x7f0000000040)) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000b, 0x10, r0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000380)=@ethtool_coalesce={0xe}}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$EBT_SO_GET_INFO(r6, 0x0, 0x50, 0x0, &(0x7f0000000240)) sendfile(0xffffffffffffffff, r6, &(0x7f0000000200)=0x2, 0x80000001) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) syz_io_uring_submit(r3, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x203}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x100000) 05:28:52 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xf9) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x0, 0xfffffff7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x40, 0x1) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time\x00') 05:28:52 executing program 1: perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000000)='0', 0x1}, {&(0x7f0000000080)="1dd477b47a488b617df2b1300060de28b721", 0x12}, {&(0x7f00000000c0)="799a807acc8529628362d134e84291c55767678ef42769c21dee304f53237526a96aac807a8489817a9ee92dbe646f4c720ce41068ce09e35df9cadc0be5d1804a4e1959c0e33e769f817fc202120afa689915a0a5219e75536bd2ea996b5b94715cf63c15e3be5c7c03831e10bf2a1a3a36c01b3dadb59ce64b8413b4d4412617405c1fb895d5d200523f5d38f005d00a08236fc9884627fb44ce638672f52cc0c634d920469c31f9bf30d1b44b1aeba0b56ebc4a0dfcc13693403d35c0c6347b4936ad27f824d94b1020387307bb87b1ff0a6e82e581b447bb0379e072d58b0ef995e3b9a7b66f9d02f9bdf9f7a83bda5e2d065a", 0xf5}, {&(0x7f0000000200)="ac02292525684029dbabcfb2c842244dfb9468f81996ac28550e96bf7a5427f25d64ac3e60278382fda2fef4cb37005c6819c7ac922561da7bbb00a59438907b565de52de68d352a28db45be45191b4f9508806870825f94d555f3e9adbe86d430969d33c3b85c1222029cb89806d70c83edd3492a66a648f7144346c088c0", 0x7f}, {&(0x7f0000000280)="f95335a375441be1321b287de8e2584b3cca77170469165ee40229f4f57e59568dd69c93480453c98c8eca6b1608221ffd8bd529b906e9a0350f0276a148aeabdb0c8d12a07d0b7f002973fe9d678acab8c02af7f66cb9eace08e4160800d11a6dc44e261e0aa57e4d3deea6023afc1d244135a2f8974f456836d24ab09a8759a6a3e0fa2975e849b5173129f6d19672b405312acaf496b89ee158bc5f062e075d45b449bf4bb1c0faddf0c1b96682e4d84c9f43fd0fcd3047ff8355b95e798a64df3c53cffda02c77968b9569a558687bb9a49b087eb68959376f761a7c2dbec0a104c877d92e55d0c06fd721", 0xed}], 0x5, 0x30, 0x100) syz_mount_image$vfat(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000040)='./file0/../file0\x00') 05:28:52 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) r2 = io_uring_setup(0x7c51, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_complete(r1) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:28:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000741471025f73a942a7de3787c59f381e8c43833718d0c44001017010002000000000000000c00000400d3007192004afb0300000000000000040000000c00"], 0x2c}, {&(0x7f0000000140)={0x49c, 0x28, 0x20, 0x70bd27, 0x25dfdbfe, "", [@generic="97486a735620275a9d9c02260d8dfef742f0ca1355c17d81f250e06f8db3ca7bf1ea35d3dfdfed1e88f5981c6d89d3896f06af5ebc263b8e2b1dff29285cf38f21b7eb5fff661a39f70d932eccf8a3c7e8d21c56a4ecd88c76f49e973e1a97c6aa0f7c8684a84dbd62f0a6478bac92a351c17e3b265b57106d5efaeb49f1528bdcdebe117c034c2e8fcdd97914edc1806099ddde72036ed8dffae98181014e098dc91f99d45cd714a8369814e166361e385ba84ae720b067fbad7441a7f2cd1b", @nested={0x10, 0x90, 0x0, 0x1, [@typed={0xc, 0x83, 0x0, 0x0, @u64=0xdd8}]}, @nested={0x4a, 0x2f, 0x0, 0x1, [@generic="2ca18e103dd839ba55d69f5e2f5b99a2403e1ff5349dd1d294e9392460f166bf4705d445ac73265d62077bd0d4ffb7bd9f1fd02502cdb40c71a798aeb146", @typed={0x8, 0x80, 0x0, 0x0, @u32=0x4}]}, @nested={0x2e5, 0x6c, 0x0, 0x1, [@generic="8f75dd4c9b3e427b6dd485ff2275ae8323ba25b3a93aafef3085c21a806fd3307824dfc5a7907a52bc4e7db076a51f76bfa29c2bdc1f31b23caa6efa6d86b7d66df7964fe5a33ec052a9e95f77226f91b6c75dfb616a4751fdf53ca335641b175c9181066a87e219d7e192b1d4f113f629aa4d2baae2a3fb88f27779681355afba2107feb034e7ddedac06ba7ad3b81cec87c24c8c8aca07d146ad30aeed5abc419ccaf0dcfa3dc7b25426ab97eb45c88bb0f8ce0d4772ab3a2ce8d6ea5a33483983d866bf99691d7d956b295cf1d658c00342e6672a53913f675b06", @typed={0x8, 0x28, 0x0, 0x0, @u32=0x7ff}, @typed={0x8, 0x3f, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="6abf1e72539ebc689d5221932f451ff519965cd58be5e12ba6277c134a8549c7b2b2a17da0ba43db849802622411e7b1929022826487902e5c9d952d150edc1025fe668e38629a669435fcb2d4d5961ff24374c5f6acb2a84f79b11a7c24e494559e28531a6e5399297cc1db0fb6f4d09b9d3132f2955e653bfe9154039d7135f9be4e336479c418d3d17981b4a9a56af9503c10c59cff290a06a96385f6669bb00d0cea", @typed={0xa9, 0x7e, 0x0, 0x0, @binary="c21dcc3fe68706e64b298282ac937c619f915e042c80ce53841308865156e0bd7a2bcb33dbade5a04ba02d60e621cb0892ddc56f27ec74073ca4bb53128f33844e62a76cf3158325bb7315e0e2888577b36fa0d29824512b0429d129e403e8a90237999f5cf045e787f68cfe438752774af43ac50a8333eded5cfc7a2734d0eaa51aedb48055891261dc8935dea3001907863228590a958b4b489a0b506bfd67748b8c7f7b"}, @generic="275bd84249b3e2bb3086ef32cb32b1cbc527343d3749983d904e18839f306e19994ff2543395ba772c1783ef41130edce01e0713a6399c1218f001700fe7be86598850eeab3ff5509d8ffc636f855ea02c753b1a4c5362fd1b555de8582253ee16ba9f2ae526c8885322ff5ee879fdfd7496a3bd26aeca3c40a72709c0cbfe7c1cdc011002c579dcff1ab89b91a6051b0118030d52", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x88, 0x0, 0x0, @fd=r0}]}, @typed={0x6f, 0xe, 0x0, 0x0, @binary="8168f633087a6dda52b1527dd49c4856b9305b65189cc29b48f4f6b167ebae688f0fdc7a6062dee196b3036e7b2ab6e0a99c461dbf2f391fff46d10451b92f150bdf4aaaf2cea711400fcdb6ba8b1d623ecd79180611d514f6d8d948d972ba87fffb4bde0deed3c77ab506"}, @typed={0x4, 0x5d}, @typed={0x14, 0x4a, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x49c}], 0x2}, 0x1) 05:28:52 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x20, 0x5, 0x1, 0x3, 0x0, 0x6, 0x48, 0xd, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x3, 0x8}, 0x11140, 0x5, 0xfffff90f, 0x2, 0xffffffffffffd416, 0x5, 0xfff, 0x0, 0x7f, 0x0, 0x4}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup(r2) ioctl$sock_bt_hci(r3, 0x400448cc, &(0x7f0000000240)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, &(0x7f0000000180)) dup2(r0, r1) 05:28:52 executing program 5: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) getdents(r0, 0x0, 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4, 0x7fffffff, 0x1, 0xfffffffeffffffff}, 0x4}, 0x20, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./file1\x00', 0x101042, 0x0) write(r1, &(0x7f0000000080)="01", 0x292e9) rseq(&(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2, 0x1, 0x7fff}}, 0x20, 0x1, 0x0) 05:28:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1e}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}]}, 0x34}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7c}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0xc0, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3ff, 0x26}}}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x80, 0x3, 0x0, 0x0, {0xa42, 0xf4, 0x0, 0x4, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x300, 0x8}}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x400, 0x4, 0x5, 0x8, 0x2, 0x9, 0x6, 0x6, 0x401, 0x4, 0xd874, 0xfff9, 0xb09, 0x7, 0x6, 0xd8]}, @NL80211_ATTR_FILS_KEK={0x44, 0xf2, "8522a5aa542c38b6886b26d19da6dce6a9f0e8b15436d3b6336046e88dca4cdb3193fd5658dad1b79efe8a49f413918c44128e7104265f6af9cce760720d0866"}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_USE_MFP={0x8}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000000}, 0x42) syz_read_part_table(0x9, 0x2, &(0x7f0000000080)=[{0x0, 0x0, 0x800}, {&(0x7f00000000c0)="d0aff2ca551eb5c266ba861495bd4eb4fc8fc99a402e5ba8888a740ca0cdd99ed0f59d90aab66dbfca1810e0549abab10cc4659df974ee7bed763a9d146e72660bdb77027492ed1c7e2628", 0x4b, 0x4}]) [ 220.340876] loop2: detected capacity change from 0 to 40 [ 220.345674] loop5: detected capacity change from 0 to 10 05:28:53 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) r2 = io_uring_setup(0x7c51, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_complete(r1) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) [ 220.366878] loop3: detected capacity change from 0 to 8 05:28:53 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) r2 = io_uring_setup(0x7c51, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) [ 220.396450] loop3: detected capacity change from 0 to 8 05:28:53 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x20, 0x5, 0x1, 0x3, 0x0, 0x6, 0x48, 0xd, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x3, 0x8}, 0x11140, 0x5, 0xfffff90f, 0x2, 0xffffffffffffd416, 0x5, 0xfff, 0x0, 0x7f, 0x0, 0x4}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cc, &(0x7f0000000240)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000180)) 05:28:53 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) r2 = io_uring_setup(0x7c51, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:28:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1e}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}]}, 0x34}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7c}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0xc0, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3ff, 0x26}}}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x80, 0x3, 0x0, 0x0, {0xa42, 0xf4, 0x0, 0x4, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x300, 0x8}}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x400, 0x4, 0x5, 0x8, 0x2, 0x9, 0x6, 0x6, 0x401, 0x4, 0xd874, 0xfff9, 0xb09, 0x7, 0x6, 0xd8]}, @NL80211_ATTR_FILS_KEK={0x44, 0xf2, "8522a5aa542c38b6886b26d19da6dce6a9f0e8b15436d3b6336046e88dca4cdb3193fd5658dad1b79efe8a49f413918c44128e7104265f6af9cce760720d0866"}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_USE_MFP={0x8}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000000}, 0x42) syz_read_part_table(0x9, 0x2, &(0x7f0000000080)=[{0x0, 0x0, 