] ? vma_merge_new_range+0x40e/0xa00 [ 1485.092887] vm_area_alloc+0x20/0x170 [ 1485.092920] __mmap_region+0xc46/0x2670 [ 1485.092954] ? __lock_acquire+0x694/0x1b70 [ 1485.092982] ? __pfx___mmap_region+0x10/0x10 [ 1485.093015] ? __lock_acquire+0x694/0x1b70 [ 1485.093050] ? lock_acquire+0xdf/0x2e0 [ 1485.093073] ? __is_insn_slot_addr+0x2e/0x290 [ 1485.093105] ? find_held_lock+0x2b/0x80 [ 1485.093136] ? __is_insn_slot_addr+0x136/0x290 [ 1485.093179] ? kernel_text_address+0x5b/0xc0 [ 1485.093204] ? __kernel_text_address+0xd/0x40 [ 1485.093267] ? mm_get_unmapped_area+0x98/0xe0 [ 1485.093295] ? lock_is_held_type+0x9e/0x120 [ 1485.093333] mmap_region+0x314/0x3e0 [ 1485.093371] do_mmap+0xa36/0x11d0 [ 1485.093403] ? __pfx_do_mmap+0x10/0x10 [ 1485.093428] ? down_write_killable+0x122/0x230 [ 1485.093457] ? __pfx_down_write_killable+0x10/0x10 [ 1485.093479] ? do_raw_spin_unlock+0x53/0x220 [ 1485.093514] do_shmat+0xfac/0x1310 [ 1485.093557] ? __pfx_do_shmat+0x10/0x10 [ 1485.093588] ? find_held_lock+0x2b/0x80 [ 1485.093619] ? __might_fault+0x138/0x190 [ 1485.093643] ? lock_release+0xc8/0x290 [ 1485.093671] __x64_sys_shmat+0xcf/0x160 [ 1485.093703] ? syscall_trace_enter+0x1cf/0x260 [ 1485.093741] ? __pfx___x64_sys_shmat+0x10/0x10 [ 1485.093779] ? syscall_trace_enter+0xf2/0x260 [ 1485.093816] do_syscall_64+0xbf/0x360 [ 1485.093840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1485.093864] RIP: 0033:0x7f4d1ff19b19 [ 1485.093882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1485.093904] RSP: 002b:00007f4d1d48f188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 1485.093926] RAX: ffffffffffffffda RBX: 00007f4d2002cf60 RCX: 00007f4d1ff19b19 [ 1485.093942] RDX: 0000000000004000 RSI: 0000000020ffb000 RDI: 0000000000000200 [ 1485.093956] RBP: 00007f4d1d48f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1485.093970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1485.093984] R13: 00007ffdc9aa13bf R14: 00007f4d1d48f300 R15: 0000000000022000 [ 1485.094015] 17:30:24 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 17:30:24 executing program 0: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) 17:30:24 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x8, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:30:24 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100), 0x0, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:30:24 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec7032", 0x59, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:30:24 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x101c, 0x9) 17:30:24 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f8", 0x16}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:30:24 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r1, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) (fail_nth: 10) 17:30:24 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc) 17:30:24 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffa000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x6000) [ 1485.375914] loop5: detected capacity change from 0 to 10 [ 1485.414039] loop6: detected capacity change from 0 to 274 [ 1485.425591] loop3: detected capacity change from 0 to 274 [ 1485.427815] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1485.429387] FAT-fs (loop5): Filesystem has been set read-only [ 1485.441395] FAT-fs (loop3): bogus number of FAT sectors [ 1485.442390] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1485.469115] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 1485.470217] FAT-fs (loop6): Filesystem has been set read-only 17:30:36 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) r1 = shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) shmdt(r1) r2 = shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000000)=""/59) shmctl$IPC_RMID(r2, 0x0) r3 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_LOCK(r3, 0xb) 17:30:36 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r1, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) (fail_nth: 11) 17:30:36 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffa000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 17:30:36 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, 0x0) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:30:36 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1067, 0x9) 17:30:36 executing program 0: shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) madvise(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0) 17:30:36 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)='\x00'/19, 0x13, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:30:36 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec7032", 0x59, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 1497.505341] loop3: detected capacity change from 0 to 274 [ 1497.530068] FAULT_INJECTION: forcing a failure. [ 1497.530068] name failslab, interval 1, probability 0, space 0, times 0 [ 1497.531679] CPU: 0 UID: 0 PID: 10415 Comm: syz-executor.1 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 1497.531708] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1497.531721] Call Trace: [ 1497.531728] [ 1497.531736] dump_stack_lvl+0xfa/0x120 [ 1497.531776] should_fail_ex+0x4d7/0x5e0 [ 1497.531811] ? mas_alloc_nodes+0x432/0x8f0 [ 1497.531842] should_failslab+0xc2/0x120 [ 1497.531864] kmem_cache_alloc_noprof+0x5f/0x470 [ 1497.531894] ? lock_is_held_type+0x9e/0x120 [ 1497.531932] mas_alloc_nodes+0x432/0x8f0 [ 1497.531970] mas_node_count_gfp+0x106/0x140 [ 1497.532005] mas_preallocate+0x2af/0x690 [ 1497.532032] ? __pfx_mas_preallocate+0x10/0x10 [ 1497.532066] ? vma_merge_new_range+0x320/0xa00 [ 1497.532096] ? lockdep_init_map_type+0x4b/0x240 [ 1497.532125] __mmap_region+0xdf2/0x2670 [ 1497.532162] ? __pfx___mmap_region+0x10/0x10 [ 1497.532192] ? __lock_acquire+0x694/0x1b70 [ 1497.532228] ? __lock_acquire+0x694/0x1b70 [ 1497.532265] ? __lock_acquire+0xc65/0x1b70 [ 1497.532325] ? mm_get_unmapped_area+0x98/0xe0 [ 1497.532352] ? lock_is_held_type+0x9e/0x120 [ 1497.532386] mmap_region+0x314/0x3e0 [ 1497.532421] do_mmap+0xa36/0x11d0 [ 1497.532458] ? __pfx_do_mmap+0x10/0x10 [ 1497.532481] ? down_write_killable+0x122/0x230 [ 1497.532503] ? __pfx_down_write_killable+0x10/0x10 [ 1497.532523] ? do_raw_spin_unlock+0x53/0x220 [ 1497.532555] do_shmat+0xfac/0x1310 [ 1497.532596] ? __pfx_do_shmat+0x10/0x10 [ 1497.532625] ? find_held_lock+0x2b/0x80 [ 1497.532654] ? __might_fault+0x138/0x190 [ 1497.532677] ? lock_release+0xc8/0x290 [ 1497.532703] __x64_sys_shmat+0xcf/0x160 [ 1497.532732] ? syscall_trace_enter+0x1cf/0x260 [ 1497.532769] ? __pfx___x64_sys_shmat+0x10/0x10 [ 1497.532804] ? syscall_trace_enter+0xf2/0x260 [ 1497.532839] do_syscall_64+0xbf/0x360 [ 1497.532861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1497.532884] RIP: 0033:0x7f4d1ff19b19 [ 1497.532900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1497.532921] RSP: 002b:00007f4d1d48f188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 1497.532942] RAX: ffffffffffffffda RBX: 00007f4d2002cf60 RCX: 00007f4d1ff19b19 [ 1497.532957] RDX: 0000000000004000 RSI: 0000000020ffb000 RDI: 0000000000000204 [ 1497.532970] RBP: 00007f4d1d48f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1497.532983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1497.532996] R13: 00007ffdc9aa13bf R14: 00007f4d1d48f300 R15: 0000000000022000 [ 1497.533044] [ 1497.547717] loop6: detected capacity change from 0 to 274 [ 1497.568927] loop5: detected capacity change from 0 to 10 [ 1497.604512] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1497.605725] FAT-fs (loop5): Filesystem has been set read-only 17:30:36 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, 0x0) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:30:36 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x2000, 0x9) 17:30:36 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) r1 = shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffc000/0x1000)=nil) shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x4000) 17:30:36 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffa000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 17:30:36 executing program 0: setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "4769a959cbe70068f44200"}, 0x11, 0x3) readlink(&(0x7f0000001640)='./file0\x00', &(0x7f0000001680), 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) r0 = shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000) shmdt(r0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) sendmsg$sock(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000100)="db55deaaee4bfcca63f6ce604a8332d64494a52da450fa30d0de933321bdc830ac38a466e2c2eaee6e6e0fbbba1201a95571a1477851b73e8fd6af5e85f783020bb4adc3440dfd9f838f656094720fe575c7469cccd9327f76e341468485ba1e11b5b3afa8ed1c54cdd99d3cc12a79f175d1", 0x72}, {&(0x7f0000000180)="4c99412c0e457ab6966c25996d8ee5c49bc441376b95772cc35595485c60d7309836f33749741c2f99bc8f8df2fdc615d98747ebbd0c2f966d73bbe173ffdaa49513aa5eab03278281b7c5341eb16c22723f5d300a7e626f137a49c58f70f4d223b93b28975708148b7d15c3952794e68f58c87e1761683bae8cdaa39a78e0b54e9fedf5706e9205be797b5d8c4cdd2d76df434249208ea945d3d7cc61adae8770041b2041cdbd1d822ea6e92ca0b8", 0xaf}, {&(0x7f0000000240)="1e6741c7d76aecd01fea5f4da199b1f473e7a2d0dea6a7a0a43aa34573a0c7a558aecadc91ddb6824de86e77ae03e8f3949b352cf941246bb45dbf6bc8d7f1b12d64ff1964c2daeb50d118537f9a2e5f0c7062f4ed403e629e8df966b91c58a56440754eeb75c117aa8e8eb07ad227a0120ec92a276d406c9f456eadfca418988c498ebf703428e1d1803070c13d7a49afef29343cc8f91197bf647b314cd17d5ecc12a634f8decdb00890e9886a356a15e0c3a93a837054f637afb765b3bb88c3c4784a82674f00ccd2a02b0bed42307408d1a8204a0cff97a124a74b23ca1650c915f8cc6ce78e891d618c468bcac93a3a699e", 0xf4}, {&(0x7f0000000340)="2330310ec665858b877f7922dfa78d08a729e271f8325c32f6ccb6b140c16a96d04d78a254847a70fadfdc46ba4e64480739ff065a675427f03eda97677b87af285da3c61965faffb2568a6996767d73fbaf4803ec1018d121820bf8333b228a0b9889767e3542851ccd7a7f1eafff42e7b70f2f41df0bd497353befd4d3e3f8c4235f3b52f587cfc624a2732abe997d25e1668b0a7ad5d7980e708ad543f6ee46f28734e018ae5acf16898c65f66642eb866931182b7de512aa6c118d5dcb6504671e9675ad242e77a180753ad6fdd9059c539886e8fdeaafc00d38957a1c24de8ebfcf6740e475891c3214003e8dbec7e00aa1fe4be0377575fbcc3c7a4e24adc2a8cfceafb9ca28fa44b8cb0d271040e8bfa20398883fc6af17d02bf3320b1d6bbf0906dec1b5fb74e4171a7b70f77073e8f0830ad21a5df04f4ad8c00dddc464c64be488dd336b3388fa2511c15a86f5bf5174a0d6fe1ad3985827b4f9ab1ae5dbe9bc48270cf089c3d2cf9d28f3aaf6f8d61818e637f8046f4b5dc456a0e7215b55a2e1a7b12c45001780b2896546ac92d6ea55de7b63615ace6d6be3043182a0d253e26c8704fc0d8aef971ee13e180adab37a470d663f787d7aa634c8e07880cfeb3484234a5320bafd021ee20f93f6cf1048d4c541856baa9da8166a784a0a01952a009577f84fcda9c9a2fdf55ebe2f91a5bb2d2479456650c9379f55864586d24a1c5e954188a20034591bd5b553915839e423df08bdeef24f7e7c0777977707b75411038b276153934333d7f00cea15f421f22a03468c3764876f8e12978f3ba7d4e96a2605481745a89b67e1c653926f53a76ea59c270ebb08e48ab70486b6fa2c5d7e94f678ffb5bca0d5fc56d31b187a1dd9a63b04943933f84022984c5a9388e116d54b2a9ac10d5ddae628b5bcf70997f006dd68930861b2c3e972ab3ce55490d1eecbf145ebdfdeb47a868de26cb48d0a10f440c51122297ac88f8910f50064dae1be972c79e91b80f0a7c1aff7081b598643f48de0fbe2066ecf48c498179be9e4f9956937253b4bdfd6157c6a0299a3e78325119fb7e9f07c929e483fff8a44ad06ab5cb70c2226bfb85db150302f0801531500cb995d83f34cc83e7c675bc55f7ef8c4f02883185a101e5f04a203d210c4bcdc6fb722c197c0742af969ab0e5c1847cac5224f5098b395db1cde4a5f66f341c26569555e0fb194024b397ba1b35e673536cc48cd4a59071e3f39f20c9565226b32c0da0c94065db2dcce7592bdbd557f0431a46c28121c562daee6d1662024eba79fd1c2a1320c3e9a2b74ca790103795463e8a8833ae74c12e46f646a46f2a53e97f9c38f6342d50979a417cee3c3deed05cc1f729fa7a1f62cf8694a2c1b5b831ad03ddb464aa356a83561599ec4a71746428f9845b99da2137afd44b366014c3c57beecb12af8e8f20695b17272bc2f81f602fb5646198f4d65cabd2b80529080ed9ba68ea49235747b8228bc50181eaea9f079c25c101241a9e1300a1ca1db5ba1ce235ba549609919fb22de6d867e6dac8180c65119e6278e2554c36910026478d6951e86e0f87a748be709f4761b813f0bb1a009cee76e18845fa151b6b3b2d3c065c161bf72513c7e34f7b9b5af6698ca197e1b51d4cff879d84af5b90773bfb603b84dc42b16190cd7af3869944306b388f4c47c9241991a67a010be8239eea0ac09f1e1786f62035ae246a762df6cf51a637f5b5027534b52d277fd12e645eeb8bef93b2ad843ceb475c6dd69e1f5b665900241aded993c3ec131cc08ca092c0144819ff133e568c835f851e02bf0d1447a9397ac76fd178af13784df59fbbe9185663b19f42846885458fa3bac00dd43683d9c9b51cd01c51d4a301401b518bfc187f528ad2b8ddac67353c717a680a538d70f4bf93d017e47f00d3e685e28131f0f9118716c3b2bff1f201c258a378ff2d0d610288376dffd09c010790432577ade863542337803586642df37cb2dd08321656176234d42f1d3286cd1282f8a8ea915bb7fdd54911f15bbdc57c4586a99946aa275757f0018729dd3e9a215641df710b50de34c78ced5468acb0638fab328301b6b7bf8687c4e78683dec00fc77165c29c5ba1009a8527b2eb7526e01d51526e910aaaaeed8606e7c3aa396e972cf9d6d21b8123d413b8530f1728d66e9909483619750aebadb36e8daee803587509d10518dcbfa4dd02589ab796e5d39265d68125d7373a4b0db150be9db238d0c9345d0b327a089c4627656904d5e795e2a09a2aa6f4040c7bf8f1ed69331cf30bf02528fee73f104208f346a5a7f5a399fde7e3b2967ac51b0a10ac031c63484064a8caaac322f16286eb9697df5b48bf1c8de2364821ffa429d8005ee8975cd81fe7b72462cb07752961952a9f6dca78f3d49a53218fa30171f552d5977f07a8de417015d89f48e8d1f12f454b66eebde7ece9243eeca8588f95e8c6cf95b729b8257eab0f02132fede0007057e17c9ea2b223e935bfe6159efee6d56274f99403d021d81592742f4b182ed2c8baeee61de063c1fb24d00bebf1e911e9758cb0903e664f232f4623d1554cf09e3b4e2a0c5639cdf9e714be30ccf9a312c57745036ace111e8398119bd0ac24e6c26cfb981de0cf1e9d156cd2c80829292df18505dee0b73a43892a8ea80f01b0dc567dd35006919e0ab75e4798bf3fbdfe695539307c4c37dbfa68c5ca1e7049a04d01f57188e70ca7c602a2a24d2293f7ca9b39ef36bfe2af673c1594300ab276185187b3b7cf18e1cbeb5baf54266c9056dc001a985d031371b4d3daa8cbd4b47c78bb5688de05a93b49f0723454cce95f42120b247959c540c64bfc58b5cf01ac0d411a5a52ca1c44a9ecf07309293272c846a0976d0b370b93eb0b346d8f0bbb93bb6b2821d9acbc516de5398514a82bea46fc253b5ee87948b8ac6578bd2bf89e6757fdfcd6f816dca7a0154cb80fa100c668074a587f0ed799a5e3d9b06417e5e61e056d0ea48a7fd5361a0abc13cc33cdb3af04933255786be9f0ee97b23739cb2f53eba2e7f6e7b82d90026a25d63772ec3cb6467b0d1ff8ff3f951350644fe66f07a37682e9bbb98457d0b91a69815f00a3f2ef98eded780ba7230a29ea7b2564962ab3ff2b503e02fd7327a5821886a0a2af0e2933c4dea244fc1c002a54b3e3cd2ec7d83e8bc57fddc53f1d04e12175f15bf1070bc235871a13a005a86bcff4417c9b59696a9e4c5b415d2bd9cbf4f83ecd1dd1917e1b722b0266e3bb769cd0f3b8ecae487d993de0cbdc86a489e53b7100b122959e428d3a84fc035603d720206417f73108ee9163250e7455a0b3d5f2fcfefa17f4ccb8207d3e349e53c2ea513cfa4e94add6808b464eaa082bb607e62aff72c3d5980418e2c59b09da243175aa39734e316a550bea541462c778317e871af90bd84d052e2e4da85fe28dbcba36ad5b293ddce2a2525a9aa577aaa47016271e94758c65a94e932615f19f4fcfc29ff505b0b57034d0410bbef04a162bc07e4d19ba083d14ae5f7e2365688d4240a9c5877b6d9de202fa856563853030050ab2410455e3f017657c1f0a52aa6cfdf3c709ae6472b9ae1b7aa0e25b06b4342c02858f0ede570db7658d617fbcc747bee9bcfd1d6f989792cdbfcb81252e06dc6e631c484209b580590f5fe06e0986a9fc7c860086e1f76e4b55781f0b998a3968bd7cf537572226ba81a6cb1e38cd1943a404f53fb159bfb10ce4f45a575c73f5e28fa90aee0a420a3dc386ee29bfc7bbc421bad1993d8ae18540d6597cc482a2bc06ddcfcdc9164cb2da2f762e557f31d5b3886251e63deeb9164a850712b5ac32c2d3b0cc52c672708b85b0018ecab19e79bb967065625f59e3a54e446304e57d61aaa66ecc8278458a1fae01dea87534d1d7983f7ed425b5a641a54388cba6d5707aad22f5635ec54bc29cd3b697e46e0a88bdb4b931defd7e0b06ad4c96d1b471ba0b95b3d7f5f5c646f12178235752b391fc417eb3497e0412225bc570e2be9b9f626bb4a7cd1273af5e53e5ef0afa389c260738c2953a20d5d1b9fa8db5bea21d1a9a91fd16b7157c607834d3a2d35bc95078b45e0086769f09eb469ebab1cf872032283d6b3799b5f803440abc738bcd89d6ca90f69412ff07feead25d4a16bee5568530e0f55c60f6bd84cbb3bb9a9830e4dc3d6bfd66a012732d4f9736926ba8df801adc327c009bc201514a5a09435f070b0cceae36936bdb00f18e97368dc47936006c397e252ae87de64316d7c6b690b2e0f54fbdbb8e252cc7b44d81d705c68d27240843530bdbe0e3e4e4a2631cff8d8008c66ff042a30ad52c59fa60320c57df57c09cbddad93d41ac9269f1eedbe6bf96e63fec72b1afc54d016af0a6aa90fcd6aee6815473058af85e2c297165563a0d20a7b3ef635ea8201f501c9c4d7cb4e1af9cdb32dfadc197641324c6c8a61c9df9022c20a4a4376921d22a205e3019db62063356519a305ba7df3f2fb7d4e5fd26c8ced40edfb26dd8cbcdc74f672390567480f89e98e74ee35a9da0ecc4d0865914580a70f6fd8930a0d1ff631b86bf02c884e8df8c60f3ac2bd22d028f4117b136d657e8360743d9f314316959053a823524cd2ba2ccc5b0520816f2042785ad1fd791ff6b20a249f497847fa70f93cf6f23e9d3a45e9d77d5e428ebf46bd04a52c86a1e819d16b7c8632f6fb60000944c1001d17dcc73a60590d0a76ea7393b75eaf24dee12bf0e4d1060bb6e5ef51105edee416a14fa1ee8f330257ec6a27cf08bd4dd3eac6078c8c95c76d8b4ff58f33487a5fb33162a980dc1558f4bb25fbaa3888f768f76191e2eca7a90ac02644ff35da8c7fb9a1cc3de7b9f017997df74389f2bc27ceef747319ae45f920870d61722c9edeaaca664f1d500020c5dc13c564af32c5e95f0f0753832e9db87abc584d04f5499c0d509f14aa3b11c1d35a1c2603f7e4722b3234c14453ffa78b1673ed9abe2e28acf978cfb0bfa4fa95d713d13b80e0006dc7f476eac32e52cd21e069516bb2edc3ce2358c50bd12fd0a7f819707234b853fe38ec3b906d09e5c5aee9a7b7fdbe7200b276a3a6c74ae3737b7fb12c2fc53aa23da1a16a7cae0b75090c37024313986c4f3a1139c63aeb2dc84030b192e627be5eec9bd4ca2def5dffc57b5c1239102ebd5b8d9f6e18b6f4945e7928b279d008ada0a1934d71c4f0d858cc5c11321d01b0d0aa13a27924250b2b4fd6e14fcf51d7a791c9be8188e60c8ab94a6cadb0b20c8a6f11e6cc2a024c58a71621df9fcb3014f51b4e3abfa9c6f35e8b4b3b2b925b73dee4f87d499c7f6297486bdbba30f2a5f7acd9c8e13690823fa6fd9fef1e24303e93b3d1131804b3db95e50cb468d6ecc522f9aa61dee79dbbc9f5ce3616a1024238cb93e313a28878c04345f8d1ee198a7e76c25c59f6851237826e7b112008152fa2e81d522b2c6c082b3a5ea444c80c34fa6f6d36bf4d39ddf98bcb5b24acc1e3e2d67f08ee2803ea0c67b3e2e5973581330330de6b667b769b69638601edabe192ced21be4a0ae952e7eb59760b456eda0775d77f5b17555efecd92916b7168c06e12922a0fd36ad870216ef07bb879002f4898203f042f126823e5f84d9ff7e34e55190a35a5ea41074393d47d3f7fa61db5b5e4bc6b75b4783891fa8456ce9d773356ae24eeac782adcd0d7e021de8a51ec149d159ee16010da7f718ab960e4656bf24c0823f6775ec136238d27538b43adf748a3052ba3faf73048626ede6", 0x1000}, {&(0x7f0000001340)="264296cf80b254dd3d6a2430e0f1454f3b60a67ec15d519698e599559b3f491c797ff97df7a9ada0afd2655b15d62eff9040c5eb9b30d734d673f488b12e90478108facd19dd6752bfd10e6fef36b0f85f714094b5d8d036d63baaa206b104ab28f8dbd8af2fee679b723c7d18eb789380058b58ab53a07f680e035b1d3784ebd8f7a6dea51b2a8e17cbb721923a1257322fd80079c1206f662a18f54dcaee2151c234a1d5d74d419d4b1faec9ab234350561fb771dd21a2f798d47365", 0xbd}, {&(0x7f0000001400)="efbcc4ee6ad4188c37c04ad9ba5b9b640ec2aeabfcf9a0af7edd2816c061c944cd752030cf66d15e7f9faa755490ce3dccaf79cdab14269e20eca8e45b04df3d2bcd3247749adf7ba3187b423c20a77f8419a1221bbcdde738b14809285d3ae2ce9ef7eee99c1782883ddd462e642180acfbbfa07a9699ccc5df11f90fe6e94603441c5ad0a8e5400ac33917825b8f6f2e1ec3c4c2e8147ef4c113463b8319c49ae8e901d8fbd0a125f0c52818c80d5da1ae0a125a1daa0088a3886b200108cabead729383e6b145c3311a37568da5ba", 0xd0}], 0x6, &(0x7f0000001580)=[@timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x20}}, @mark={{0x14, 0x1, 0x24, 0xffff337d}}, @txtime={{0x18, 0x1, 0x3d, 0x4241}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x78}, 0x40040) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65) 17:30:36 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)='\x00'/19, 0x13, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:30:36 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r1, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) (fail_nth: 12) [ 1497.746417] loop3: detected capacity change from 0 to 274 17:30:36 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec7032", 0x59, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 1497.792144] loop5: detected capacity change from 0 to 10 [ 1497.820578] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1497.821781] FAT-fs (loop5): Filesystem has been set read-only 17:30:36 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x4000, 0x9) [ 1497.869669] loop6: detected capacity change from 0 to 274 [ 1497.912229] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 1497.913289] FAT-fs (loop6): Filesystem has been set read-only 17:30:48 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x0) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 17:30:48 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, 0x0) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:30:48 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmget(0x3, 0x1000, 0x400, &(0x7f0000ffb000/0x1000)=nil) shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2000) 17:30:48 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2) 17:30:48 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec703251", 0x5a, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:30:48 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)='\x00'/19, 0x13, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:30:48 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x400000, 0x200, &(0x7f0000c00000/0x400000)=nil) shmctl$IPC_RMID(r1, 0x0) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:30:48 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r1, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) (fail_nth: 13) [ 1509.005915] loop5: detected capacity change from 0 to 10 [ 1509.010935] loop6: detected capacity change from 0 to 274 [ 1509.017754] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1509.018336] FAT-fs (loop5): Filesystem has been set read-only [ 1509.022580] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 1509.023122] FAT-fs (loop6): Filesystem has been set read-only [ 1509.064507] loop3: detected capacity change from 0 to 274 17:30:48 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)='\x00'/29, 0x1d, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:30:48 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec703251", 0x5a, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:30:48 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x0) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x6000) [ 1509.139633] loop5: detected capacity change from 0 to 10 17:30:48 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3) [ 1509.150069] loop6: detected capacity change from 0 to 274 [ 1509.153894] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1509.154549] FAT-fs (loop5): Filesystem has been set read-only [ 1509.163085] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 1509.163664] FAT-fs (loop6): Filesystem has been set read-only 17:31:00 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r1, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) (fail_nth: 14) 17:31:00 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4) 17:31:00 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x0) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 17:31:00 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) 17:31:00 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:31:00 executing program 7: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r0 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x5000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x800) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$SHM_UNLOCK(r1, 0xc) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000000)=0x8, 0x8, 0x2) 17:31:00 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)='\x00'/29, 0x1d, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:31:00 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec703251", 0x5a, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:31:00 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 17:31:00 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r1, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) (fail_nth: 15) [ 1521.689218] loop5: detected capacity change from 0 to 10 [ 1521.697863] loop3: detected capacity change from 0 to 274 [ 1521.709650] loop6: detected capacity change from 0 to 274 [ 1521.715535] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1521.716904] FAT-fs (loop5): Filesystem has been set read-only 17:31:00 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r0 = shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmdt(r0) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x16) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) [ 1521.758373] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 1521.759432] FAT-fs (loop6): Filesystem has been set read-only 17:31:00 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8) 17:31:00 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)='\x00'/29, 0x1d, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:31:01 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:31:01 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 17:31:01 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r1, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) (fail_nth: 16) 17:31:01 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/user\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, @in_args={0x1}}, './file0\x00'}) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000000)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$sock_SIOCOUTQ(r5, 0x5411, &(0x7f0000000000)) ioctl$PTP_PIN_GETFUNC2(r5, 0xc0603d0f, &(0x7f00000000c0)={'\x00', 0x1, 0x3, 0x2}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$INCFS_IOC_PERMIT_FILL(r5, 0x40046721, &(0x7f00000001c0)={r5}) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) [ 1521.959382] loop6: detected capacity change from 0 to 274 [ 1521.979686] FAT-fs (loop6): invalid media value (0x00) [ 1521.980500] FAT-fs (loop6): Can't find a valid FAT filesystem 17:31:01 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:31:01 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ff", 0x22, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) [ 1522.121835] loop3: detected capacity change from 0 to 274 17:31:10 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa) 17:31:10 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ff", 0x22, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:31:10 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r1, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) (fail_nth: 