0x800}, {&(0x7f00000000c0)="d0aff2ca551eb5c266ba861495bd4eb4fc8fc99a402e5ba8888a740ca0cdd99ed0f59d90aab66dbfca1810e0549abab10cc4659df974ee7bed763a9d146e72660bdb77027492ed1c7e2628", 0x4b, 0x4}]) 05:28:53 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) r2 = io_uring_setup(0x7c51, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:28:53 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup(r1) ioctl$sock_bt_hci(r2, 0x400448cc, &(0x7f0000000240)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup(r3) ioctl$sock_bt_hci(r4, 0x400448cc, &(0x7f0000000240)) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = dup(r5) ioctl$sock_bt_hci(r6, 0x400448cc, &(0x7f0000000240)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x34, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1e}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r7, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x59}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004095) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x5, &(0x7f0000001500)=[{&(0x7f0000001580)="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", 0xffa, 0x8}, {&(0x7f0000001080)=';', 0x1}, {&(0x7f0000001140)="10", 0x1}, {&(0x7f00000011c0), 0x0, 0x1}, {0x0}], 0x20, 0x0) [ 220.718185] loop1: detected capacity change from 0 to 8 05:29:06 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xf9) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x0, 0xfffffff7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x40, 0x1) 05:29:06 executing program 1: r0 = perf_event_open(&(0x7f0000003c80)={0x2, 0x80, 0xce, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x400, 0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x4b45, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup(r2) ioctl$sock_bt_hci(r3, 0x400448cc, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r3) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)=0x4) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x80801, 0x0) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) 05:29:06 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x20, 0x5, 0x1, 0x3, 0x0, 0x6, 0x48, 0xd, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x3, 0x8}, 0x11140, 0x5, 0xfffff90f, 0x2, 0xffffffffffffd416, 0x5, 0xfff, 0x0, 0x7f, 0x0, 0x4}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cc, &(0x7f0000000240)) 05:29:06 executing program 5: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) getdents(r0, 0x0, 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4, 0x7fffffff, 0x1, 0xfffffffeffffffff}, 0x4}, 0x20, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./file1\x00', 0x101042, 0x0) write(r1, &(0x7f0000000080)="01", 0x292e9) rseq(&(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2, 0x1, 0x7fff}}, 0x20, 0x1, 0x0) 05:29:06 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) r2 = io_uring_setup(0x7c51, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:29:06 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) io_uring_setup(0x7c51, &(0x7f0000000140)) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:29:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1e}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}]}, 0x34}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7c}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0xc0, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3ff, 0x26}}}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x80, 0x3, 0x0, 0x0, {0xa42, 0xf4, 0x0, 0x4, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x300, 0x8}}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x400, 0x4, 0x5, 0x8, 0x2, 0x9, 0x6, 0x6, 0x401, 0x4, 0xd874, 0xfff9, 0xb09, 0x7, 0x6, 0xd8]}, @NL80211_ATTR_FILS_KEK={0x44, 0xf2, "8522a5aa542c38b6886b26d19da6dce6a9f0e8b15436d3b6336046e88dca4cdb3193fd5658dad1b79efe8a49f413918c44128e7104265f6af9cce760720d0866"}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_USE_MFP={0x8}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000000}, 0x42) syz_read_part_table(0x9, 0x2, &(0x7f0000000080)=[{0x0, 0x0, 0x800}, {&(0x7f00000000c0)="d0aff2ca551eb5c266ba861495bd4eb4fc8fc99a402e5ba8888a740ca0cdd99ed0f59d90aab66dbfca1810e0549abab10cc4659df974ee7bed763a9d146e72660bdb77027492ed1c7e2628", 0x4b, 0x4}]) 05:29:06 executing program 4: r0 = perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x12) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='syscall\x00') pread64(r1, &(0x7f0000000700)=""/4096, 0x1000, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)={0x0, ""/256, 0x0}) r7 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f0000070280)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x5, "af2f1a9317bc6f"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000046900)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000047900)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000047b00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)={0x0, ""/256, 0x0}) r16 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r16, 0xd000943d, &(0x7f0000070280)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}], 0x5, "af2f1a9317bc6f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000047d00)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "6d70bf7d8898cd"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)={0x0, ""/256, 0x0}) r23 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r23, 0xd000943d, &(0x7f0000070280)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r21}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r20}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r18}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r21}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r22}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r18}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r19}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r20}], 0x5, "af2f1a9317bc6f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000048d00)={0x1ff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r8}, {r9, r10}, {}, {r14, r17}, {}, {0x0, r20}], 0x97, "1efa50d07d926d"}) [ 233.994586] loop3: detected capacity change from 0 to 8 [ 234.039274] loop2: detected capacity change from 0 to 40 [ 234.041483] loop5: detected capacity change from 0 to 10 05:29:06 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) io_uring_setup(0x7c51, &(0x7f0000000140)) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:29:06 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x80, 0x5, 0xcc, 0xca, 0x0, 0x5, 0x90, 0xd, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1ff, 0x3}, 0x80, 0x4, 0x10001, 0x6, 0x800, 0x1f, 0x19d, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x10, r0, 0x9) ioctl$sock_bt_hci(r1, 0x400448e4, &(0x7f0000000000)) r2 = syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x7fff, 0x0, &(0x7f0000000180), 0x8, &(0x7f00000001c0)={[{'}[#--'}], [{@uid_gt}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@appraise_type}, {@uid_lt={'uid<', 0xee00}}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}]}) close(r2) [ 234.108525] loop3: detected capacity change from 0 to 63 [ 234.112190] nfs4: Unknown parameter '}[#--' 05:29:06 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) io_uring_setup(0x7c51, &(0x7f0000000140)) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:29:06 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x80, 0x5, 0xcc, 0xca, 0x0, 0x5, 0x90, 0xd, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1ff, 0x3}, 0x80, 0x4, 0x10001, 0x6, 0x800, 0x1f, 0x19d, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x10, r0, 0x9) ioctl$sock_bt_hci(r1, 0x400448e4, &(0x7f0000000000)) r2 = syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x7fff, 0x0, &(0x7f0000000180), 0x8, &(0x7f00000001c0)={[{'}[#--'}], [{@uid_gt}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@appraise_type}, {@uid_lt={'uid<', 0xee00}}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}]}) close(r2) 05:29:06 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) io_uring_setup(0x7c51, &(0x7f0000000140)) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:29:07 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x20, 0x5, 0x1, 0x3, 0x0, 0x6, 0x48, 0xd, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x3, 0x8}, 0x11140, 0x5, 0xfffff90f, 0x2, 0xffffffffffffd416, 0x5, 0xfff, 0x0, 0x7f, 0x0, 0x4}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cc, &(0x7f0000000240)) 05:29:07 executing program 1: socket$packet(0x11, 0x2, 0x300) [ 234.515796] loop3: detected capacity change from 0 to 63 [ 234.519156] nfs4: Unknown parameter '}[#--' [ 234.698041] syz-executor.2: attempt to access beyond end of device [ 234.698041] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 234.699701] Buffer I/O error on dev loop2, logical block 10, lost async page write 05:29:19 executing program 5: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) getdents(r0, 0x0, 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4, 0x7fffffff, 0x1, 0xfffffffeffffffff}, 0x4}, 0x20, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./file1\x00', 0x101042, 0x0) write(r1, &(0x7f0000000080)="01", 0x292e9) rseq(&(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2, 0x1, 0x7fff}}, 0x20, 0x1, 0x0) 05:29:19 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:29:19 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xf9) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x0, 0xfffffff7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x40, 0x1) 05:29:19 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xf9) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x0, 0xfffffff7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:29:19 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x20, 0x5, 0x1, 0x3, 0x0, 0x6, 0x48, 