17) 17:31:10 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:31:10 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 17:31:10 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:31:10 executing program 0: shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) 17:31:10 executing program 7: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000070000000c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r4, 0x1, 0x0, 0x0, {0x32}}, 0x14}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r5, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80000}, 0x4000000) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r4, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x6}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x40}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x10}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x7}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0xa0}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x8c4) r6 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r6, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) [ 1531.438016] loop5: detected capacity change from 0 to 10 [ 1531.454915] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1531.455538] FAT-fs (loop5): Filesystem has been set read-only 17:31:10 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x0) [ 1531.505890] loop6: detected capacity change from 0 to 274 [ 1531.519499] FAT-fs (loop6): invalid media value (0x00) [ 1531.519911] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1531.524091] loop3: detected capacity change from 0 to 274 17:31:10 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ff", 0x22, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:31:10 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r1, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) (fail_nth: 18) [ 1531.604798] loop5: detected capacity change from 0 to 10 [ 1531.614098] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1531.614732] FAT-fs (loop5): Filesystem has been set read-only 17:31:21 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, 0x0, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:31:21 executing program 7: dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ff9000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4800) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) 17:31:21 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x0) 17:31:21 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:31:21 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xb) 17:31:21 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00", 0x24, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:31:21 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r1, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) (fail_nth: 19) 17:31:21 executing program 0: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x4, 0x81, 0xfb, 0x2, 0x8, @mcast2, @local, 0x10, 0x40, 0x7, 0x8}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x20, 0x4e, 0x8, 0x35, @dev={0xfe, 0x80, '\x00', 0x43}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x700, 0x4, 0x184}}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0xfbb3259065efa77, 0x1, 0x57, 0x7fffffff, 0x56, @private2, @private2, 0x10, 0x700, 0x4b3, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x2f, 0x10, 0x3, 0x1ff, 0x6, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x7f00, 0xc038, 0x8}}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) ioctl$sock_SIOCOUTQ(r9, 0x5411, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r9, 0x89fa, &(0x7f0000000940)={'syztnl0\x00', &(0x7f00000008c0)={'ip6tnl0\x00', r5, 0x2f, 0xad, 0xbc, 0xfff, 0x2, @remote, @local, 0x8, 0x7800, 0x611, 0x4}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0x284, r0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x284}, 0x1, 0x0, 0x0, 0x800}, 0x0) r10 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmdt(r10) madvise(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x17) munlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) mlock(&(0x7f0000fed000/0x13000)=nil, 0x13000) [ 1542.069874] loop6: detected capacity change from 0 to 274 [ 1542.072105] loop3: detected capacity change from 0 to 274 [ 1542.074570] loop5: detected capacity change from 0 to 10 [ 1542.089995] FAT-fs (loop6): invalid media value (0x00) [ 1542.090824] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1542.121730] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1542.122905] FAT-fs (loop5): Filesystem has been set read-only 17:31:21 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r1, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) (fail_nth: 20) 17:31:21 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe) 17:31:21 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x0) 17:31:21 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/230) r1 = shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:31:21 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:31:21 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00", 0x24, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:31:21 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, 0x0, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 1542.365004] loop6: detected capacity change from 0 to 274 [ 1542.374018] loop5: detected capacity change from 0 to 10 17:31:21 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xf) [ 1542.403054] loop3: detected capacity change from 0 to 274 [ 1542.406211] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1542.407630] FAT-fs (loop5): Filesystem has been set read-only [ 1542.445551] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1542.446774] FAT-fs (loop6): Filesystem has been set read-only 17:31:21 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r1, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) (fail_nth: 21) 17:31:21 executing program 7: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5) [ 1542.608441] FAULT_INJECTION: forcing a failure. [ 1542.608441] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1542.610324] CPU: 1 UID: 0 PID: 10627 Comm: syz-executor.1 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 1542.610354] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1542.610366] Call Trace: [ 1542.610373] [ 1542.610382] dump_stack_lvl+0xfa/0x120 [ 1542.610422] should_fail_ex+0x4d7/0x5e0 [ 1542.610465] _copy_to_user+0x32/0xd0 [ 1542.610492] simple_read_from_buffer+0xe0/0x180 [ 1542.610525] proc_fail_nth_read+0x189/0x270 [ 1542.610557] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1542.610589] ? security_file_permission+0x22/0x90 [ 1542.610614] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1542.610645] vfs_read+0x1eb/0xbe0 [ 1542.610681] ? __pfx_vfs_read+0x10/0x10 [ 1542.610713] ? lock_release+0xc8/0x290 [ 1542.610741] ? __fget_files+0x20d/0x3b0 [ 1542.610781] ksys_read+0x121/0x240 [ 1542.610811] ? __pfx_ksys_read+0x10/0x10 [ 1542.610842] ? perf_trace_sys_enter+0x2d/0x170 [ 1542.610885] do_syscall_64+0xbf/0x360 [ 1542.610907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1542.610930] RIP: 0033:0x7f4d1fecc69c [ 1542.610947] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1542.610967] RSP: 002b:00007f4d1d48f170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1542.610988] RAX: ffffffffffffffda RBX: 0000000020ffb000 RCX: 00007f4d1fecc69c [ 1542.611003] RDX: 000000000000000f RSI: 00007f4d1d48f1e0 RDI: 0000000000000003 [ 1542.611016] RBP: 00007f4d1d48f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1542.611029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1542.611041] R13: 00007ffdc9aa13bf R14: 00007f4d1d48f300 R15: 0000000000022000 [ 1542.611070] 17:31:33 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) 17:31:33 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00", 0x24, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:31:33 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:31:33 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r1, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) 17:31:33 executing program 0: shmget$private(0x0, 0x400000, 0x78000000, &(0x7f0000c00000/0x400000)=nil) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r0, &(0x7f0000f60000/0x3000)=nil, 0x1000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) 17:31:33 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, 0x0, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:31:33 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x10) 17:31:33 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 1554.439168] loop6: detected capacity change from 0 to 274 [ 1554.468298] loop3: detected capacity change from 0 to 274 [ 1554.476191] loop5: detected capacity change from 0 to 10 [ 1554.478217] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1554.479627] FAT-fs (loop6): Filesystem has been set read-only [ 1554.539704] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1554.541812] FAT-fs (loop5): Filesystem has been set read-only 17:31:33 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x11) 17:31:33 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:31:33 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1004, 0x9) 17:31:33 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 17:31:33 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r1, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4002) 17:31:33 executing program 7: fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000080)={0xa0, 0x19, 0x2, {0x112, {0x1, 0x4, 0x3}, 0x1e, 0x0, r0, 0x2, 0x3, 0x8001, 0xffffffffffffffff, 0x2d3, 0x1, 0x100000000, 0x4, 0x40, 0x2f9, 0x65fa, 0x1b56, 0x0, 0x80, 0x1000}}, 0xa0) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffc000/0x3000)=nil, 0x0) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:31:33 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0", 0x25, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:31:33 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 1554.694120] loop6: detected capacity change from 0 to 274 [ 1554.751637] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1554.753527] FAT-fs (loop6): Filesystem has been set read-only 17:31:33 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x12) [ 1554.773234] loop5: detected capacity change from 0 to 10 [ 1554.792283] loop3: detected capacity change from 0 to 274 [ 1554.809326] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000000f) 17:31:33 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r1, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4003) [ 1554.810552] FAT-fs (loop5): Filesystem has been set read-only 17:31:33 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x6000) (fail_nth: 1) 17:31:33 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x78000000, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:31:34 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {0x0, 0x0, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:31:34 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0", 0x25, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) [ 1554.969016] FAULT_INJECTION: forcing a failure. [ 1554.969016] name failslab, interval 1, probability 0, space 0, times 0 [ 1554.970970] CPU: 1 UID: 0 PID: 10688 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 1554.971001] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1554.971015] Call Trace: [ 1554.971022] [ 1554.971031] dump_stack_lvl+0xfa/0x120 [ 1554.971074] should_fail_ex+0x4d7/0x5e0 [ 1554.971112] should_failslab+0xc2/0x120 [ 1554.971135] __kmalloc_cache_noprof+0x73/0x4a0 [ 1554.971165] ? find_held_lock+0x2b/0x80 [ 1554.971197] ? do_shmat+0x576/0x1310 [ 1554.971230] ? lock_release+0xc8/0x290 [ 1554.971256] ? do_shmat+0x576/0x1310 [ 1554.971287] do_shmat+0x576/0x1310 [ 1554.971325] ? __pfx_do_shmat+0x10/0x10 [ 1554.971355] ? find_held_lock+0x2b/0x80 [ 1554.971386] ? __might_fault+0x138/0x190 [ 1554.971410] ? lock_release+0xc8/0x290 [ 1554.971437] __x64_sys_shmat+0xcf/0x160 [ 1554.971476] ? syscall_trace_enter+0x1cf/0x260 [ 1554.971514] ? __pfx___x64_sys_shmat+0x10/0x10 [ 1554.971551] ? syscall_trace_enter+0xf2/0x260 [ 1554.971587] do_syscall_64+0xbf/0x360 [ 1554.971611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1554.971635] RIP: 0033:0x7fb8b7768b19 [ 1554.971652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1554.971674] RSP: 002b:00007fb8b4cde188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 1554.971696] RAX: ffffffffffffffda RBX: 00007fb8b787bf60 RCX: 00007fb8b7768b19 [ 1554.971712] RDX: 0000000000006000 RSI: 0000000020ffc000 RDI: 000000000000008f [ 1554.971726] RBP: 00007fb8b4cde1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1554.971739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1554.971753] R13: 00007ffeb3ccfc3f R14: 00007fb8b4cde300 R15: 0000000000022000 [ 1554.971782] [ 1555.006951] loop6: detected capacity change from 0 to 274 [ 1555.025690] loop5: detected capacity change from 0 to 10 [ 1555.049542] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1555.050805] FAT-fs (loop6): Filesystem has been set read-only [ 1555.080515] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000000f) [ 1555.081708] FAT-fs (loop5): Filesystem has been set read-only 17:31:43 executing program 0: shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) 17:31:43 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r1, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4004) 17:31:43 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0", 0x25, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:31:43 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {0x0, 0x0, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:31:43 executing program 7: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x78000b82, &(0x7f0000ffd000/0x3000)=nil) r0 = shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffb000/0x2000)=nil) r1 = shmget$private(0x0, 0x5000, 0x2, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0) r2 = shmget(0x0, 0x2000, 0x1000, &(0x7f0000ffc000/0x2000)=nil) shmat(r2, &(0x7f0000ffb000/0x4000)=nil, 0x6000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) 17:31:43 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x6000) (fail_nth: 2) 17:31:43 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x13) 17:31:43 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200) [ 1564.472965] loop5: detected capacity change from 0 to 10 [ 1564.484418] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000000f) [ 1564.485032] FAT-fs (loop5): Filesystem has been set read-only 17:31:43 executing program 7: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) (fail_nth: 1) [ 1564.510062] loop3: detected capacity change from 0 to 274 17:31:43 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) [ 1564.531233] loop6: detected capacity change from 0 to 274 [ 1564.559347] FAULT_INJECTION: forcing a failure. [ 1564.559347] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1564.560487] CPU: 0 UID: 0 PID: 10723 Comm: syz-executor.7 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 1564.560503] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1564.560511] Call Trace: [ 1564.560516] [ 1564.560521] dump_stack_lvl+0xfa/0x120 [ 1564.560546] should_fail_ex+0x4d7/0x5e0 [ 1564.560567] should_fail_alloc_page+0xe0/0x110 [ 1564.560581] prepare_alloc_pages+0x1af/0x500 [ 1564.560599] __alloc_frozen_pages_noprof+0x17f/0x1f10 [ 1564.560620] ? __lock_acquire+0xc65/0x1b70 [ 1564.560636] ? __lock_acquire+0xc65/0x1b70 [ 1564.560648] ? look_up_lock_class+0x56/0x150 [ 1564.560665] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1564.560683] ? look_up_lock_class+0x56/0x150 [ 1564.560704] ? __lock_acquire+0x694/0x1b70 [ 1564.560717] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1564.560733] ? policy_nodemask+0xeb/0x4e0 [ 1564.560749] alloc_pages_mpol+0xed/0x340 [ 1564.560764] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1564.560783] alloc_pages_noprof+0xa1/0x380 [ 1564.560799] __pmd_alloc+0x3b/0x980 [ 1564.560817] __handle_mm_fault+0xcae/0x30f0 [ 1564.560833] ? mtree_load+0xe8/0xa10 [ 1564.560850] ? find_held_lock+0x2b/0x80 [ 1564.560867] ? __pfx___handle_mm_fault+0x10/0x10 [ 1564.560882] ? lock_release+0xc8/0x290 [ 1564.560892] ? lock_is_held_type+0x9e/0x120 [ 1564.560920] handle_mm_fault+0x2c3/0x900 [ 1564.560939] __get_user_pages+0x58a/0x2f10 [ 1564.560966] ? find_held_lock+0x2b/0x80 [ 1564.560983] ? __pfx___get_user_pages+0x10/0x10 [ 1564.561001] ? lock_is_held_type+0x9e/0x120 [ 1564.561020] faultin_page_range+0x2f3/0x9d0 [ 1564.561041] madvise_do_behavior+0x8d8/0xe20 [ 1564.561057] ? __pfx_madvise_do_behavior+0x10/0x10 [ 1564.561071] ? down_read+0x1b1/0x470 [ 1564.561086] ? find_held_lock+0x2b/0x80 [ 1564.561105] do_madvise+0x16b/0x240 [ 1564.561116] ? __pfx_do_madvise+0x10/0x10 [ 1564.561132] ? lock_acquire+0xdf/0x2e0 [ 1564.561143] ? __might_fault+0xe0/0x190 [ 1564.561155] ? find_held_lock+0x2b/0x80 [ 1564.561170] ? __might_fault+0x138/0x190 [ 1564.561182] ? lock_release+0xc8/0x290 [ 1564.561194] ? __might_fault+0xe0/0x190 [ 1564.561206] ? find_held_lock+0x2b/0x80 [ 1564.561221] ? syscall_trace_enter+0x1cf/0x260 [ 1564.561241] ? lock_release+0xc8/0x290 [ 1564.561252] ? perf_trace_sys_enter+0x2d/0x170 [ 1564.561272] __x64_sys_madvise+0xa9/0x110 [ 1564.561284] do_syscall_64+0xbf/0x360 [ 1564.561296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1564.561309] RIP: 0033:0x7f8fdf467b19 [ 1564.561319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1564.561330] RSP: 002b:00007f8fdc9dd188 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1564.561341] RAX: ffffffffffffffda RBX: 00007f8fdf57af60 RCX: 00007f8fdf467b19 [ 1564.561349] RDX: 0000000000000017 RSI: 0000000000002000 RDI: 0000000020ffe000 [ 1564.561356] RBP: 00007f8fdc9dd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1564.561364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1564.561371] R13: 00007ffe58ee06ff R14: 00007f8fdc9dd300 R15: 0000000000022000 [ 1564.561387] [ 1564.604588] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1564.605256] FAT-fs (loop6): Filesystem has been set read-only 17:31:43 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r1, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4005) [ 1564.680043] loop5: detected capacity change from 0 to 10 [ 1564.683595] FAT-fs (loop5): bogus number of reserved sectors [ 1564.684073] FAT-fs (loop5): Can't find a valid FAT filesystem 17:31:52 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:31:52 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x6000) (fail_nth: 3) 17:31:52 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x14) 17:31:52 executing program 7: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) (fail_nth: 2) 17:31:52 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {0x0, 0x0, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:31:52 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r1, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4006) 17:31:52 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200) 17:31:52 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000080)={0x1, 0x7, @start={0x0, 0x1, "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", "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"}, [0x1, 0x1, 0x0, 0xeaf, 0xc460, 0x7, 0x8, 0x4, 0xb, 0x100, 0x0, 0x101, 0x3d, 0x2, 0x7, 0x7f, 0x3ff, 0x7, 0xfffffffffffffff7, 0x69, 0x8, 0x8000, 0x80000001, 0x8c, 0x3ff, 0x6, 0x100, 0x6, 0x4, 0x42, 0x10000, 0x5, 0x2, 0x2e, 0x10000, 0xdba7, 0x7, 0x6, 0x7, 0x8, 0x7, 0x2, 0x400, 0x3, 0xddd, 0x1, 0x9, 0xffff, 0x4, 0x3, 0x7, 0x3d8, 0x2, 0x7fffffff, 0x1f, 0x28, 0x5, 0x800000000000, 0x1e, 0xcd33, 0x8, 0x2, 0x2, 0xeef5]}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000ac0)={{r0}, 0x0, 0x10, @unused=[0x9, 0x5, 0x9, 0x5], @devid=r1}) r2 = dup(r0) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x24040, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r3, 0x40046721, &(0x7f0000000000)={r0}) r4 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) shmdt(r4) [ 1573.140955] loop6: detected capacity change from 0 to 274 [ 1573.153417] loop5: detected capacity change from 0 to 10 [ 1573.164342] FAULT_INJECTION: forcing a failure. [ 1573.164342] name failslab, interval 1, probability 0, space 0, times 0 [ 1573.166207] CPU: 1 UID: 0 PID: 10746 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 1573.166237] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1573.166250] Call Trace: [ 1573.166257] [ 1573.166266] dump_stack_lvl+0xfa/0x120 [ 1573.166307] should_fail_ex+0x4d7/0x5e0 [ 1573.166344] ? alloc_empty_file+0x58/0x1e0 [ 1573.166368] should_failslab+0xc2/0x120 [ 1573.166390] kmem_cache_alloc_noprof+0x5f/0x470 [ 1573.166410] FAULT_INJECTION: forcing a failure. [ 1573.166410] name failslab, interval 1, probability 0, space 0, times 0 [ 1573.166420] ? __create_object+0x59/0x80 [ 1573.166461] alloc_empty_file+0x58/0x1e0 [ 1573.166487] alloc_file_clone+0x5f/0x110 [ 1573.166514] do_shmat+0x61f/0x1310 [ 1573.166554] ? __pfx_do_shmat+0x10/0x10 [ 1573.166583] ? find_held_lock+0x2b/0x80 [ 1573.166613] ? __might_fault+0x138/0x190 [ 1573.166636] ? lock_release+0xc8/0x290 [ 1573.166663] __x64_sys_shmat+0xcf/0x160 [ 1573.166693] ? syscall_trace_enter+0x1cf/0x260 [ 1573.166730] ? __pfx___x64_sys_shmat+0x10/0x10 [ 1573.166765] ? syscall_trace_enter+0xf2/0x260 [ 1573.166806] do_syscall_64+0xbf/0x360 [ 1573.166833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1573.166859] RIP: 0033:0x7fb8b7768b19 [ 1573.166878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1573.166903] RSP: 002b:00007fb8b4cde188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 1573.166928] RAX: ffffffffffffffda RBX: 00007fb8b787bf60 RCX: 00007fb8b7768b19 [ 1573.166945] RDX: 0000000000006000 RSI: 0000000020ffc000 RDI: 0000000000000093 [ 1573.166961] RBP: 00007fb8b4cde1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1573.166977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1573.166992] R13: 00007ffeb3ccfc3f R14: 00007fb8b4cde300 R15: 0000000000022000 [ 1573.167026] [ 1573.185560] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1573.186809] CPU: 0 UID: 0 PID: 10752 Comm: syz-executor.7 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 1573.186840] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1573.186853] Call Trace: [ 1573.186861] [ 1573.186870] dump_stack_lvl+0xfa/0x120 [ 1573.186910] should_fail_ex+0x4d7/0x5e0 [ 1573.186945] ? __pmd_alloc+0x98/0x980 [ 1573.186971] should_failslab+0xc2/0x120 [ 1573.186993] kmem_cache_alloc_noprof+0x5f/0x470 [ 1573.187030] __pmd_alloc+0x98/0x980 [ 1573.187060] __handle_mm_fault+0xcae/0x30f0 [ 1573.187087] ? mtree_load+0xe8/0xa10 [ 1573.187118] ? find_held_lock+0x2b/0x80 [ 1573.187149] ? __pfx___handle_mm_fault+0x10/0x10 [ 1573.187175] ? lock_release+0xc8/0x290 [ 1573.187194] ? lock_is_held_type+0x9e/0x120 [ 1573.187247] handle_mm_fault+0x2c3/0x900 [ 1573.187280] __get_user_pages+0x58a/0x2f10 [ 1573.187324] ? find_held_lock+0x2b/0x80 [ 1573.187354] ? __pfx___get_user_pages+0x10/0x10 [ 1573.187387] ? lock_is_held_type+0x9e/0x120 [ 1573.187419] faultin_page_range+0x2f3/0x9d0 [ 1573.187465] madvise_do_behavior+0x8d8/0xe20 [ 1573.187492] ? __pfx_madvise_do_behavior+0x10/0x10 [ 1573.187516] ? down_read+0x1b1/0x470 [ 1573.187541] ? find_held_lock+0x2b/0x80 [ 1573.187575] do_madvise+0x16b/0x240 [ 1573.187595] ? __pfx_do_madvise+0x10/0x10 [ 1573.187622] ? lock_acquire+0xdf/0x2e0 [ 1573.187642] ? __might_fault+0xe0/0x190 [ 1573.187663] ? find_held_lock+0x2b/0x80 [ 1573.187690] ? __might_fault+0x138/0x190 [ 1573.187711] ? lock_release+0xc8/0x290 [ 1573.187733] ? __might_fault+0xe0/0x190 [ 1573.187753] ? find_held_lock+0x2b/0x80 [ 1573.187781] ? syscall_trace_enter+0x1cf/0x260 [ 1573.187815] ? lock_release+0xc8/0x290 [ 1573.187834] ? perf_trace_sys_enter+0x2d/0x170 [ 1573.187869] __x64_sys_madvise+0xa9/0x110 [ 1573.187891] do_syscall_64+0xbf/0x360 [ 1573.187912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1573.187934] RIP: 0033:0x7f8fdf467b19 [ 1573.187950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1573.187970] RSP: 002b:00007f8fdc9dd188 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1573.187990] RAX: ffffffffffffffda RBX: 00007f8fdf57af60 RCX: 00007f8fdf467b19 17:31:52 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r0 = shmget$private(0x0, 0x1000, 0x4, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/13) [ 1573.188004] RDX: 0000000000000017 RSI: 0000000000002000 RDI: 0000000020ffe000 [ 1573.188016] RBP: 00007f8fdc9dd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1573.188029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1573.188040] R13: 00007ffe58ee06ff R14: 00007f8fdc9dd300 R15: 0000000000022000 [ 1573.188068] [ 1573.191363] loop3: detected capacity change from 0 to 274 [ 1573.192271] FAT-fs (loop6): Filesystem has been set read-only [ 1573.254334] FAT-fs (loop5): bogus number of reserved sectors [ 1573.256086] FAT-fs (loop5): Can't find a valid FAT filesystem 17:31:52 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x15) 17:31:52 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r1, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4007) 17:31:52 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100), 0x0, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:31:52 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x6000) (fail_nth: 4) 17:31:52 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:31:52 executing program 7: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) (fail_nth: 3) [ 1573.427158] loop6: detected capacity change from 0 to 274 [ 1573.443832] loop5: detected capacity change from 0 to 10 17:31:52 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200) [ 1573.463117] FAT-fs (loop5): bogus number of reserved sectors [ 1573.464148] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1573.487151] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1573.488551] FAT-fs (loop6): Filesystem has been set read-only [ 1573.569677] loop3: detected capacity change from 0 to 274 