0xd, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x3, 0x8}, 0x11140, 0x5, 0xfffff90f, 0x2, 0xffffffffffffd416, 0x5, 0xfff, 0x0, 0x7f, 0x0, 0x4}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cc, &(0x7f0000000240)) 05:29:19 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:29:19 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmget$private(0x0, 0x4000, 0x40, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000000)=""/92) shmctl$SHM_INFO(r0, 0x3, &(0x7f0000000080)=""/94) 05:29:19 executing program 3: ioctl$int_out(0xffffffffffffffff, 0x2, &(0x7f0000000100)) pipe2(0x0, 0x84000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0xc0c0583b, &(0x7f0000000040)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000080)={0x77359400}, 0x10) dup2(r0, r2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, 0x4, &(0x7f00000003c0)=[{&(0x7f0000000540)="38dba7ed6e740e85ec490b5bc895e665ce45c413b2281db896069e9981ffd7bae6658601f3fedce8047aeb20eac1bce2b99ec1a1ea4a54c0f3e923d459c53f84d458aa68baa08016b96ffd01fd905d17e4cbe82ab3ac3a8c7b8510fa53123bf968cf9b356934e6ec35c1e76d57863923aed472b4735c56535e761c619a1c5850fad8ae33343a825d21b2543bf7af657254e1fc4af5ce6f7847d76c2816c8571d269943f5b8d9bcc72056081f861598db6c2a631fae281cfea55c979fa25b5700931f7a130acd66dc", 0xc8, 0xfffffffffffffeff}, {&(0x7f0000000640)="eb6b3e2dcc686fdfdc9dfdbb483ad780c0daa075979c929421f022cf40729c910f226d4ba0f4138b89e4a5618b1770dda20b694b6ed50a21c2c1bd4f662ae3fa69fc0d0cff97c4399830ddbe948a34398db7db08cf447027123aa16b1b4f4b0ec9395f2d2969ee51e9e122026d1263f8a2b60dbd7729dd6e80baf94aec9dfffea3fe0d56127e2ded832eb71aded24a091e5deaf82d0f0116c5690e54196a5ffb3b0f31b48bf554d85db4cc3e967d59c5fcd4f4f9ee6b3eb6bafda8164027c78f892a3f5d9d8b8e3513cbcdf7202fd901ced6af044802a3993bc77be1444ce095ea5d2e2d720fc2648069e206be97da9645217f237ce3d8", 0xf7, 0x5}, {&(0x7f0000000300)="b2abddf46ad8e19ce9c82f8016b46a25940c72771f7bacb9e6f46e8897d0f3f4e4e4a00219a5b601bbf697336ce06baaaaad8c14ca0ad4fe63717c9d434a37c90e71edd9a28371b316454936b5b2eac20aca71", 0x53, 0x5}, {&(0x7f0000000200)="654a1249f7a2112a4583b45e1c6e57ae3e8c7932bc6b7303eaccf7556d4f1faf9b06e89a6ab91f5fe3967156e668093eeef1cf46122478a7ec1173", 0x3b, 0x9}], 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB='nodots,dots,nodots,dots,dots,dots,nocase,dots,quiet,nodots,fowner=', @ANYRESDEC=0xee01, @ANYBLOB="2c6f626a5f753d2c297b2c6d6561737572652c7375626a5f747970653d5e2f2d262c66736e616d653d5bc3405e7b2b2c232b7b2c6d6561737572652c00000000"]) [ 247.124118] loop2: detected capacity change from 0 to 40 [ 247.147660] loop4: detected capacity change from 0 to 40 05:29:19 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) [ 247.173240] loop5: detected capacity change from 0 to 10 [ 247.226214] loop3: detected capacity change from 0 to 16382 05:29:19 executing program 1: getrusage(0x0, &(0x7f0000000000)) getrusage(0x0, &(0x7f0000000180)) getrusage(0x0, &(0x7f00000002c0)) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x9, 0x40}) write$char_usb(r0, &(0x7f00000003c0)="f8de073689fb081d2777b3cb8b03e7d6ee880c9f9c7f28940430ff181e4a3e8133c45eeb7277ac502fad28f7efff6c62bc8565bd62af60b7e75c14c66de9dfc93e4bf5a52f90e668dfc5f52eec3398b01dfe9c35760ade574533701779d2f44cf4e0e63da4351cd9ccf5b96d7b3a3d", 0x6f) wait4(0x0, &(0x7f0000000480), 0x20000000, &(0x7f00000004c0)) r1 = openat$cgroup_ro(r0, &(0x7f0000000580)='cpuacct.usage_all\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) write$vga_arbiter(r0, &(0x7f00000005c0)=@target={'target ', {'PCI:', '7', ':', '18', ':', '1e', '.', '1a'}}, 0x16) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup(r2) ioctl$sock_bt_hci(r3, 0x400448cc, &(0x7f0000000240)) pwrite64(r3, &(0x7f0000000640)="92166ef6bcd25f53e7432167c2d59e89e11de053ea5eec2cc82b42f738abe5e9ad617ccdbb09449393dfc7531c0468679fbd981cef23d366dac25794586861868ec65f604b539286180c45da6c0650a8ef96844ca5c6bee9f0b5282f7a1899a6b80471274e73941ebf7fed14e1d587748956a309e47051148b4f3a73a46fb8cae4e6502b28e7334544737253c245b247f9", 0x91, 0x10000) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000600)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r4, &(0x7f0000002c40)={&(0x7f0000002b80), 0xc, &(0x7f0000002c00)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="740b00707e9a66a7000126bd7000fbdbdf2509002000050015001000000005001500fb00000005001d00130000000800140003000000"], 0x34}, 0x1, 0x0, 0x0, 0x8880}, 0x20004000) clone3(&(0x7f0000003000)={0x10000080, &(0x7f0000002dc0), &(0x7f0000002e00), &(0x7f0000002e40)=0x0, {0x32}, &(0x7f0000002e80)=""/131, 0x83, &(0x7f0000002f40)=""/71, &(0x7f0000002fc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x3}, 0x58) process_vm_writev(r5, &(0x7f0000003380)=[{&(0x7f0000003080)=""/58, 0x3a}, {&(0x7f00000030c0)=""/72, 0x48}, {&(0x7f0000003140)=""/72, 0x48}, {&(0x7f00000031c0)=""/214, 0xd6}, {&(0x7f00000032c0)=""/156, 0x9c}], 0x5, &(0x7f0000003800)=[{&(0x7f0000003400)=""/93, 0x5d}, {&(0x7f0000003480)=""/196, 0xc4}, {&(0x7f0000003580)=""/210, 0xd2}, {&(0x7f0000003680)=""/159, 0x9f}, {&(0x7f0000003740)=""/155, 0x9b}], 0x5, 0x0) [ 247.244643] FAT-fs (loop3): Unrecognized mount option "fowner=00000000000000060929" or missing value 05:29:19 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:29:19 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x20, 0x5, 0x1, 0x3, 0x0, 0x6, 0x48, 0xd, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x3, 0x8}, 0x11140, 0x5, 0xfffff90f, 0x2, 0xffffffffffffd416, 0x5, 0xfff, 0x0, 0x7f, 0x0, 0x4}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cc, &(0x7f0000000240)) 05:29:19 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) [ 247.321215] loop3: detected capacity change from 0 to 16382 05:29:20 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) [ 247.334286] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 247.344405] FAT-fs (loop3): Unrecognized mount option "fowner=00000000000000060929" or missing value 05:29:20 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x20, 0x5, 0x1, 0x3, 0x0, 0x6, 0x48, 0xd, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x3, 0x8}, 0x11140, 0x5, 0xfffff90f, 0x2, 0xffffffffffffd416, 0x5, 0xfff, 0x0, 0x7f, 0x0, 0x4}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r0 = dup(0xffffffffffffffff) ioctl$sock_bt_hci(r0, 0x400448cc, &(0x7f0000000240)) [ 247.621795] syz-executor.2: attempt to access beyond end of device [ 247.621795] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 247.623165] Buffer I/O error on dev loop2, logical block 10, lost async page write 05:29:36 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:29:36 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:29:36 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xf9) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x0, 0xfffffff7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x40, 0x1) 05:29:36 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xf9) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x0, 0xfffffff7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 05:29:36 executing program 5: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) getdents(r0, 0x0, 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4, 0x7fffffff, 0x1, 0xfffffffeffffffff}, 0x4}, 0x20, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./file1\x00', 0x101042, 0x0) write(r1, &(0x7f0000000080)="01", 0x292e9) rseq(&(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2, 0x1, 0x7fff}}, 0x20, 0x1, 0x0) 05:29:36 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x3c1) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r2, &(0x7f0000000840)='2', 0x1, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f0000000140)="c0", 0x1, 0x75d6) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1, 0x3d61abb5, 0x6}) 05:29:36 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x20, 0x5, 0x1, 0x3, 0x0, 0x6, 0x48, 0xd, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x3, 0x8}, 0x11140, 0x5, 0xfffff90f, 0x2, 0xffffffffffffd416, 0x5, 0xfff, 0x0, 0x7f, 0x0, 0x4}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r0 = dup(0xffffffffffffffff) ioctl$sock_bt_hci(r0, 0x400448cc, &(0x7f0000000240)) 05:29:36 executing program 1: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) [ 263.875103] loop5: detected capacity change from 0 to 10 [ 263.894115] loop4: detected capacity change from 0 to 40 [ 263.901622] loop2: detected capacity change from 0 to 40 05:29:36 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xf9) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x0, 0xfffffff7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:29:36 executing program 0: r0 = memfd_secret(0x0) ftruncate(r0, 0x3) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 263.989824] syz-executor.2: attempt to access beyond end of device [ 263.989824] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 263.991858] Buffer I/O error on dev loop2, logical block 10, lost async page write 05:29:36 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:29:36 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x20, 0x5, 0x1, 0x3, 0x0, 0x6, 0x48, 0xd, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x3, 0x8}, 0x11140, 0x5, 0xfffff90f, 0x2, 0xffffffffffffd416, 0x5, 0xfff, 0x0, 0x7f, 0x0, 0x4}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r0 = dup(0xffffffffffffffff) ioctl$sock_bt_hci(r0, 0x400448cc, &(0x7f0000000240)) 05:29:36 executing program 5: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) getdents(r0, 0x0, 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4, 0x7fffffff, 0x1, 0xfffffffeffffffff}, 0x4}, 0x20, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./file1\x00', 0x101042, 0x0) write(r1, &(0x7f0000000080)="01", 0x292e9) 05:29:36 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xf9) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x0, 