17:32:04 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, 0x0, 0x200) 17:32:04 executing program 7: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) (fail_nth: 4) 17:32:04 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:32:04 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x17) 17:32:04 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_RMID(r0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) 17:32:04 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x6000) (fail_nth: 5) 17:32:04 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100), 0x0, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:32:04 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r1, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4008) [ 1585.360782] FAULT_INJECTION: forcing a failure. [ 1585.360782] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1585.361896] CPU: 1 UID: 0 PID: 10792 Comm: syz-executor.7 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 1585.361912] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1585.361919] Call Trace: [ 1585.361923] [ 1585.361928] dump_stack_lvl+0xfa/0x120 [ 1585.361963] should_fail_ex+0x4d7/0x5e0 [ 1585.361983] should_fail_alloc_page+0xe0/0x110 [ 1585.361997] prepare_alloc_pages+0x1af/0x500 [ 1585.362014] __alloc_frozen_pages_noprof+0x17f/0x1f10 [ 1585.362031] ? kernel_text_address+0x5b/0xc0 [ 1585.362044] ? lock_acquire+0xdf/0x2e0 [ 1585.362057] ? unwind_get_return_address+0x59/0xa0 [ 1585.362075] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1585.362090] ? arch_stack_walk+0x9c/0xf0 [ 1585.362105] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1585.362130] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1585.362145] ? policy_nodemask+0xeb/0x4e0 [ 1585.362162] alloc_pages_mpol+0xed/0x340 [ 1585.362177] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1585.362196] alloc_pages_noprof+0xa1/0x380 [ 1585.362211] pte_alloc_one+0x1e/0x360 [ 1585.362227] __do_fault+0x30d/0x480 [ 1585.362242] __handle_mm_fault+0xfea/0x30f0 [ 1585.362259] ? find_held_lock+0x2b/0x80 [ 1585.362276] ? __pfx___handle_mm_fault+0x10/0x10 [ 1585.362291] ? lock_release+0xc8/0x290 [ 1585.362301] ? lock_is_held_type+0x9e/0x120 [ 1585.362331] handle_mm_fault+0x2c3/0x900 [ 1585.362349] __get_user_pages+0x58a/0x2f10 [ 1585.362374] ? find_held_lock+0x2b/0x80 [ 1585.362391] ? __pfx___get_user_pages+0x10/0x10 [ 1585.362410] ? lock_is_held_type+0x9e/0x120 [ 1585.362428] faultin_page_range+0x2f3/0x9d0 [ 1585.362453] madvise_do_behavior+0x8d8/0xe20 [ 1585.362469] ? __pfx_madvise_do_behavior+0x10/0x10 [ 1585.362482] ? down_read+0x1b1/0x470 [ 1585.362497] ? find_held_lock+0x2b/0x80 [ 1585.362516] do_madvise+0x16b/0x240 [ 1585.362527] ? __pfx_do_madvise+0x10/0x10 [ 1585.362543] ? lock_acquire+0xdf/0x2e0 [ 1585.362554] ? __might_fault+0xe0/0x190 [ 1585.362566] ? find_held_lock+0x2b/0x80 [ 1585.362581] ? __might_fault+0x138/0x190 [ 1585.362593] ? lock_release+0xc8/0x290 [ 1585.362605] ? __might_fault+0xe0/0x190 [ 1585.362617] ? find_held_lock+0x2b/0x80 [ 1585.362633] ? syscall_trace_enter+0x1cf/0x260 [ 1585.362652] ? lock_release+0xc8/0x290 [ 1585.362663] ? perf_trace_sys_enter+0x2d/0x170 [ 1585.362683] __x64_sys_madvise+0xa9/0x110 [ 1585.362695] do_syscall_64+0xbf/0x360 [ 1585.362707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1585.362720] RIP: 0033:0x7f8fdf467b19 [ 1585.362729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1585.362740] RSP: 002b:00007f8fdc9dd188 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1585.362752] RAX: ffffffffffffffda RBX: 00007f8fdf57af60 RCX: 00007f8fdf467b19 [ 1585.362760] RDX: 0000000000000017 RSI: 0000000000002000 RDI: 0000000020ffe000 [ 1585.362767] RBP: 00007f8fdc9dd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1585.362774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1585.362780] R13: 00007ffe58ee06ff R14: 00007f8fdc9dd300 R15: 0000000000022000 [ 1585.362796] [ 1585.368224] loop3: detected capacity change from 0 to 274 [ 1585.374064] loop6: detected capacity change from 0 to 274 [ 1585.381206] FAULT_INJECTION: forcing a failure. [ 1585.381206] name failslab, interval 1, probability 0, space 0, times 0 [ 1585.395875] CPU: 1 UID: 0 PID: 10795 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 1585.395890] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1585.395896] Call Trace: [ 1585.395900] [ 1585.395905] dump_stack_lvl+0xfa/0x120 [ 1585.395923] should_fail_ex+0x4d7/0x5e0 [ 1585.395941] ? security_file_alloc+0x35/0x130 [ 1585.395954] should_failslab+0xc2/0x120 [ 1585.395965] kmem_cache_alloc_noprof+0x5f/0x470 [ 1585.395982] ? __create_object+0x59/0x80 [ 1585.395999] security_file_alloc+0x35/0x130 [ 1585.396011] init_file+0x95/0x4c0 [ 1585.396025] alloc_empty_file+0x76/0x1e0 [ 1585.396039] alloc_file_clone+0x5f/0x110 [ 1585.396053] do_shmat+0x61f/0x1310 [ 1585.396074] ? __pfx_do_shmat+0x10/0x10 [ 1585.396089] ? find_held_lock+0x2b/0x80 [ 1585.396104] ? __might_fault+0x138/0x190 [ 1585.396116] ? lock_release+0xc8/0x290 [ 1585.396130] __x64_sys_shmat+0xcf/0x160 [ 1585.396146] ? syscall_trace_enter+0x1cf/0x260 [ 1585.396164] ? __pfx___x64_sys_shmat+0x10/0x10 [ 1585.396183] ? syscall_trace_enter+0xf2/0x260 [ 1585.396202] do_syscall_64+0xbf/0x360 [ 1585.396213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1585.396224] RIP: 0033:0x7fb8b7768b19 [ 1585.396233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1585.396244] RSP: 002b:00007fb8b4cde188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 1585.396255] RAX: ffffffffffffffda RBX: 00007fb8b787bf60 RCX: 00007fb8b7768b19 [ 1585.396263] RDX: 0000000000006000 RSI: 0000000020ffc000 RDI: 0000000000000097 [ 1585.396270] RBP: 00007fb8b4cde1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1585.396277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1585.396284] R13: 00007ffeb3ccfc3f R14: 00007fb8b4cde300 R15: 0000000000022000 [ 1585.396299] [ 1585.402901] loop5: detected capacity change from 0 to 10 [ 1585.409494] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1585.415312] FAT-fs (loop6): Filesystem has been set read-only 17:32:04 executing program 7: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) (fail_nth: 5) [ 1585.450517] FAT-fs (loop5): bogus number of reserved sectors [ 1585.451451] FAT-fs (loop5): Can't find a valid FAT filesystem 17:32:04 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100), 0x0, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 1585.497271] FAULT_INJECTION: forcing a failure. [ 1585.497271] name failslab, interval 1, probability 0, space 0, times 0 [ 1585.498249] CPU: 1 UID: 0 PID: 10805 Comm: syz-executor.7 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 1585.498265] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1585.498272] Call Trace: [ 1585.498276] [ 1585.498281] dump_stack_lvl+0xfa/0x120 [ 1585.498304] should_fail_ex+0x4d7/0x5e0 [ 1585.498324] ? ptlock_alloc+0x21/0x70 [ 1585.498341] should_failslab+0xc2/0x120 [ 1585.498353] kmem_cache_alloc_noprof+0x5f/0x470 [ 1585.498374] ptlock_alloc+0x21/0x70 [ 1585.498391] pte_alloc_one+0x86/0x360 [ 1585.498408] __do_fault+0x30d/0x480 [ 1585.498422] __handle_mm_fault+0xfea/0x30f0 [ 1585.498439] ? find_held_lock+0x2b/0x80 [ 1585.498461] ? __pfx___handle_mm_fault+0x10/0x10 [ 1585.498475] ? lock_release+0xc8/0x290 [ 1585.498487] ? lock_is_held_type+0x9e/0x120 [ 1585.498516] handle_mm_fault+0x2c3/0x900 [ 1585.498535] __get_user_pages+0x58a/0x2f10 [ 1585.498559] ? find_held_lock+0x2b/0x80 [ 1585.498576] ? __pfx___get_user_pages+0x10/0x10 [ 1585.498595] ? lock_is_held_type+0x9e/0x120 [ 1585.498613] faultin_page_range+0x2f3/0x9d0 [ 1585.498635] madvise_do_behavior+0x8d8/0xe20 [ 1585.498650] ? __pfx_madvise_do_behavior+0x10/0x10 [ 1585.498664] ? down_read+0x1b1/0x470 [ 1585.498679] ? find_held_lock+0x2b/0x80 [ 1585.498699] do_madvise+0x16b/0x240 [ 1585.498710] ? __pfx_do_madvise+0x10/0x10 [ 1585.498725] ? lock_acquire+0xdf/0x2e0 [ 1585.498737] ? __might_fault+0xe0/0x190 [ 1585.498749] ? find_held_lock+0x2b/0x80 [ 1585.498764] ? __might_fault+0x138/0x190 [ 1585.498776] ? lock_release+0xc8/0x290 [ 1585.498788] ? __might_fault+0xe0/0x190 [ 1585.498800] ? find_held_lock+0x2b/0x80 [ 1585.498815] ? syscall_trace_enter+0x1cf/0x260 [ 1585.498834] ? lock_release+0xc8/0x290 [ 1585.498845] ? perf_trace_sys_enter+0x2d/0x170 [ 1585.498865] __x64_sys_madvise+0xa9/0x110 [ 1585.498878] do_syscall_64+0xbf/0x360 [ 1585.498890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1585.498902] RIP: 0033:0x7f8fdf467b19 [ 1585.498911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1585.498922] RSP: 002b:00007f8fdc9dd188 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1585.498933] RAX: ffffffffffffffda RBX: 00007f8fdf57af60 RCX: 00007f8fdf467b19 [ 1585.498941] RDX: 0000000000000017 RSI: 0000000000002000 RDI: 0000000020ffe000 [ 1585.498948] RBP: 00007f8fdc9dd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1585.498956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1585.498963] R13: 00007ffe58ee06ff R14: 00007f8fdc9dd300 R15: 0000000000022000 [ 1585.498978] 17:32:04 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r1, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4021) 17:32:04 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x6000) (fail_nth: 6) 17:32:04 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x18) 17:32:04 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 17:32:04 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, 0x0, 0x200) [ 1585.589438] loop6: detected capacity change from 0 to 274 17:32:04 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:32:04 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x19) [ 1585.627971] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1585.629340] FAT-fs (loop6): Filesystem has been set read-only 17:32:04 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) 17:32:04 executing program 7: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) (fail_nth: 6) [ 1585.666722] loop5: detected capacity change from 0 to 10 17:32:04 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x6000) (fail_nth: 7) [ 1585.689814] loop3: detected capacity change from 0 to 274 [ 1585.707794] FAT-fs (loop5): bogus number of reserved sectors [ 1585.708960] FAT-fs (loop5): Can't find a valid FAT filesystem 17:32:04 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x66) 17:32:04 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)='\x00'/19, 0x13, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) [ 1585.787975] FAULT_INJECTION: forcing a failure. [ 1585.787975] name failslab, interval 1, probability 0, space 0, times 0 [ 1585.790725] CPU: 0 UID: 0 PID: 10832 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 1585.790763] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1585.790780] Call Trace: [ 1585.790789] [ 1585.790798] dump_stack_lvl+0xfa/0x120 [ 1585.790852] should_fail_ex+0x4d7/0x5e0 [ 1585.790903] ? vm_area_dup+0x25/0x6f0 [ 1585.790932] should_failslab+0xc2/0x120 [ 1585.790962] kmem_cache_alloc_noprof+0x5f/0x470 [ 1585.791014] ? __pfx_shm_may_split+0x10/0x10 [ 1585.791052] vm_area_dup+0x25/0x6f0 [ 1585.791079] ? __pfx_shm_may_split+0x10/0x10 [ 1585.791118] __split_vma+0x179/0xde0 [ 1585.791166] ? __pfx___split_vma+0x10/0x10 [ 1585.791233] vms_gather_munmap_vmas+0x16e/0xc60 [ 1585.791288] __mmap_region+0x44e/0x2670 [ 1585.791336] ? __lock_acquire+0x694/0x1b70 [ 1585.791375] ? __pfx___mmap_region+0x10/0x10 [ 1585.791412] ? __lock_acquire+0x694/0x1b70 [ 1585.791467] ? lock_acquire+0xdf/0x2e0 [ 1585.791495] ? __is_insn_slot_addr+0x2e/0x290 [ 1585.791540] ? find_held_lock+0x2b/0x80 [ 1585.791580] ? __is_insn_slot_addr+0x136/0x290 [ 1585.791623] ? lock_release+0xc8/0x290 [ 1585.791662] ? __is_insn_slot_addr+0x140/0x290 [ 1585.791711] ? kernel_text_address+0x5b/0xc0 [ 1585.791745] ? __kernel_text_address+0xd/0x40 [ 1585.791843] ? mm_get_unmapped_area+0x98/0xe0 [ 1585.791886] ? lock_is_held_type+0x9e/0x120 [ 1585.791941] mmap_region+0x314/0x3e0 [ 1585.791999] do_mmap+0xa36/0x11d0 [ 1585.792044] ? __pfx_do_mmap+0x10/0x10 [ 1585.792077] ? down_write_killable+0x122/0x230 [ 1585.792111] ? __pfx_down_write_killable+0x10/0x10 [ 1585.792142] ? do_raw_spin_unlock+0x53/0x220 [ 1585.792189] do_shmat+0xfac/0x1310 [ 1585.792230] ? __pfx_do_shmat+0x10/0x10 [ 1585.792258] ? find_held_lock+0x2b/0x80 [ 1585.792286] ? __might_fault+0x138/0x190 [ 1585.792307] ? lock_release+0xc8/0x290 [ 1585.792332] __x64_sys_shmat+0xcf/0x160 [ 1585.792361] ? syscall_trace_enter+0x1cf/0x260 [ 1585.792395] ? __pfx___x64_sys_shmat+0x10/0x10 [ 1585.792430] ? syscall_trace_enter+0xf2/0x260 [ 1585.792464] do_syscall_64+0xbf/0x360 [ 1585.792486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1585.792508] RIP: 0033:0x7fb8b7768b19 [ 1585.792524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1585.792543] RSP: 002b:00007fb8b4cde188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 1585.792563] RAX: ffffffffffffffda RBX: 00007fb8b787bf60 RCX: 00007fb8b7768b19 [ 1585.792577] RDX: 0000000000006000 RSI: 0000000020ffc000 