0xfffffff7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) [ 264.114612] loop1: detected capacity change from 0 to 40 05:29:36 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000100)={0x2d58010e941c28f4, 0x80, 0x3, 0x5d, 0x4, 0x5, 0x0, 0x5, 0x2800, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x7fff, 0x10000}, 0x40000, 0x8, 0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x6991, 0x0, 0x1}, 0x0, 0xc, r0, 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x24, r2, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) [ 264.214064] loop2: detected capacity change from 0 to 40 [ 264.230044] loop5: detected capacity change from 0 to 10 05:29:36 executing program 0: r0 = memfd_secret(0x0) ftruncate(r0, 0x3) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 05:29:36 executing program 7: r0 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 05:29:36 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x20, 0x5, 0x1, 0x3, 0x0, 0x6, 0x48, 0xd, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x3, 0x8}, 0x11140, 0x5, 0xfffff90f, 0x2, 0xffffffffffffd416, 0x5, 0xfff, 0x0, 0x7f, 0x0, 0x4}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cc, &(0x7f0000000240)) [ 264.338349] syz-executor.2: attempt to access beyond end of device [ 264.338349] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 264.340236] Buffer I/O error on dev loop2, logical block 10, lost async page write 05:29:50 executing program 5: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) getdents(r0, 0x0, 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4, 0x7fffffff, 0x1, 0xfffffffeffffffff}, 0x4}, 0x20, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./file1\x00', 0x101042, 0x0) 05:29:50 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 05:29:50 executing program 0: r0 = memfd_secret(0x0) ftruncate(r0, 0x3) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 05:29:50 executing program 7: r0 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 05:29:50 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xf9) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x0, 0xfffffff7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 05:29:50 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cc, &(0x7f0000000240)) 05:29:50 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xf9) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x0, 0xfffffff7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:29:50 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xf9) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x0, 0xfffffff7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x40, 0x1) [ 277.353080] loop5: detected capacity change from 0 to 10 [ 277.372294] loop2: detected capacity change from 0 to 40 [ 277.386219] loop1: detected capacity change from 0 to 40 [ 277.391483] loop4: detected capacity change from 0 to 40 05:29:50 executing program 0: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x3) syz_io_uring_submit(r0, 0x0, 0x0, 0x0) 05:29:50 executing program 7: r0 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 05:29:50 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4200, r0, 0x0, 0x0) ptrace(0x10, r0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x200003, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000100)={0x3, 0x80, 0x7f, 0x3f, 0x69, 0x8, 0x0, 0x1ff, 0x8, 0x6, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000040), 0x4}, 0x54002, 0xc528, 0x6, 0x1, 0x4, 0x4, 0x1f, 0x0, 0x5}) ptrace$setopts(0x4206, r0, 0x4, 0xd7eeb4583bb83fa3) ioctl$FITRIM(0xffffffffffffffff, 0x4004662b, &(0x7f0000000180)) 05:29:50 executing program 5: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) getdents(r0, 0x0, 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4, 0x7fffffff, 0x1, 0xfffffffeffffffff}, 0x4}, 0x20, 0x1, 0x0) [ 277.481983] syz-executor.2: attempt to access beyond end of device [ 277.481983] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 277.483791] Buffer I/O error on dev loop2, logical block 10, lost async page write 05:29:50 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cc, &(0x7f0000000240)) 05:29:50 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xf9) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) [ 277.613013] loop5: detected capacity change from 0 to 10 05:29:50 executing program 0: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x3) syz_io_uring_submit(r0, 0x0, 0x0, 0x0) 05:29:50 executing program 7: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) syz_io_uring_submit(r0, 0x0, 0x0, 0x0) [ 277.788078] loop2: detected capacity change from 0 to 40 [ 280.344570] syz-executor.2 (4539) used greatest stack depth: 24000 bytes left 05:30:04 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4200, r0, 0x0, 0x0) ptrace(0x10, r0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x200003, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000100)={0x3, 0x80, 0x7f, 0x3f, 0x69, 0x8, 0x0, 0x1ff, 0x8, 0x6, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000040), 0x4}, 0x54002, 0xc528, 0x6, 0x1, 0x4, 0x4, 0x1f, 0x0, 0x5}) ptrace$setopts(0x4206, r0, 0x4, 0xd7eeb4583bb83fa3) ioctl$FITRIM(0xffffffffffffffff, 0x4004662b, &(0x7f0000000180)) 05:30:04 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xf9) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:30:04 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cc, &(0x7f0000000240)) 05:30:04 executing program 7: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) syz_io_uring_submit(r0, 0x0, 0x0, 0x0) 05:30:04 executing program 5: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) getdents(r0, 0x0, 0x0) 05:30:04 executing program 0: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x3) syz_io_uring_submit(r0, 0x0, 0x0, 0x0) 05:30:04 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xf9) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x0, 0xfffffff7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:30:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() pidfd_open(r1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x2, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x7ff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) getuid() geteuid() pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1, 0x7fffffe, 0x0) statx(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0x6000, 0x7ff, &(0x7f0000000880)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x3, 0x300) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000180)) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000180)) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000001c0)={0x14, 0x1e, 0x101, 0x0, 0x0, "", [@nested={0xa}]}, 0x14}], 0x1}, 0x0) [ 292.096513] loop5: detected capacity change from 0 to 10 [ 292.101608] loop1: detected capacity change from 0 to 40 05:30:04 executing program 7: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) syz_io_uring_submit(r0, 0x0, 0x0, 0x0) [ 292.147271] loop2: detected capacity change from 0 to 40 05:30:04 executing program 5: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:30:04 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cc, &(0x7f0000000240)) 05:30:04 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:30:04 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xf9) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) [ 292.257411] loop4: detected capacity change from 0 to 40 05:30:04 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) [ 292.291880] loop5: detected capacity change from 0 to 10 05:30:05 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cc, &(0x7f0000000240)) 05:30:05 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cc, &(0x7f0000000240)) [ 292.841833] syz-executor.4: attempt to access beyond end of device [ 292.841833] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 292.843075] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 292.899639] syz-executor.2: attempt to access beyond end of device [ 292.899639] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 292.901169] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 292.925464] syz-executor.1: attempt to access beyond end of device [ 292.925464] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 292.927114] Buffer I/O error on dev loop1, logical block 10, lost async page write 05:30:19 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xf9) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:30:19 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xf9) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:30:19 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:30:19 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cc, &(0x7f0000000240)) 05:30:19 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:30:19 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xf9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:30:19 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:30:19 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xf9) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) [ 306.667415] loop5: detected capacity change from 0 to 10 [ 306.671638] loop2: detected capacity change from 0 to 40 [ 306.676238] loop4: detected capacity change from 0 to 40 [ 306.680660] loop3: detected capacity change from 0 to 40 [ 306.683942] loop1: detected capacity change from 0 to 40 05:30:19 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:30:19 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:30:19 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cc, &(0x7f0000000240)) 05:30:19 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:30:19 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x10, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:30:19 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xf9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) [ 