RDI: 000000000000009b [ 1585.792590] RBP: 00007fb8b4cde1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1585.792602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1585.792614] R13: 00007ffeb3ccfc3f R14: 00007fb8b4cde300 R15: 0000000000022000 [ 1585.792643] [ 1585.886747] loop6: detected capacity change from 0 to 274 [ 1585.908500] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1585.910683] FAT-fs (loop6): Filesystem has been set read-only 17:32:13 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9) 17:32:13 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)='\x00'/19, 0x13, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:32:13 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x6000) (fail_nth: 8) 17:32:13 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r1, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4028) 17:32:13 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x67) 17:32:13 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, 0x0, 0x200) 17:32:13 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:32:13 executing program 7: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) (fail_nth: 7) [ 1593.980288] loop3: detected capacity change from 0 to 274 [ 1594.024791] FAULT_INJECTION: forcing a failure. [ 1594.024791] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1594.025965] CPU: 0 UID: 0 PID: 10858 Comm: syz-executor.7 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 1594.025981] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1594.025988] Call Trace: [ 1594.025992] [ 1594.025997] dump_stack_lvl+0xfa/0x120 [ 1594.026029] should_fail_ex+0x4d7/0x5e0 [ 1594.026049] should_fail_alloc_page+0xe0/0x110 [ 1594.026063] prepare_alloc_pages+0x1af/0x500 [ 1594.026077] ? __is_insn_slot_addr+0x140/0x290 [ 1594.026096] __alloc_frozen_pages_noprof+0x17f/0x1f10 [ 1594.026113] ? unwind_get_return_address+0x59/0xa0 [ 1594.026131] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1594.026148] ? __lock_acquire+0x694/0x1b70 [ 1594.026164] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1594.026182] ? __lock_acquire+0x694/0x1b70 [ 1594.026198] ? lock_is_held_type+0x9e/0x120 [ 1594.026217] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1594.026231] ? policy_nodemask+0xeb/0x4e0 [ 1594.026248] alloc_pages_mpol+0xed/0x340 [ 1594.026262] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1594.026276] ? filemap_get_entry+0x1bb/0x3b0 [ 1594.026294] ? __pfx_filemap_get_entry+0x10/0x10 [ 1594.026316] folio_alloc_mpol_noprof+0x38/0x2a0 [ 1594.026334] shmem_alloc_folio+0x11b/0x140 [ 1594.026350] shmem_get_folio_gfp.constprop.0+0x4ea/0x13a0 [ 1594.026372] ? __pfx_shmem_get_folio_gfp.constprop.0+0x10/0x10 [ 1594.026390] ? __lock_acquire+0x694/0x1b70 [ 1594.026403] ? css_rstat_updated+0x1b5/0x4c0 [ 1594.026422] shmem_fault+0x1f3/0x9f0 [ 1594.026437] ? lock_acquire+0xdf/0x2e0 [ 1594.026453] ? __pfx_shmem_fault+0x10/0x10 [ 1594.026467] ? find_held_lock+0x2b/0x80 [ 1594.026484] ? lock_release+0xc8/0x290 [ 1594.026498] ? mark_held_locks+0x49/0x80 [ 1594.026513] __do_fault+0x10d/0x480 [ 1594.026528] __handle_mm_fault+0xfea/0x30f0 [ 1594.026544] ? find_held_lock+0x2b/0x80 [ 1594.026561] ? __pfx___handle_mm_fault+0x10/0x10 [ 1594.026576] ? lock_release+0xc8/0x290 [ 1594.026586] ? lock_is_held_type+0x9e/0x120 [ 1594.026615] handle_mm_fault+0x2c3/0x900 [ 1594.026634] __get_user_pages+0x58a/0x2f10 [ 1594.026658] ? find_held_lock+0x2b/0x80 [ 1594.026675] ? __pfx___get_user_pages+0x10/0x10 [ 1594.026694] ? lock_is_held_type+0x9e/0x120 [ 1594.026712] faultin_page_range+0x2f3/0x9d0 [ 1594.026734] madvise_do_behavior+0x8d8/0xe20 [ 1594.026749] ? __pfx_madvise_do_behavior+0x10/0x10 [ 1594.026763] ? down_read+0x1b1/0x470 [ 1594.026777] ? find_held_lock+0x2b/0x80 [ 1594.026797] do_madvise+0x16b/0x240 [ 1594.026807] ? __pfx_do_madvise+0x10/0x10 [ 1594.026823] ? lock_acquire+0xdf/0x2e0 [ 1594.026835] ? __might_fault+0xe0/0x190 [ 1594.026846] ? find_held_lock+0x2b/0x80 [ 1594.026862] ? __might_fault+0x138/0x190 [ 1594.026874] ? lock_release+0xc8/0x290 [ 1594.026886] ? __might_fault+0xe0/0x190 [ 1594.026898] ? find_held_lock+0x2b/0x80 [ 1594.026914] ? syscall_trace_enter+0x1cf/0x260 [ 1594.026933] ? lock_release+0xc8/0x290 [ 1594.026944] ? perf_trace_sys_enter+0x2d/0x170 [ 1594.026964] __x64_sys_madvise+0xa9/0x110 [ 1594.026976] do_syscall_64+0xbf/0x360 [ 1594.026988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1594.027001] RIP: 0033:0x7f8fdf467b19 [ 1594.027010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1594.027022] RSP: 002b:00007f8fdc9dd188 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1594.027033] RAX: ffffffffffffffda RBX: 00007f8fdf57af60 RCX: 00007f8fdf467b19 [ 1594.027042] RDX: 0000000000000017 RSI: 0000000000002000 RDI: 0000000020ffe000 [ 1594.027049] RBP: 00007f8fdc9dd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1594.027056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1594.027063] R13: 00007ffe58ee06ff R14: 00007f8fdc9dd300 R15: 0000000000022000 [ 1594.027079] [ 1594.028803] loop6: detected capacity change from 0 to 274 [ 1594.089595] loop5: detected capacity change from 0 to 10 17:32:13 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:32:13 executing program 7: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) (fail_nth: 8) 17:32:13 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x6000) (fail_nth: 9) [ 1594.115537] FAT-fs (loop5): bogus number of reserved sectors [ 1594.116872] FAT-fs (loop5): Can't find a valid FAT filesystem 17:32:13 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r1, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x40f4) 17:32:13 executing program 0: add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="f68685a7f81a8da6e8fd06f02ddcb0dcd85a042c068fb49bea12c5852ffb73332a2f3df0b142ac34", 0x28, 0x0) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x10) shmget$private(0x0, 0x1000, 0x800, &(0x7f0000fff000/0x1000)=nil) r0 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, r0) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffc000/0x2000)=nil) 17:32:13 executing program 7: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) (fail_nth: 9) 17:32:13 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{0x0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) [ 1594.195442] FAULT_INJECTION: forcing a failure. [ 1594.195442] name failslab, interval 1, probability 0, space 0, times 0 [ 1594.196946] CPU: 0 UID: 0 PID: 10873 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 1594.196963] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1594.196970] Call Trace: [ 1594.196975] [ 1594.196980] dump_stack_lvl+0xfa/0x120 [ 1594.197006] should_fail_ex+0x4d7/0x5e0 [ 1594.197030] ? mas_alloc_nodes+0x432/0x8f0 [ 1594.197049] should_failslab+0xc2/0x120 [ 1594.197061] kmem_cache_alloc_noprof+0x5f/0x470 [ 1594.197078] ? lock_is_held_type+0x9e/0x120 [ 1594.197099] mas_alloc_nodes+0x432/0x8f0 [ 1594.197119] mas_node_count_gfp+0x106/0x140 [ 1594.197138] mas_preallocate+0x2af/0x690 [ 1594.197153] ? __pfx_mas_preallocate+0x10/0x10 [ 1594.197172] ? lockdep_init_map_type+0x4b/0x240 [ 1594.197189] __split_vma+0x304/0xde0 [ 1594.197208] ? __pfx___split_vma+0x10/0x10 [ 1594.197232] vms_gather_munmap_vmas+0x16e/0xc60 [ 1594.197252] __mmap_region+0x44e/0x2670 [ 1594.197269] ? __lock_acquire+0x694/0x1b70 [ 1594.197282] ? __pfx___mmap_region+0x10/0x10 [ 1594.197298] ? __lock_acquire+0x694/0x1b70 [ 1594.197316] ? lock_acquire+0xdf/0x2e0 [ 1594.197328] ? __is_insn_slot_addr+0x2e/0x290 [ 1594.197345] ? find_held_lock+0x2b/0x80 [ 1594.197361] ? __is_insn_slot_addr+0x136/0x290 [ 1594.197377] ? lock_release+0xc8/0x290 [ 1594.197391] ? __is_insn_slot_addr+0x140/0x290 [ 1594.197408] ? kernel_text_address+0x5b/0xc0 [ 1594.197421] ? __kernel_text_address+0xd/0x40 [ 1594.197457] ? mm_get_unmapped_area+0x98/0xe0 [ 1594.197472] ? lock_is_held_type+0x9e/0x120 [ 1594.197491] mmap_region+0x314/0x3e0 [ 1594.197510] do_mmap+0xa36/0x11d0 [ 1594.197527] ? __pfx_do_mmap+0x10/0x10 [ 1594.197539] ? down_write_killable+0x122/0x230 [ 1594.197551] ? __pfx_down_write_killable+0x10/0x10 [ 1594.197563] ? do_raw_spin_unlock+0x53/0x220 [ 1594.197580] do_shmat+0xfac/0x1310 [ 1594.197602] ? __pfx_do_shmat+0x10/0x10 [ 1594.197618] ? find_held_lock+0x2b/0x80 [ 1594.197633] ? __might_fault+0x138/0x190 [ 1594.197646] ? lock_release+0xc8/0x290 [ 1594.197660] __x64_sys_shmat+0xcf/0x160 [ 1594.197676] ? syscall_trace_enter+0x1cf/0x260 [ 1594.197696] ? __pfx___x64_sys_shmat+0x10/0x10 [ 1594.197715] ? syscall_trace_enter+0xf2/0x260 [ 1594.197735] do_syscall_64+0xbf/0x360 [ 1594.197747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1594.197760] RIP: 0033:0x7fb8b7768b19 [ 1594.197770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1594.197781] RSP: 002b:00007fb8b4cde188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 1594.197793] RAX: ffffffffffffffda RBX: 00007fb8b787bf60 RCX: 00007fb8b7768b19 [ 1594.197802] RDX: 0000000000006000 RSI: 0000000020ffc000 RDI: 000000000000009f [ 1594.197809] RBP: 00007fb8b4cde1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1594.197816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1594.197823] R13: 00007ffeb3ccfc3f R14: 00007fb8b4cde300 R15: 0000000000022000 [ 1594.197839] 17:32:13 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) [ 1594.252818] loop5: detected capacity change from 0 to 10 [ 1594.263482] FAT-fs (loop5): bogus number of reserved sectors [ 1594.263978] FAT-fs (loop5): Can't find a valid FAT filesystem 17:32:23 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) 17:32:23 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xc, 0xffffffffffffffff) 17:32:23 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r1, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x40fe) 17:32:23 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)='\x00'/19, 0x13, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:32:23 executing program 7: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) (fail_nth: 10) 17:32:23 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x6000) (fail_nth: 10) 17:32:23 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{0x0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:32:23 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) [ 1604.005315] loop6: detected capacity change from 0 to 274 [ 1604.026911] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1604.027156] loop5: detected capacity change from 0 to 10 [ 1604.028130] FAT-fs (loop6): Filesystem has been set read-only [ 1604.031035] FAULT_INJECTION: forcing a failure. [ 1604.031035] name failslab, interval 1, probability 0, space 0, times 0 [ 1604.032719] CPU: 1 UID: 0 PID: 10906 Comm: syz-executor.7 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 1604.032749] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1604.032763] Call Trace: [ 1604.032770] [ 1604.032779] dump_stack_lvl+0xfa/0x120 [ 1604.032821] should_fail_ex+0x4d7/0x5e0 [ 1604.032857] ? __anon_vma_prepare+0xae/0x590 [ 1604.032887] should_failslab+0xc2/0x120 [ 1604.032909] kmem_cache_alloc_noprof+0x5f/0x470 [ 1604.032948] __anon_vma_prepare+0xae/0x590 [ 1604.032980] __vmf_anon_prepare+0x11f/0x250 [ 1604.033011] __handle_mm_fault+0x13ad/0x30f0 [ 1604.033046] ? __pfx___handle_mm_fault+0x10/0x10 [ 1604.033076] ? __pte_offset_map_lock+0x190/0x330 [ 1604.033109] ? no_page_table+0xc7/0x220 [ 1604.033137] ? follow_page_pte.constprop.0+0x4f9/0x1170 [ 1604.033175] handle_mm_fault+0x2c3/0x900 [ 1604.033210] __get_user_pages+0x58a/0x2f10 [ 1604.033254] ? down_read_killable+0x1d4/0x4f0 [ 1604.033279] ? __pfx___get_user_pages+0x10/0x10 [ 1604.033314] ? lock_is_held_type+0x9e/0x120 [ 1604.033349] faultin_page_range+0x2f3/0x9d0 [ 1604.033389] madvise_do_behavior+0x8d8/0xe20 [ 1604.033417] ? __pfx_madvise_do_behavior+0x10/0x10 [ 1604.033449] ? down_read+0x1b1/0x470 [ 1604.033475] ? find_held_lock+0x2b/0x80 [ 1604.033513] do_madvise+0x16b/0x240 [ 1604.033533] ? __pfx_do_madvise+0x10/0x10 [ 1604.033562] ? lock_acquire+0xdf/0x2e0 [ 1604.033584] ? __might_fault+0xe0/0x190 [ 1604.033606] ? find_held_lock+0x2b/0x80 [ 1604.033635] ? __might_fault+0x138/0x190 [ 1604.033657] ? lock_release+0xc8/0x290 [ 1604.033680] ? __might_fault+0xe0/0x190 [ 1604.033702] ? find_held_lock+0x2b/0x80 [ 1604.033731] ? syscall_trace_enter+0x1cf/0x260 [ 1604.033767] ? lock_release+0xc8/0x290 [ 1604.033787] ? perf_trace_sys_enter+0x2d/0x170 [ 1604.033825] __x64_sys_madvise+0xa9/0x110 17:32:23 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x6000) (fail_nth: 11) [ 1604.033848] do_syscall_64+0xbf/0x360 [ 1604.033870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1604.033893] RIP: 0033:0x7f8fdf467b19 [ 1604.033910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 17:32:23 executing program 0: shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) [ 1604.033932] RSP: 002b:00007f8fdc9dd188 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1604.033953] RAX: ffffffffffffffda RBX: 00007f8fdf57af60 RCX: 00007f8fdf467b19 [ 1604.033969] RDX: 0000000000000017 RSI: 0000000000002000 RDI: 0000000020ffe000 [ 1604.033983] RBP: 00007f8fdc9dd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1604.033998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1604.034013] R13: 00007ffe58ee06ff R14: 00007f8fdc9dd300 R15: 0000000000022000 [ 1604.034042] [ 1604.034111] loop3: detected capacity change from 0 to 274 [ 1604.087820] FAT-fs (loop5): bogus number of reserved sectors [ 1604.088887] FAT-fs (loop5): Can't find a valid FAT filesystem 17:32:34 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) r0 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x2000) 17:32:34 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x6000) (fail_nth: 12) 17:32:34 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r1, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0xfeff) 17:32:34 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)='\x00'/29, 0x1d, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:32:34 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{0x0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:32:34 executing program 7: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) (fail_nth: 11) 17:32:34 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$SHM_LOCK(r1, 0xb) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:32:34 executing program 3: r0 = shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xc, 0xffffffffffffffff) [ 1615.649247] loop5: detected capacity change from 0 to 10 [ 1615.664779] FAT-fs (loop5): bogus number of reserved sectors [ 1615.665377] FAT-fs (loop5): Can't find a valid FAT filesystem 17:32:34 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200) 17:32:34 executing program 7: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) (fail_nth: 12) [ 1615.721251] loop6: detected capacity change from 0 to 274 17:32:34 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) [ 1615.753280] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1615.754720] FAT-fs (loop6): Filesystem has been set read-only [ 1615.772138] loop3: detected capacity change from 0 to 274 17:32:34 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0xffffffffffffffff, &(0x7f0000ffa000/0x2000)=nil, 0x3000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) [ 1615.789259] FAULT_INJECTION: forcing a failure. [ 1615.789259] name failslab, interval 1, probability 0, space 0, times 0 [ 1615.790313] CPU: 0 UID: 0 PID: 10949 Comm: syz-executor.7 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 1615.790331] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1615.790339] Call Trace: [ 1615.790344] [ 1615.790349] dump_stack_lvl+0xfa/0x120 [ 1615.790376] should_fail_ex+0x4d7/0x5e0 [ 1615.790399] ? __anon_vma_prepare+0x2ee/0x590 [ 1615.790417] should_failslab+0xc2/0x120 [ 1615.790431] kmem_cache_alloc_noprof+0x5f/0x470 [ 1615.790458] __anon_vma_prepare+0x2ee/0x590 [ 1615.790477] __vmf_anon_prepare+0x11f/0x250 [ 1615.790496] __handle_mm_fault+0x13ad/0x30f0 [ 1615.790517] ? __pfx___handle_mm_fault+0x10/0x10 [ 1615.790534] ? __pte_offset_map_lock+0x190/0x330 [ 1615.790554] ? no_page_table+0xc7/0x220 [ 1615.790572] ? follow_page_pte.constprop.0+0x4f9/0x1170 [ 1615.790594] handle_mm_fault+0x2c3/0x900 [ 1615.790614] __get_user_pages+0x58a/0x2f10 [ 1615.790641] ? down_read_killable+0x1d4/0x4f0 [ 1615.790656] ? __pfx___get_user_pages+0x10/0x10 [ 1615.790676] ? lock_is_held_type+0x9e/0x120 [ 1615.790697] faultin_page_range+0x2f3/0x9d0 [ 1615.790721] madvise_do_behavior+0x8d8/0xe20 [ 1615.790737] ? __pfx_madvise_do_behavior+0x10/0x10 [ 1615.790752] ? down_read+0x1b1/0x470 [ 1615.790768] ? find_held_lock+0x2b/0x80 [ 1615.790791] do_madvise+0x16b/0x240 [ 1615.790803] ? __pfx_do_madvise+0x10/0x10 [ 1615.790820] ? lock_acquire+0xdf/0x2e0 [ 1615.790833] ? __might_fault+0xe0/0x190 [ 1615.790846] ? find_held_lock+0x2b/0x80 [ 1615.790864] ? __might_fault+0x138/0x190 [ 1615.790877] ? lock_release+0xc8/0x290 [ 1615.790890] ? __might_fault+0xe0/0x190 [ 1615.790903] ? find_held_lock+0x2b/0x80 [ 1615.790920] ? syscall_trace_enter+0x1cf/0x260 [ 1615.790942] ? lock_release+0xc8/0x290 [ 1615.790954] ? perf_trace_sys_enter+0x2d/0x170 [ 1615.790976] __x64_sys_madvise+0xa9/0x110 [ 1615.790989] do_syscall_64+0xbf/0x360 [ 1615.791003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1615.791017] RIP: 0033:0x7f8fdf467b19 [ 1615.791027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1615.791040] RSP: 002b:00007f8fdc9dd188 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1615.791053] RAX: ffffffffffffffda RBX: 00007f8fdf57af60 RCX: 00007f8fdf467b19 [ 1615.791062] RDX: 0000000000000017 RSI: 0000000000002000 RDI: 0000000020ffe000 [ 1615.791070] RBP: 00007f8fdc9dd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1615.791078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1615.791086] R13: 00007ffe58ee06ff R14: 00007f8fdc9dd300 R15: 0000000000022000 [ 1615.791103] [ 1615.846390] loop5: detected capacity change from 0 to 10 17:32:34 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)='\x00'/29, 0x1d, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:32:34 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0xffffffffffffffff) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) r1 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ffc000/0x3000)=nil) shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffa000/0x3000)=nil) shmget(0x1, 0x3000, 0x20, &(0x7f0000ffb000/0x3000)=nil) shmat(0xffffffffffffffff, &(0x7f0000ffa000/0x3000)=nil, 0x0) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000000)=""/191) 17:32:34 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r2 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000000)=""/138) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x0) r3 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r3, &(0x7f0000ffb000/0x2000)=nil, 0xf000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f00000001c0)=0xe8) statx(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x4000, 0x21, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) shmctl$IPC_SET(r3, 0x1, &(0x7f00000003c0)={{0x1, r4, r5, 0xffffffffffffffff, r6, 0x140, 0xf576}, 0x6c, 0x100000001, 0x200, 0x7ff, 0x0, 0xffffffffffffffff, 0x3}) r7 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r7, &(0x7f0000ffb000/0x2000)=nil, 0xf000) r8 = shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ffb000/0x2000)=nil) shmctl$IPC_RMID(r8, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmctl$IPC_RMID(r7, 0x0) 17:32:34 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x6000) (fail_nth: 13) [ 1615.911497] FAT-fs (loop5): bogus number of reserved sectors [ 1615.912752] FAT-fs (loop5): Can't find a valid FAT filesystem 17:32:35 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x383, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0xe000) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x1000) shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) munlock(&(0x7f0000ff8000/0x8000)=nil, 0x8000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) 17:32:35 executing program 7: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) (fail_nth: 13) 17:32:35 executing program 1: r0 = dup(0xffffffffffffffff) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r2 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000080)={@desc={0x1, 0x0, @auto="5428939cabd8a9d8"}}) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000000)=""/111) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(r2, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmctl$IPC_RMID(r1, 0x0) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) [ 1615.985116] FAULT_INJECTION: forcing a failure. [ 1615.985116] name failslab, interval 1, probability 0, space 0, times 0 [ 1615.986215] CPU: 0 UID: 0 PID: 10964 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 1615.986232] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1615.986239] Call Trace: [ 1615.986243] 17:32:35 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$SHM_LOCK(r1, 0xb) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) [ 1615.986248] dump_stack_lvl+0xfa/0x120 [ 1615.986281] should_fail_ex+0x4d7/0x5e0 [ 1615.986301] ? vm_area_alloc+0x20/0x170 [ 1615.986313] should_failslab+0xc2/0x120 [ 1615.986325] kmem_cache_alloc_noprof+0x5f/0x470 [ 1615.986342] ? vma_merge_new_range+0x40e/0xa00 [ 1615.986361] vm_area_alloc+0x20/0x170 [ 1615.986372] __mmap_region+0xc46/0x2670 [ 1615.986390] ? __lock_acquire+0x694/0x1b70 [ 1615.986405] ? __pfx___mmap_region+0x10/0x10 [ 1615.986422] ? __lock_acquire+0x694/0x1b70 [ 1615.986440] ? lock_acquire+0xdf/0x2e0 [ 1615.986455] ? __is_insn_slot_addr+0x2e/0x290 [ 1615.986473] ? find_held_lock+0x2b/0x80 [ 1615.986491] ? __is_insn_slot_addr+0x136/0x290 [ 1615.986512] ? kernel_text_address+0x5b/0xc0 [ 1615.986524] ? lock_acquire+0xdf/0x2e0 [ 1615.986536] ? __kernel_text_address+0xd/0x40 [ 1615.986568] ? mm_get_unmapped_area+0x98/0xe0 [ 1615.986582] ? lock_is_held_type+0x9e/0x120 [ 1615.986602] mmap_region+0x314/0x3e0 [ 1615.986621] do_mmap+0xa36/0x11d0 [ 1615.986638] ? __pfx_do_mmap+0x10/0x10 [ 1615.986650] ? down_write_killable+0x122/0x230 [ 1615.986662] ? __pfx_down_write_killable+0x10/0x10 [ 1615.986673] ? do_raw_spin_unlock+0x53/0x220 [ 1615.986691] do_shmat+0xfac/0x1310 [ 1615.986714] ? __pfx_do_shmat+0x10/0x10 [ 1615.986729] ? find_held_lock+0x2b/0x80 [ 1615.986745] ? __might_fault+0x138/0x190 [ 1615.986757] ? lock_release+0xc8/0x290 [ 1615.986771] __x64_sys_shmat+0xcf/0x160 [ 1615.986787] ? syscall_trace_enter+0x1cf/0x260 [ 1615.986807] ? __pfx___x64_sys_shmat+0x10/0x10 [ 1615.986827] ? syscall_trace_enter+0xf2/0x260 [ 1615.986846] do_syscall_64+0xbf/0x360 [ 1615.986859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1615.986872] RIP: 0033:0x7fb8b7768b19 [ 1615.986881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1615.986893] RSP: 002b:00007fb8b4cde188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 1615.986905] RAX: ffffffffffffffda RBX: 00007fb8b787bf60 RCX: 00007fb8b7768b19 [ 1615.986913] RDX: 0000000000006000 RSI: 0000000020ffc000 RDI: 00000000000000a7 [ 1615.986920] RBP: 00007fb8b4cde1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1615.986928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1615.986935] R13: 00007ffeb3ccfc3f R14: 00007fb8b4cde300 R15: 0000000000022000 [ 1615.986950] [ 1616.006345] ================================================================== [ 1616.007029] BUG: KASAN: slab-use-after-free in flush_tlb_func+0x24d/0x560 [ 1616.007699] Write of size 8 at addr ffff88801a0365c0 by task syz-executor.4/10964 [ 1616.008392] [ 1616.008534] CPU: 0 UID: 0 PID: 10964 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 1616.008549] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1616.008557] Call Trace: [ 1616.008561] [ 1616.008566] dump_stack_lvl+0xca/0x120 [ 1616.008585] print_report+0xcb/0x670 [ 1616.008599] ? __virt_addr_valid+0x100/0x5d0 [ 1616.008615] ? flush_tlb_func+0x24d/0x560 [ 1616.008632] ? flush_tlb_func+0x24d/0x560 [ 1616.008650] kasan_report+0xca/0x100 [ 1616.008663] ? flush_tlb_func+0x24d/0x560 [ 1616.008681] kasan_check_range+0x37/0x1a0 [ 1616.008697] flush_tlb_func+0x24d/0x560 [ 1616.008714] ? hrtimer_interrupt+0x652/0x830 [ 1616.008732] ? __pfx_flush_tlb_func+0x10/0x10 [ 1616.008750] __flush_smp_call_function_queue+0x20d/0x740 [ 1616.008769] __sysvec_call_function_single+0x6d/0x360 [ 1616.008789] sysvec_call_function_single+0x5f/0xc0 [ 1616.008806] asm_sysvec_call_function_single+0x1a/0x20 [ 1616.008818] RIP: 0010:handle_softirqs+0x174/0x770 [ 1616.008836] Code: c8 83 83 3c 0a 00 00 01 c7 44 24 20 0a 00 00 00 48 89 44 24 18 65 66 c7 05 cf 84 47 06 00 00 e8 22 65 40 00 fb bb ff ff ff ff <48> c7 c5 c0 c0 a0 85 41 0f bc de 83 c3 01 0f 85 9b 00 00 00 e9 8d 17:32:35 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil) r1 = shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000) r2 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r2, &(0x7f0000ffa000/0x6000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2003, 0x17) shmdt(r1) r3 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r3, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r3, &(0x7f0000ffe000/0x1000)=nil, 0x0) [ 1616.008848] RSP: 0018:ffff88806ce08f78 EFLAGS: 00000202 [ 1616.008858] RAX: 0000000000000252 RBX: 00000000ffffffff RCX: 0000000000000004 [ 1616.008866] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff813b5b6e [ 1616.008874] RBP: ffff8880419af6b8 R08: 0000000000000001 R09: 0000000000000001 [ 1616.008881] R10: ffffffff86438657 R11: 0000000000155cc0 R12: 0000000000000000 [ 1616.008889] R13: 0000000000000000 R14: 0000000000000200 R15: 0000000000000000 [ 1616.008898] ? handle_softirqs+0x16e/0x770 [ 1616.008915] ? handle_softirqs+0x16e/0x770 [ 1616.008932] __irq_exit_rcu+0xc4/0x100 [ 1616.008947] irq_exit_rcu+0x9/0x20 [ 1616.008962] sysvec_call_function_single+0xa6/0xc0 [ 1616.008978] [ 1616.008982] [ 1616.008986] asm_sysvec_call_function_single+0x1a/0x20 [ 1616.008999] RIP: 0010:dump_stack_lvl+0x115/0x120 [ 