307.113799] syz-executor.4: attempt to access beyond end of device [ 307.113799] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 307.115790] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 307.255869] loop2: detected capacity change from 0 to 40 05:30:20 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xf9) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) [ 307.398276] loop5: detected capacity change from 0 to 10 [ 307.661513] loop4: detected capacity change from 0 to 40 05:30:32 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xf9) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:30:32 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xf9) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:30:32 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xf9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:30:32 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:30:32 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x10, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:30:32 executing program 6: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cc, &(0x7f0000000240)) 05:30:32 executing program 3: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000007, 0x6c032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2000000, 0x80010, 0xffffffffffffffff, 0xccf4d000) 05:30:32 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x10, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) [ 319.800544] loop1: detected capacity change from 0 to 40 [ 319.830978] loop5: detected capacity change from 0 to 10 [ 319.857523] loop4: detected capacity change from 0 to 40 [ 319.860843] loop2: detected capacity change from 0 to 40 05:30:32 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x10, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:30:32 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x10, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:30:32 executing program 6: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cc, &(0x7f0000000240)) 05:30:32 executing program 5: rseq(0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:30:33 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x10, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:30:33 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x52, 0x6, 0x9, 0x0, 0x5, 0x2200, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xffff0000, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x8000, 0x9, 0x1, 0x2, 0xffffffff7fffffff, 0x10001, 0xffe8, 0x0, 0x401, 0x0, 0x2}, 0xffffffffffffffff, 0x3, r0, 0x2) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000008c0), 0x400, 0x0) r1 = getpid() r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x1, 0xb7, 0x4, 0xf7, 0x0, 0x0, 0x800, 0x13eefa01fa57ac18, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000000), 0x1}, 0x10, 0x6, 0x39b, 0x9, 0x8, 0x2, 0xfffa, 0x0, 0x8000, 0x0, 0x9}, r1, 0xb, r2, 0x2) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000840)={0x5, 0x80, 0x9, 0xf5, 0x0, 0x0, 0x0, 0x1, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={&(0x7f0000000540), 0x9}, 0x40500, 0x2, 0x7, 0x1, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) utime(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140)={0x0, 0x1f}) 05:30:33 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:30:33 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) [ 320.525253] loop5: detected capacity change from 0 to 10 [ 320.531671] syz-executor.1: attempt to access beyond end of device [ 320.531671] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 320.533493] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 320.578406] loop2: detected capacity change from 0 to 40 [ 320.836347] syz-executor.2: attempt to access beyond end of device [ 320.836347] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 320.838305] Buffer I/O error on dev loop2, logical block 10, lost async page write 05:30:44 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:30:44 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:30:44 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xf9) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:30:44 executing program 6: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cc, &(0x7f0000000240)) 05:30:44 executing program 5: rseq(0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:30:44 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xf9) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) 05:30:44 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:30:44 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup(r1) ioctl$sock_bt_hci(r2, 0x400448cc, &(0x7f0000000240)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000080)={{0x2, 0x1, 0x800, 0x0, 0x839}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc1, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r3, 0x4008f510, &(0x7f0000000040)=0x2) [ 331.897565] loop1: detected capacity change from 0 to 40 [ 331.910806] loop4: detected capacity change from 0 to 40 [ 331.933026] loop5: detected capacity change from 0 to 10 [ 331.934561] loop2: detected capacity change from 0 to 40 05:30:44 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:30:44 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cc, &(0x7f0000000240)) 05:30:44 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:30:44 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:30:44 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xf9) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) [ 332.054736] loop3: detected capacity change from 0 to 40 05:30:44 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cc, &(0x7f0000000240)) 05:30:44 executing program 5: rseq(0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) [ 332.132477] loop4: detected capacity change from 0 to 40 [ 332.356113] loop5: detected capacity change from 0 to 10 [ 332.556369] syz-executor.3: attempt to access beyond end of device [ 332.556369] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 332.557878] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 332.676145] syz-executor.1: attempt to access beyond end of device [ 332.676145] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 332.677634] Buffer I/O error on dev loop1, logical block 10, lost async page write 05:30:59 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:30:59 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cc, &(0x7f0000000240)) [ 347.217080] loop2: detected capacity change from 0 to 40 [ 347.242663] loop5: detected capacity change from 0 to 10 05:30:59 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:30:59 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xf9) 05:30:59 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:30:59 executing program 5: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:30:59 executing program 3: r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x840, 0x0) ioctl$DVD_AUTH(r0, 0x5329, &(0x7f00000000c0)=@hsk={0x0, 0x0, "df850c662f"}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) lstat(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, r2}, 0xc) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000014c0)='cgroup.threads\x00', 0x2, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = dup(r5) ioctl$sock_bt_hci(r6, 0x400448cc, &(0x7f0000000240)) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r7, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001500)={0x0, 0x0, 0x0}, &(0x7f0000001540)=0xc) newfstatat(0xffffffffffffff9c, &(0x7f0000001580)='\x00', &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r10, 0x0) r11 = getgid() sendmmsg$unix(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="94b9675f50d25e462e9cc40bf3a837c504203dda89f22f8ca9298b6603e3a0b4db438f1f4bf3db8757a66c07b69e9b1ab356525cd1e74a2a2cc829124a45bed4d91da9584398cf805f8a3fb6513a4f760b5dd109627db2b9", 0x58}], 0x1, &(0x7f0000000c80)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, 0xee01}}}], 0x120, 0x40}}, {{&(0x7f0000000dc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001180)=[{&(0x7f0000000e40)="8352bc34f9c39d852d30619d844b96ec8abc0bd2ee19cc76c08b39ce32828d2a23cd01bf9908d1ef073f18f6e6f1b3e0a8facc81d68b7923fce0bac48cd1c480d70be323cf1f537128ed5d4025bfa58377a19cac53881356c94635c44612a25cf5cd23104b31b8d9b89fb6d87545dd0ddb9641389f8ba97c60293191e7105599d644f9244d82746ebf54322fac625127d1491be2befc003fded75ecdd7d76ad1de10307ba70e15b1a83f76f2b302b06f176cf69feaec6db1dbf2dd91145decf8448a947f365e11214fa180649d6a4f7143657e0ab2b1db", 0xd7}, {&(0x7f0000000f40)="e06818bf95c28f5f313f28490300c2796a6694a5f8627b3765df228248e27312076ceb015654992602a27a45798f9234248be7", 0x33}, {&(0x7f0000000f80)="b3befa96f448cc7a52770d748ff1544d46b6d097cc7b3cf5f7fa22753606748a2b38e845cd3698d8ac3bcda8ccb2e56d2272353eba10ffcc611264c75577e637c6fabaf4fa2fdca3898c2b8fe8a5193df98b508a5caaf5a534497a8766e009da346b9831d41e3add0ff968d0648e60822f8e837ea5834d1f7c42f7f032b637b5488777004664942dc409ced46451e412b346d2f650ae8fd61b4e6de4fc75433a0303fa46333d5116086aa6635180e992ebdd70ebdd8193571a55a01cc514253af44ce295b8ab8bcf56ae3e5b57aac26be484cf863ee0a6", 0xd7}, {&(0x7f0000001080)="fae5fcbaa37113c0350f2755f2320ba59dc32437b260c139a726c5700bcde93858c600e4e76a093a85242d36a132b233f61632e50d406143cc3872321d3367043b95a3997e94c275dd38c6635699647e3c74e97be63de75059b5421adda83ad4f0e23beb145dc3c6ba740c25c154fd7a63db7f164e6989832fb3b797b409d4eb2ab0db7e92a4fa045e3ea32820b6306e17ad09f40a2da7352a3139a50d411c28f04ec2186f087dfc10590a1fa74900370684c2f7360ec02baa471f99d5bc1b214af4930ad55bb44ff3257f6404581d5013b4f69fd2390827144677eb1709b6bf421ba92f8ec4292d150f7787fdf3804ce6872c1bad", 0xf5}], 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="1000000000000000010000000100000028000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000002c000000000000002abe5c001000007cdedb6bafa0ee556fe1c2a674928a9151ea7b34a8049e6d2194921aef59c430c588265de292873a460cc62aaf0cd80d5f4e9c455d0e683f5fe88de961f513120578", @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r4, @ANYRES32, @ANYRES32=r6, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r9, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00'], 0x150, 0x20000011}}], 0x2, 0x40000) dup(r1) close(r1) 05:30:59 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xf9) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) [ 347.258957] loop4: detected capacity change from 0 to 40 [ 347.319130] loop1: detected capacity change from 0 to 40 05:31:00 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(0xffffffffffffffff, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:31:00 executing program 5: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:31:00 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:31:00 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) [ 347.442773] loop4: detected capacity change from 0 to 40 [ 347.453486] loop5: detected capacity change from 0 to 10 05:31:00 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cc, &(0x7f0000000240)) [ 347.458535] syz-executor.1: attempt to access beyond end of device [ 347.458535] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 347.460230] Buffer I/O error on dev loop1, logical block 10, lost async page write 05:31:00 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(0xffffffffffffffff, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:31:00 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:31:00 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$sock_bt_hci(r0, 0x400448cc, &(0x7f0000000240)) [ 347.775610] syz-executor.2: attempt to access beyond end of device [ 347.775610] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 347.777930] Buffer I/O error on dev loop2, logical block 10, lost async page write 05:31:11 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) 05:31:11 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(0xffffffffffffffff, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:31:11 executing program 5: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:31:11 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpgid(0xffffffffffffffff) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r2 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x6, 0x40, 0x4, 0x7, 0x0, 0x2, 0x450, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9e8, 0x5, @perf_bp={&(0x7f0000000040), 0x9}, 0x11010, 0x8065, 0xa5, 0x9, 0x8, 0x80000000, 0x81, 0x0, 0x9, 0x0, 0x7}, r1, 0x2, r0, 0x5) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) ioctl(r2, 0x1e0fed, &(0x7f0000000380)="172cb55c6e83c65220acb10f6b9e3d2f023d74ccc2559b45ccda595b9b219bd5e43a80e52cfe347d4c") ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r3, 0x80089419, &(0x7f0000000300)) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f0000000240)="b1", 0x1, 0x0) fallocate(r4, 0x20, 0x0, 0xffff77ff000) io_destroy(0x0) io_setup(0x6, &(0x7f0000000340)) syz_io_uring_complete(0x0) close(0xffffffffffffffff) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x37, &(0x7f0000000180)=""/149, &(0x7f0000000000)=0x95) syz_open_dev$mouse(&(0x7f0000000540), 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f00000003c0)=0x7) 05:31:11 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$sock_bt_hci(r0, 0x400448cc, &(0x7f0000000240)) 05:31:11 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xf9) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) 05:31:11 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef) 05:31:11 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) [ 358.853451] loop2: detected capacity change from 0 to 40 [ 358.862206] loop5: detected capacity change from 0 to 10 05:31:11 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$sock_bt_hci(r0, 0x400448cc, &(0x7f0000000240)) [ 358.871566] loop1: detected capacity change from 0 to 40 [ 358.885357] loop4: detected capacity change from 0 to 40 05:31:11 executing program 5: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:31:11 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:31:11 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:31:11 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cc, &(0x7f0000000240)) [ 358.977600] loop5: detected capacity change from 0 to 10 05:31:11 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) [ 358.995254] syz-executor.1: attempt to access beyond end of device [ 358.995254] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 358.996770] Buffer I/O error on dev loop1, logical block 10, lost async page write 05:31:11 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) 05:31:11 executing program 5: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:31:11 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xf9) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) 05:31:11 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:31:11 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:31:11 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef) 05:31:11 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cc, &(0x7f0000000240)) [ 359.116234] loop5: detected capacity change from 0 to 10 [ 359.118416] loop4: detected capacity change from 0 to 40 [ 359.145170] loop3: detected capacity change from 0 to 40 [ 359.200349] loop1: detected capacity change from 0 to 40 05:31:11 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) 05:31:11 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:31:11 executing program 5: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) [ 359.236024] loop2: detected capacity change from 0 to 40 05:31:11 executing program 7: r0 = memfd_secret(0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 359.311005] loop5: detected capacity change from 0 to 10 [ 359.338562] syz-executor.1: attempt to access beyond end of device [ 359.338562] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 359.340361] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 359.354077] loop4: detected capacity change from 0 to 40 05:31:26 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) 05:31:26 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef) 05:31:27 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cc, &(0x7f0000000240)) 05:31:27 executing program 0: r0 = memfd_secret(0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 05:31:27 executing program 5: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)) 05:31:27 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xf9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:31:27 executing program 7: r0 = memfd_secret(0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 05:31:27 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) [ 374.327671] loop4: detected capacity change from 0 to 40 [ 374.332547] loop3: detected capacity change from 0 to 40 [ 374.337705] loop1: detected capacity change from 0 to 40 [ 374.342526] loop2: detected capacity change from 0 to 40 05:31:27 executing program 7: r0 = memfd_secret(0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 05:31:27 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) 05:31:27 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, 0xffffffffffffffff, 0x0, 0xfffffdef) 05:31:27 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x0, &(0x7f0000000240)) 05:31:27 executing program 5: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)) 05:31:27 executing program 0: r0 = memfd_secret(0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 05:31:27 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) (fail_nth: 1) [ 374.536113] loop2: detected capacity change from 0 to 40 05:31:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cc, &(0x7f0000000240)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8916, &(0x7f0000000380)={@empty, 0x0, r4}) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001640)={&(0x7f00000002c0)={0x1370, 0x12, 0x1, 0x70bd2c, 0x25dfdbfb, {0x26, 0x20, 0x4, 0x1, {0x4e21, 0x4e21, [0x0, 0x1, 0x10001, 0x80000001], [0x3ff, 0x3, 0xfffffff2, 0x80000001], r4, [0x7, 0x9]}, 0x5, 0x38000000}, [@INET_DIAG_REQ_BYTECODE={0xeb, 0x1, "11543c6b183a66b296330e83821d3d3ea94d3625890119b901a1cc54311db3c7ca7f57b785687ae1674b5b32e2d5fa2f03288ee5ac62633937ca94b9476bb68529fc7d6b846937eeb30ad6a6c6d58d55a50e90a9a4e289a0bd4d9f717bedcd5db1b1216dbaabc9ae1c76cccd501d548ea2ff775ca1888a9ca4bf5ca80e143012f2e2b866b1ebd33018ca37fb3848d1ea5349ebcc0eb9b143e629a85bb7ce1af36dbc1aeeb76b715ec121b5d07c099862c69b5679ab3780475b0ffcd071dfac74ded0fccb689cd74194f42755328cd6f65710903bad41c9e4c3c0b5cd4d642bd4820928236a9242"}, @INET_DIAG_REQ_BYTECODE={0xba, 0x1, "25868e9ba0853d6d2817f04448446d2ce570d429378cd513f90dccb06da4471ddf1fe010321770f42bf2d69b4050a1417107910593a718ebbe5c3bc34c8dca4c63fa0d2f453608b52d28675fd4ee0bb45a7936768bc6b82b4643d72bde4afd8385a0c45bd0772849101007865f2f83a63b10b62c1f42b09491541d55c6c1b591bf2857d594018c7600ce49217a59b3ea70a09a1a64afb8e17fdc962a453699c3f29f7566159d7350e07561a0a3d199deec749fe16702"}, @INET_DIAG_REQ_BYTECODE={0xae, 0x1, "61d18c393544cec43f7eef3991d58bbe366a2fac8ccedd1e262b328e600a05240dfb63cc1dab10943f15ad396b17342aea9c4585b96d9e12600da36fe5d4785c061cc17df93cb5f79714b9bc77f84f29d5483a65f44a693046dc2291f9194f74f8a8d421f16828e8bf61d6fe0ad74600ad421a5b211a5f9d169a06496442445c67178f1b076b5d305da766ac8793a7cd1eb69388952d6e735cd40f2b2fa84644aa66e55c778fe2e3b707"}, @INET_DIAG_REQ_BYTECODE={0x54, 0x1, "32fa5c630b6cb119973c9062b0c3a73b95e3b1a0e37aba036345ccb2ad4b55bf221bf3d34587f3d62d4c87f4f1e136957dad3c89e5a0a3c2a94a5b1b45b81361bfff7d057977c971e38022dd88ce296b"}, @INET_DIAG_REQ_BYTECODE={0x46, 