1616.009016] Code: fc ff ff 4c 89 e2 31 f6 31 ff e8 e6 50 7b fc e8 d1 07 a5 fc 48 89 ee 31 ff e8 d7 a5 c4 fc e8 72 aa c4 fc e8 7d d4 cc fc fb 5b <5d> 41 5c e9 63 aa c4 fc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 [ 1616.009027] RSP: 0018:ffff8880419af760 EFLAGS: 00000202 [ 1616.009036] RAX: 000000000000024f RBX: ffffffff85d01f20 RCX: 0000000000000040 [ 1616.009044] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff84aeec13 [ 1616.009051] RBP: 0000000000000200 R08: 0000000000000001 R09: 0000000000000001 [ 1616.009058] R10: ffffffff86438657 R11: 0000000000000001 R12: ffffffff8530f500 [ 1616.009066] R13: ffffffff85d01f30 R14: 0000000000000000 R15: 0000000000000000 [ 1616.009076] ? dump_stack_lvl+0x113/0x120 [ 1616.009094] should_fail_ex+0x4d7/0x5e0 [ 1616.009112] ? vm_area_alloc+0x20/0x170 [ 1616.009123] should_failslab+0xc2/0x120 [ 1616.009134] kmem_cache_alloc_noprof+0x5f/0x470 [ 1616.009150] ? vma_merge_new_range+0x40e/0xa00 [ 1616.009167] vm_area_alloc+0x20/0x170 [ 1616.009178] __mmap_region+0xc46/0x2670 [ 1616.009194] ? __lock_acquire+0x694/0x1b70 [ 1616.009207] ? __pfx___mmap_region+0x10/0x10 [ 1616.009223] ? __lock_acquire+0x694/0x1b70 [ 1616.009237] ? lock_acquire+0xdf/0x2e0 [ 1616.009248] ? __is_insn_slot_addr+0x2e/0x290 [ 1616.009264] ? find_held_lock+0x2b/0x80 [ 1616.009280] ? __is_insn_slot_addr+0x136/0x290 [ 1616.009298] ? kernel_text_address+0x5b/0xc0 [ 1616.009309] ? lock_acquire+0xdf/0x2e0 [ 1616.009320] ? __kernel_text_address+0xd/0x40 [ 1616.009341] ? mm_get_unmapped_area+0x98/0xe0 [ 1616.009354] ? lock_is_held_type+0x9e/0x120 [ 1616.009372] mmap_region+0x314/0x3e0 [ 1616.009389] do_mmap+0xa36/0x11d0 [ 1616.009404] ? __pfx_do_mmap+0x10/0x10 [ 1616.009416] ? down_write_killable+0x122/0x230 [ 1616.009428] ? __pfx_down_write_killable+0x10/0x10 [ 1616.009439] ? do_raw_spin_unlock+0x53/0x220 [ 1616.009454] do_shmat+0xfac/0x1310 [ 1616.009473] ? __pfx_do_shmat+0x10/0x10 [ 1616.009489] ? find_held_lock+0x2b/0x80 [ 1616.009504] ? __might_fault+0x138/0x190 [ 1616.009516] ? lock_release+0xc8/0x290 [ 1616.009528] __x64_sys_shmat+0xcf/0x160 [ 1616.009545] ? syscall_trace_enter+0x1cf/0x260 [ 1616.009563] ? __pfx___x64_sys_shmat+0x10/0x10 [ 1616.009581] ? syscall_trace_enter+0xf2/0x260 [ 1616.009599] do_syscall_64+0xbf/0x360 [ 1616.009610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1616.009622] RIP: 0033:0x7fb8b7768b19 [ 1616.009630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1616.009642] RSP: 002b:00007fb8b4cde188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 1616.009653] RAX: ffffffffffffffda RBX: 00007fb8b787bf60 RCX: 00007fb8b7768b19 [ 1616.009661] RDX: 0000000000006000 RSI: 0000000020ffc000 RDI: 00000000000000a7 [ 1616.009668] RBP: 00007fb8b4cde1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1616.009676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1616.009683] R13: 00007ffeb3ccfc3f R14: 00007fb8b4cde300 R15: 0000000000022000 [ 1616.009694] [ 1616.009698] [ 1616.032677] loop6: detected capacity change from 0 to 274 [ 1616.033081] Allocated by task 277: [ 1616.033089] kasan_save_stack+0x24/0x50 [ 1616.051642] kasan_save_track+0x14/0x30 [ 1616.051957] __kasan_slab_alloc+0x59/0x70 [ 1616.052285] kmem_cache_alloc_noprof+0x13e/0x470 [ 1616.052660] copy_process+0x6f3a/0x73e0 [ 1616.052980] kernel_clone+0xea/0x820 [ 1616.053281] __do_sys_clone+0xce/0x120 [ 1616.053587] do_syscall_64+0xbf/0x360 [ 1616.053888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1616.054297] [ 1616.054434] Freed by task 10960: [ 1616.054703] kasan_save_stack+0x24/0x50 [ 1616.055018] kasan_save_track+0x14/0x30 [ 1616.055332] kasan_save_free_info+0x3c/0x90 [ 1616.055674] __kasan_slab_free+0x3c/0x60 [ 1616.055996] kmem_cache_free+0x2a5/0x460 [ 1616.056319] mmput+0x305/0x390 [ 1616.056583] do_exit+0x79d/0x2970 [ 1616.056860] do_group_exit+0xd3/0x2a0 [ 1616.057161] get_signal+0x2315/0x2340 [ 1616.057467] arch_do_signal_or_restart+0x80/0x790 [ 1616.057856] exit_to_user_mode_loop+0x8b/0x100 [ 1616.058228] do_syscall_64+0x2f7/0x360 [ 1616.058540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1616.058946] [ 1616.059082] The buggy address belongs to the object at ffff88801a035c40 [ 1616.059082] which belongs to the cache mm_struct of size 2456 [ 1616.060018] The buggy address is located 2432 bytes inside of [ 1616.060018] freed 2456-byte region [ffff88801a035c40, ffff88801a0365d8) [ 1616.060966] [ 1616.061102] The buggy address belongs to the physical page: [ 1616.061542] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1a030 [ 1616.062163] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1616.062773] memcg:ffff88800b6f1301 [ 1616.063056] anon flags: 0x100000000000040(head|node=0|zone=1) [ 1616.063515] page_type: f5(slab) [ 1616.063785] raw: 0100000000000040 ffff888008c4bc80 ffffea0000298c00 dead000000000003 [ 1616.064393] raw: 0000000000000000 00000000800c000c 00000000f5000000 ffff88800b6f1301 [ 1616.064999] head: 0100000000000040 ffff888008c4bc80 ffffea0000298c00 dead000000000003 [ 1616.065610] head: 0000000000000000 00000000800c000c 00000000f5000000 ffff88800b6f1301 [ 1616.066219] head: 0100000000000003 ffffea0000680c01 00000000ffffffff 00000000ffffffff [ 1616.066835] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 1616.067443] page dumped because: kasan: bad access detected [ 1616.067879] [ 1616.068016] Memory state around the buggy address: [ 1616.068397] ffff88801a036480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1616.068968] ffff88801a036500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1616.069530] >ffff88801a036580: fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc fc [ 1616.070095] ^ [ 1616.070521] ffff88801a036600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1616.071087] ffff88801a036680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1616.071649] ================================================================== [ 1616.072215] Disabling lock debugging due to kernel taint 17:32:44 executing program 7: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) (fail_nth: 14) 17:32:44 executing program 2: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r0 = shmget(0x1, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x3000) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:32:44 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff", 0x26, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}], 0x0, &(0x7f0000010f00)=ANY=[]) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 17:32:44 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$SHM_LOCK(r1, 0xb) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 17:32:44 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r0 = shmget$private(0x0, 0x3000, 0x8, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) 17:32:44 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x6000) (fail_nth: 14) 17:32:44 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f801", 0x17}, {&(0x7f0000010100)='\x00'/29, 0x1d, 0x1e0}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100035ec70325132510000ec70325103", 0x5b, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e20202020202020202010", 0x2c, 0x11200}], 0x0, &(0x7f0000010f00)=ANY=[]) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 17:32:44 executing program 1: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget(0x3, 0x3000, 0x10, &(0x7f0000ffb000/0x3000)=nil) r2 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r3 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r3, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r3, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000f64000/0x1000)=nil) r4 = shmget$private(0x0, 0x400000, 0x2, &(0x7f0000c00000/0x400000)=nil) shmat(r4, &(0x7f0000ffa000/0x3000)=nil, 0x2000) shmctl$IPC_RMID(r0, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) [ 1625.114994] loop5: detected capacity change from 0 to 10 [ 1625.118119] FAULT_INJECTION: forcing a failure. [ 1625.118119] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1625.120362] CPU: 1 UID: 0 PID: 10994 Comm: syz-executor.7 Tainted: G B 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 1625.120405] Tainted: [B]=BAD_PAGE [ 1625.120414] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1625.120429] Call Trace: [ 1625.120437] [ 1625.120454] dump_stack_lvl+0xfa/0x120 [ 1625.120499] should_fail_ex+0x4d7/0x5e0 [ 1625.120532] FAT-fs (loop5): bogus number of reserved sectors [ 1625.120539] should_fail_alloc_page+0xe0/0x110 [ 1625.120567] prepare_alloc_pages+0x1af/0x500 [ 1625.120595] ? __is_insn_slot_addr+0x140/0x290 [ 1625.120633] __alloc_frozen_pages_noprof+0x17f/0x1f10 [ 1625.120668] ? unwind_get_return_address+0x59/0xa0 [ 1625.120707] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1625.120747] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1625.120783] ? stack_trace_save+0x8e/0xc0 [ 1625.120814] ? lock_release+0x1c7/0x290 [ 1625.120841] ? lock_acquire+0x18b/0x2e0 [ 1625.120867] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1625.120896] ? policy_nodemask+0xeb/0x4e0 [ 1625.120928] alloc_pages_mpol+0xed/0x340 [ 1625.120959] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1625.120990] ? lock_release+0x1c7/0x290 [ 1625.121016] ? get_vma_policy+0x23b/0x350 [ 1625.121051] vma_alloc_folio_noprof+0xe9/0x440 [ 1625.121086] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1625.121122] ? ___pte_offset_map+0x53/0x370 [ 1625.121150] __handle_mm_fault+0x142c/0x30f0 [ 1625.121188] ? __pfx___handle_mm_fault+0x10/0x10 [ 1625.121222] ? __pte_offset_map_lock+0x190/0x330 [ 1625.121253] ? no_page_table+0xc7/0x220 [ 1625.121285] ? follow_page_pte.constprop.0+0x4f9/0x1170 [ 1625.121326] handle_mm_fault+0x2c3/0x900 [ 1625.121363] __get_user_pages+0x58a/0x2f10 [ 1625.121406] ? down_read_killable+0x1d4/0x4f0 [ 1625.121433] ? __pfx___get_user_pages+0x10/0x10 [ 1625.121470] ? __pfx_kstrtouint+0x10/0x10 [ 1625.121508] faultin_page_range+0x2f3/0x9d0 [ 1625.121550] madvise_do_behavior+0x8d8/0xe20 [ 1625.121575] ? lock_acquire+0x18b/0x2e0 [ 1625.121602] ? __pfx_madvise_do_behavior+0x10/0x10 [ 1625.121630] ? down_read+0x1b1/0x470 [ 1625.121660] do_madvise+0x16b/0x240 [ 1625.121683] ? __pfx_do_madvise+0x10/0x10 [ 1625.121706] ? kernel_write+0x623/0x660 [ 1625.121747] ? __fget_files+0x20d/0x3b0 [ 1625.121784] ? lock_acquire+0x18b/0x2e0 [ 1625.121811] ? lock_release+0x1c7/0x290 [ 1625.121836] ? __might_fault+0xe0/0x190 [ 1625.121862] ? __might_fault+0x151/0x190 [ 1625.121888] ? lock_release+0x1c7/0x290 [ 1625.121912] ? perf_trace_sys_enter+0x2d/0x170 [ 1625.121954] __x64_sys_madvise+0xa9/0x110 [ 1625.121980] do_syscall_64+0xbf/0x360 [ 1625.122005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1625.122031] RIP: 0033:0x7f8fdf467b19 [ 1625.122051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1625.122076] RSP: 002b:00007f8fdc9dd188 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1625.122102] RAX: ffffffffffffffda RBX: 00007f8fdf57af60 RCX: 00007f8fdf467b19 [ 1625.122120] RDX: 0000000000000017 RSI: 0000000000002000 RDI: 0000000020ffe000 17:32:44 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$SHM_LOCK(r1, 0xb) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) [ 1625.122136] RBP: 00007f8fdc9dd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1625.122152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1625.122168] R13: 00007ffe58ee06ff R14: 00007f8fdc9dd300 R15: 0000000000022000 [ 1625.122193] [ 1625.126233] loop6: detected capacity change from 0 to 274 [ 1625.126588] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1625.210407] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1625.213242] FAT-fs (loop6): Filesystem has been set read-only VM DIAGNOSIS: 17:32:35 Registers: info registers vcpu 0 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828b9285 RDI=ffffffff8871efa0 RBP=ffffffff8871ef60 RSP=ffff88806ce08838 R8 =0000000000000000 R9 =ffffed10016d0046 R10=0000000000000030 R11=313030203a505352 R12=0000000000000030 R13=0000000000000010 R14=ffffffff8871ef60 R15=ffffffff828b9270 RIP=ffffffff828b92dd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fb8b4cde700 00000000 00000000 GS =0000 ffff8880e55f2000 00000000 00000000 LDT=0000 fffffe4f00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb8b4cddf78 CR3=000000001782b000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=ffffffffffffffffffffffffffff0000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=ffff88806cf36fc0 RCX=0000000000000001 RDX=0000000000000000 RSI=ffff88806cf36f18 RDI=ffff888016ffde18 RBP=ffff888018a5b800 RSP=ffff88806cf08bd0 R8 =0000000000000001 R9 =0000000000000001 R10=1ffff11002a9da69 R11=ffff888018a9ac98 R12=ffff888016ffd280 R13=ffff888016ffdcd8 R14=00000000ffffffff R15=ffff888016ffde18 RIP=ffffffff84b830b8 RFL=00000096 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055555f225400 00000000 00000000 GS =0000 ffff8880e56f2000 00000000 00000000 LDT=0000 fffffe5300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f8a90d0b3a4 CR3=0000000030edc000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000