0x1, "19ad7110a6c046a95a0149d24c790693f580e6ad399a0240f1018b03ba4d011b71dc9583ccbb18fdaec481b60977fd309df34da6c6990d9c2fff62e6d48d56a4c1e8"}, @INET_DIAG_REQ_BYTECODE={0x2c, 0x1, "baa20561d48f98eca9711286cc252dd6b971dfa5c543fe57110586bf875a1141745e70c81ab3ce65"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}]}, 0x1370}, 0x1, 0x0, 0x0, 0x8010}, 0x20000020) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)=ANY=[@ANYBLOB="8101e0f800", @ANYRES32=0xffffffffffffffff, @ANYBLOB="03ae000000000000002f62696c6530005a9ae7c7e637728dda94d2d597c5660e91eba7094e5cd825b38cc2115c061daa3255188bb4939f34b18c5108cfcf4cab3a22836c2d794b4f7583610eaaf61df3c754327a9f8235f19c3e1b375966105bdf9fc5a00cb594dcd1d56eefed43fd81286aaf45c428073280c44e7aa5855bff91f0f01ae0cf49d12378efce274b7a2dc3f2d1b6bb15c5034c317f3e8d244a18d9f2e45c510a17098def7e8b446b529a4ebda562cc1783a7175f4bb464aa99565ffdadfbb19e7f364d79187bdd"]) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = dup(r6) ioctl$sock_bt_hci(r7, 0x400448cc, &(0x7f0000000240)) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000240)=0x1000) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x1b0) openat$cgroup_pressure(r5, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x422b0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r8, 0x5406, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "2c3e17c54839f862"}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000380)={@empty}) [ 374.563682] loop4: detected capacity change from 0 to 40 [ 374.581555] FAULT_INJECTION: forcing a failure. [ 374.581555] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 374.582919] CPU: 0 PID: 4859 Comm: syz-executor.7 Not tainted 6.4.0-next-20230703 #1 [ 374.583563] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 374.584248] Call Trace: [ 374.584470] [ 374.584668] dump_stack_lvl+0xc1/0xf0 [ 374.585032] should_fail_ex+0x4b4/0x5b0 [ 374.585379] __should_fail_alloc_page+0xe0/0x110 [ 374.585791] prepare_alloc_pages+0x178/0x500 [ 374.586182] ? __pfx___lock_acquire+0x10/0x10 [ 374.586581] __alloc_pages+0x149/0x480 [ 374.586927] ? __pfx___alloc_pages+0x10/0x10 [ 374.587321] ? mt_find+0x2a7/0x8b0 [ 374.587646] ? lock_release+0x1e3/0x680 [ 374.588000] alloc_pages+0x1a0/0x260 [ 374.588344] __pmd_alloc+0x3b/0x690 [ 374.588666] __handle_mm_fault+0xbd5/0x2980 [ 374.589036] ? __pfx_mt_find+0x10/0x10 [ 374.589383] ? __pfx___handle_mm_fault+0x10/0x10 [ 374.589794] ? find_vma+0x111/0x1b0 [ 374.590116] ? __pfx_find_vma+0x10/0x10 [ 374.590468] handle_mm_fault+0x1af/0xba0 [ 374.590819] do_user_addr_fault+0x74f/0x1480 [ 374.591204] exc_page_fault+0x9c/0x1a0 [ 374.591545] asm_exc_page_fault+0x26/0x30 [ 374.591895] RIP: 0033:0x7f92f1535a93 [ 374.592234] Code: 00 00 00 00 00 66 90 48 89 7c 24 f0 48 89 74 24 e8 48 89 54 24 e0 48 89 4c 24 d8 48 8b 4c 24 f0 48 8b 74 24 e8 4c 8b 44 24 e0 <8b> 81 0c 01 00 00 44 8b 89 08 01 00 00 48 8b 54 24 d8 c1 e0 04 8d [ 374.593694] RSP: 002b:00007f92eeb0c178 EFLAGS: 00010212 [ 374.594135] RAX: 00007f92f1535a70 RBX: 00007f92f16a9f60 RCX: 0000000020ffb000 [ 374.594718] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020ffb000 [ 374.595313] RBP: 00007f92eeb0c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 374.595891] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 374.596490] R13: 00007ffd10ad7f9f R14: 00007f92eeb0c300 R15: 0000000000022000 [ 374.597095] [ 374.597540] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF sendmmsg$inet6(r2, &(0x7f0000006740)=[{{&(0x7f00000016c0)={0xa, 0x4e24, 0x6, @private2, 0x1}, 0x1c, &(0x7f0000001880)=[{&(0x7f0000001700)="2378053a4c1768c2e09cb73b9674e05224b8b82556229cec6bf799931747bc81f7e4c5ce7cc57638a0114e421f1c8e3ddd36be452e03a6d09299ba9850122bbc665015bf31148ad63255dc14a98b14b973111410800040d7003ad906c6cc55cb9f529e0bb6a390090f77fb7abd2266d00dd9f8c140ec818faf6bbd30fda6818619ac959bdde8599dcc69c4be73d2de748147dd9ef52d706c6311c38c4bd1381c5d87fd60fbba1b930a2261a0638853b79efa9a66b8a8", 0xb6}, {&(0x7f00000017c0)="d3143a73011e48bfe1fb1582d33e809ccc8e34e6d551e60cf00e10964a67fbf30c92dc03bc344d2a7ac47ec2228b880db64e649c155c9cf13977c6d2f5db7a6cc91852a6110f8e02269e5fc0a9eec69a9fa3026449ff814075f24f887a062b79557d292420dc19f88a01cfcf1d02e58bb7ab6ac75fd321e2a59ca982672114f0cf3bedd9aa6fc41b5491b283d928e708b63a111eaf", 0x95}], 0x2, &(0x7f00000018c0)=[@dstopts_2292={{0x28, 0x29, 0x4, {0x73, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x100}, @enc_lim={0x4, 0x1, 0x80}, @jumbo]}}}, @hopopts_2292={{0x38, 0x29, 0x36, {0x32, 0x3, '\x00', [@hao={0xc9, 0x10, @local}, @jumbo, @pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xfffffff8}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}, @hopopts_2292={{0x38, 0x29, 0x36, {0x73, 0x3, '\x00', [@enc_lim={0x4, 0x1, 0x9}, @hao={0xc9, 0x10, @remote}, @pad1, @jumbo={0xc2, 0x4, 0x4}]}}}, @hopopts_2292={{0x58, 0x29, 0x36, {0x6, 0x7, '\x00', [@calipso={0x7, 0x28, {0x0, 0x8, 0x4, 0x9, [0x800, 0x1f, 0xffffffff, 0x7]}}, @hao={0xc9, 0x10, @empty}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x2}}, @tclass={{0x14, 0x29, 0x43, 0x7fff}}, @pktinfo={{0x24, 0x29, 0x32, {@local}}}, @hoplimit={{0x14, 0x29, 0x34, 0xa0000000}}], 0x190}}, {{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000001a80)="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", 0x1000}, {&(0x7f0000002a80)="1514cffcd4ccc6134b0a2d969df158aa564c7fddb5d35c15bb213be35cbcea1c0f925c9ab1f5be80c92cf399bb2de942384893b46262c1d0c89c07d16a4c564ee90231afabbf8a91386233683b956f2f84b1ddd80d78e1e3b0362b4fea76551d79978a1361bc90cd656e67c0230a8b4af4c880", 0x73}, {&(0x7f0000002b00)="2837a776747fed312a0b782580f2bce69e15306db7cfb26308f010f047bdb092d8ec4ab3e089da90dbffed0b05d2ed237cff406f5578cab04eb66fefa1bc27730e52457ad80adddd61b7067a78afe9c2bcc351b0bd3b8cd47e7a0434211a175eef4e55", 0x63}, {&(0x7f0000002b80)="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", 0x1000}, {&(0x7f0000003b80)="8cb98152e7fbb8db61560b0b49dce126917a38e882ecbea9bd5ab1634a46a7cd6d0fc410fd9e84211f08afa6af11689a91166fd74ad89a08913159496cc248f229e1527f45f679e20904ac3d40fa1d028908a52f48426e13330fc570f71c4401e63d83a81265621d6dfd8dd32aa5d60ef25c5a14dfafd15f3a8a49ab34e9897de6910d7ae3169cdb2996b3c87adced53ddf594db2096adf38a8a7cf6c571e8129b7388d13413810f5aa94cd87296d85919807c6299", 0xb5}, {&(0x7f0000003c40)="fecc4c3cefe8e06085fb202cb39b880043fe063bd23d48307299070cc6a67f", 0x1f}, {&(0x7f0000003c80)="5ae103ad970ce8428d813ca72e0d78e98c058db2dd4a12c15df770890517a073895221f25a051d0451d81026c2c922d82133384e13c00480e7f771c1436bc47e308beec70e66ad967aab640810707ceae6e3c84aa864eaf198ac72b528b20040cafcc0e26b9501b11a51fa0b6df00d99de0d8023313bddda9fef072115f5c6cc8c917b40624d100b9ef458c0c7df8e1b1b6331b0400b0e068b16012429e94821", 0xa0}, {&(0x7f0000003d40)="a11c2a632f9b81d70b68d9c2d76119a950efd6462f08e5e1338b436938fecda6da9cd618c0ffb810fb68ee05a8b6c2e2b86ef438eb5827ce9995d3bcce9ddd595c1043be3bdff01c1d9b9a01f4422435c55008c4e739556cb6903c63f1ce327810059c70dded185c8e90573af8658089d2233ab3f67ecf8f80c1f9eabd2f47996eefa54216fe99f7ee2668ee41ebd9999b2b1e07b46723209fe638db252fc4164c744e06f461da09f412901e7b95", 0xae}], 0x8, &(0x7f0000003e80)=[@dstopts={{0x18, 0x29, 0x37, {0x2f}}}, @dstopts_2292={{0x138, 0x29, 0x4, {0x2b, 0x23, '\x00', [@calipso={0x7, 0x40, {0x3, 0xe, 0x0, 0x3f, [0x81, 0x1, 0xb0f, 0x500000000000, 0x40, 0xfffffffffffffffa, 0x8aed]}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @enc_lim={0x4, 0x1, 0x1}, @hao={0xc9, 0x10, @mcast2}, @ra={0x5, 0x2, 0x1}, @pad1, @generic={0x3, 0xad, "40d207e65a7113fa0b1b21cddbf24319b798ae4edc5b15944716753ec8c3dd25dfbdef48fa7e0e9bfeca18aedf26ba5432bb936a8c31b603d14aa2c7822f6a02a01950bf9fed7cd5254a9f770dbe433799d2621c6c0991bad216ba480e6564e29205b90eaf09821ae2b7ef2af272e5bead3bc7b3e2118f1ca33796a2de71c70925be7897b8d90e25353a7ddac279fbb01a27e01bbea89f2936e26002015e7de7e80e0127808911e530785d99ec"}]}}}, @hopopts={{0x100, 0x29, 0x36, {0x0, 0x1d, '\x00', [@generic={0xff, 0xaf, "d3ae6e69495f219e8c4917a64801235f5517f87f0382efe640c29e15068ef459c18fdd3ddd569e482e2cc2f57c5dc59c7cc3148942f4592af087e770202248b1523e699fb280893edd384689bcf587c9a9ac3d5f5b2402f2c7612193e929a1f10c2e20f35687b670f250dc61d3a7f17f2a10ed317eb24709c25e9cb71a2d4a5e1f32c95bbdd2948eb61aff24087650699e5acd323b9a27ca07c73ead876349c7fd948967a2b84450f84cfaf2d1e460"}, @ra={0x5, 0x2, 0x4}, @pad1, @calipso={0x7, 0x28, {0x0, 0x8, 0x1, 0xd7, [0x1, 0x8, 0x8, 0xbcc6]}}, @pad1, @enc_lim={0x4, 0x1, 0xd3}]}}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x5c, 0xa, 0x1, 0x1f, 0x0, [@loopback, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, @loopback, @mcast1]}}}, @tclass={{0x14, 0x29, 0x43, 0x3}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @rthdr={{0x78, 0x29, 0x39, {0x3c, 0xc, 0x693f9c845c287ca3, 0x20, 0x0, [@mcast2, @empty, @private1, @local, @empty, @private2={0xfc, 0x2, '\x00', 0x1}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xfffffff9}}], 0x390}}, {{&(0x7f0000004240)={0xa, 0x4e21, 0x1, @loopback, 0xf670}, 0x1c, &(0x7f0000004500)=[{&(0x7f0000004280)="07bbb410f6f58b28f099a4235fe73f1ba2fa6d03467d50f3d670cac9237f20dc72776e699cae38a9164fe61ed836269f925e734798dc3780d723ddce4c9c72468719d3ff0bf8ebefb468a44c9ba03a22f598de02d25ace543f3b0a164c2216f1949f658d9410680fad2400d01b3a91dab74918b3f651db4759f89eb599d83c70f0c7037bb6958c08961f68f1559f95c54e82312a995ab8ef6d70e44a1b92fb70e956630ab81ad54d233e76e88df37ee3d666382bc202ccc0eb5951cda5e479f4315949668554d3", 0xc7}, {&(0x7f0000004380)="77a89eaffcff9b301ee92b72d56ce415b93a8e458d02e64b2ef6af812446cc03beb5f8a4d3c738e9a43feec39b24a841a42bbf3603c1ac96b1ae04713865cdeb5a7b64723072659404cbb63ff7ae8745b19da3636a2e01e2bd0c184d0c444d97ffa70600d5be25a0a4315e190cfe469312fba71a2a7fc983e65ab8b9fe7f322a61466eff1dfc8465521988c8ed73b95d15e2acf6c53c14bcfa0095bb846f464c692b09a2aacd6187ef41ee67b85a8fd734ee019aecd9", 0xb6}, {&(0x7f0000004440)="b46a107f26a6792a671056abd0fea7e103a0bf0cdd7135793623913abc90564a70d720be02b66a056eb2be4b3fc0e1a25dfc89ff3571ce7af38a1fb048edee5ec0ef5b7c9ea44cc06e76ab481041aa3e9451c668c3cd506cfdeda35e91b3efa52d03a2d2870cf8977ad3e2c3dbd436313211b496fd59d2feac7acdcb307d49c9f01d84bc8390b8394ddd00854b7bf679ceeb31f47d156d644b00cc5587832a8a3c244861936d12", 0xa7}], 0x3, &(0x7f0000004540)=[@rthdrdstopts={{0x1080, 0x29, 0x37, {0x2c, 0x20c, '\x00', [@generic={0x8, 0x1000, "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"}, @jumbo={0xc2, 0x4, 0x3f}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @remote}}, @ra={0x5, 0x2, 0x6}, @enc_lim={0x4, 0x1, 0x8}, @enc_lim={0x4, 0x1, 0x7f}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x1, 0xc, 0x3f, 0x7, [0x1ffe000000000000, 0x0, 0x8, 0x10000, 0xffffffff, 0xfffffffffffffffa]}}]}}}], 0x1080}}, {{&(0x7f00000055c0)={0xa, 0x4e20, 0x7fffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c, &(0x7f00000056c0)=[{&(0x7f0000005600)}, {&(0x7f0000005640)="b5a4e62d483cbac996c93e6e90a079803affc4b0748c3a1acfd1b078", 0x1c}, {&(0x7f0000005680)="b3c9285fad39d9e3122493745ce4ecf0acd8270c25f04f42b55520e645816ede792d8b5f445ac0", 0x27}], 0x3, &(0x7f0000005700)=ANY=[@ANYBLOB="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"/4122], 0x1020}}], 0x4, 0x24000000) 05:31:38 executing program 0: r0 = memfd_secret(0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 05:31:38 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xf9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:31:38 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, 0xffffffffffffffff, 0x0, 0xfffffdef) 05:31:38 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) (fail_nth: 2) 05:31:38 executing program 5: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)) 05:31:38 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) 05:31:38 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0xc2b480, 0x0) chroot(&(0x7f0000000040)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x0) utime(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)={0x7fffffff, 0xbd3}) 05:31:38 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x0, &(0x7f0000000240)) [ 385.842344] loop4: detected capacity change from 0 to 40 [ 385.847109] loop2: detected capacity change from 0 to 40 [ 385.850320] loop1: detected capacity change from 0 to 40 [ 385.860051] FAULT_INJECTION: forcing a failure. [ 385.860051] name failslab, interval 1, probability 0, space 0, times 1 [ 385.860830] CPU: 0 PID: 4880 Comm: syz-executor.7 Not tainted 6.4.0-next-20230703 #1 [ 385.861340] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 385.861887] Call Trace: [ 385.862074] [ 385.862236] dump_stack_lvl+0xc1/0xf0 [ 385.862514] should_fail_ex+0x4b4/0x5b0 [ 385.862797] ? __pmd_alloc+0x98/0x690 [ 385.863070] should_failslab+0x9/0x20 [ 385.863345] kmem_cache_alloc+0x62/0x370 [ 385.863641] __pmd_alloc+0x98/0x690 [ 385.863898] __handle_mm_fault+0xbd5/0x2980 [ 385.864211] ? __pfx_mt_find+0x10/0x10 [ 385.864501] ? __pfx___handle_mm_fault+0x10/0x10 [ 385.864846] ? find_vma+0x111/0x1b0 [ 385.865120] ? __pfx_find_vma+0x10/0x10 [ 385.865410] handle_mm_fault+0x1af/0xba0 [ 385.865698] do_user_addr_fault+0x74f/0x1480 [ 385.866016] exc_page_fault+0x9c/0x1a0 [ 385.866296] asm_exc_page_fault+0x26/0x30 [ 385.866581] RIP: 0033:0x7f92f1535a93 [ 385.866842] Code: 00 00 00 00 00 66 90 48 89 7c 24 f0 48 89 74 24 e8 48 89 54 24 e0 48 89 4c 24 d8 48 8b 4c 24 f0 48 8b 74 24 e8 4c 8b 44 24 e0 <8b> 81 0c 01 00 00 44 8b 89 08 01 00 00 48 8b 54 24 d8 c1 e0 04 8d [ 385.868002] RSP: 002b:00007f92eeb0c178 EFLAGS: 00010212 [ 385.868369] RAX: 00007f92f1535a70 RBX: 00007f92f16a9f60 RCX: 0000000020ffb000 [ 385.868854] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020ffb000 [ 385.869320] RBP: 00007f92eeb0c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 385.869796] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 385.870287] R13: 00007ffd10ad7f9f R14: 00007f92eeb0c300 R15: 0000000000022000 [ 385.870779] [ 385.870996] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF 05:31:38 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cc, &(0x7f0000000240)) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x0, 0x10, 0x8, 0x40, 0x0, 0x8, 0x1c, 0x9, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x100, 0x1, @perf_bp={&(0x7f0000000100)}, 0x40021, 0x5, 0x5, 0x0, 0x3, 0x9, 0x5, 0x0, 0x5, 0x0, 0xc89}, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0x2) r2 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x4, 0x1, 0x9, 0x0, 0x7, 0x30, 0xa, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfff, 0x2}, 0x2803, 0x7, 0x1ff, 0x6, 0x9, 0x5, 0x73d7, 0x0, 0xfae8, 0x0, 0x3f}, r3, 0x1, r2, 0x4) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) r4 = perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r4, 0x9, 0x7, 0xfffffffffffffffe) syz_mount_image$nfs4(0x0, &(0x7f0000000940)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={[{'['}, {'wfdno'}, {'trans=fd,'}, {'@$'}, {'\x00'}]}) 05:31:50 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) (fail_nth: 1) 05:31:50 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') 05:31:50 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, 0xffffffffffffffff, 0x0, 0xfffffdef) 05:31:50 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xf9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:31:50 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x0, &(0x7f0000000240)) 05:31:50 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cc, &(0x7f0000000240)) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x0, 0x10, 0x8, 0x40, 0x0, 0x8, 0x1c, 0x9, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x100, 0x1, @perf_bp={&(0x7f0000000100)}, 0x40021, 0x5, 0x5, 0x0, 0x3, 0x9, 0x5, 0x0, 0x5, 0x0, 0xc89}, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0x2) r2 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x4, 0x1, 0x9, 0x0, 0x7, 0x30, 0xa, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfff, 0x2}, 0x2803, 0x7, 0x1ff, 0x6, 0x9, 0x5, 0x73d7, 0x0, 0xfae8, 0x0, 0x3f}, r3, 0x1, r2, 0x4) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) r4 = perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r4, 0x9, 0x7, 0xfffffffffffffffe) syz_mount_image$nfs4(0x0, &(0x7f0000000940)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={[{'['}, {'wfdno'}, {'trans=fd,'}, {'@$'}, {'\x00'}]}) 05:31:50 executing program 5: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}], 0x0, &(0x7f0000000080)) 05:31:50 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) (fail_nth: 3) [ 397.356464] loop2: detected capacity change from 0 to 40 [ 397.358896] loop1: detected capacity change from 0 to 40 [ 397.387556] syz-executor.5: attempt to access beyond end of device [ 397.387556] loop5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 397.388040] loop4: detected capacity change from 0 to 40 [ 397.407026] FAT-fs (loop5): unable to read boot sector [ 397.416432] FAULT_INJECTION: forcing a failure. [ 397.416432] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 397.418025] CPU: 1 PID: 4912 Comm: syz-executor.0 Not tainted 6.4.0-next-20230703 #1 [ 397.419042] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 397.420102] Call Trace: [ 397.420467] [ 397.420786] dump_stack_lvl+0xc1/0xf0 [ 397.421338] should_fail_ex+0x4b4/0x5b0 [ 397.421893] __should_fail_alloc_page+0xe0/0x110 [ 397.422550] prepare_alloc_pages+0x178/0x500 [ 397.423167] ? __pfx___lock_acquire+0x10/0x10 [ 397.423794] __alloc_pages+0x149/0x480 [ 397.424347] ? __pfx___alloc_pages+0x10/0x10 [ 397.424966] ? mt_find+0x2a7/0x8b0 [ 397.425479] ? lock_release+0x1e3/0x680 [ 397.426045] alloc_pages+0x1a0/0x260 [ 397.426572] __pmd_alloc+0x3b/0x690 [ 397.427087] __handle_mm_fault+0xbd5/0x2980 [ 397.427673] ? __pfx_mt_find+0x10/0x10 [ 397.428224] ? __pfx___handle_mm_fault+0x10/0x10 [ 397.428908] ? find_vma+0x111/0x1b0 [ 397.429430] ? __pfx_find_vma+0x10/0x10 [ 397.429998] handle_mm_fault+0x1af/0xba0 [ 397.430560] do_user_addr_fault+0x74f/0x1480 [ 397.431181] exc_page_fault+0x9c/0x1a0 [ 397.431732] asm_exc_page_fault+0x26/0x30 [ 397.432294] RIP: 0033:0x7f82551aaa93 [ 397.432810] Code: 00 00 00 00 00 66 90 48 89 7c 24 f0 48 89 74 24 e8 48 89 54 24 e0 48 89 4c 24 d8 48 8b 4c 24 f0 48 8b 74 24 e8 4c 8b 44 24 e0 <8b> 81 0c 01 00 00 44 8b 89 08 01 00 00 48 8b 54 24 d8 c1 e0 04 8d [ 397.435138] RSP: 002b:00007f8252781178 EFLAGS: 00010212 [ 397.435843] RAX: 00007f82551aaa70 RBX: 00007f825531ef60 RCX: 0000000020ffb000 [ 397.436778] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020ffb000 [ 397.437707] RBP: 00007f82527811d0 R08: 0000000000000000 R09: 0000000000000000 [ 397.438657] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 397.439585] R13: 00007ffe10f41ddf R14: 00007f8252781300 R15: 0000000000022000 [ 397.440565] [ 397.443006] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF 05:31:50 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:31:50 executing program 5: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}], 0x0, &(0x7f0000000080)) [ 397.492978] loop2: detected capacity change from 0 to 40 05:31:50 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) 05:31:50 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) (fail_nth: 4) 05:31:50 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') [ 397.564595] syz-executor.5: attempt to access beyond end of device [ 397.564595] loop5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 397.566311] FAT-fs (loop5): unable to read boot sector [ 397.601320] FAULT_INJECTION: forcing a failure. [ 397.601320] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 397.602275] CPU: 0 PID: 4922 Comm: syz-executor.7 Not tainted 6.4.0-next-20230703 #1 [ 397.602977] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 397.603708] Call Trace: [ 397.603941] [ 397.604148] dump_stack_lvl+0xc1/0xf0 [ 397.604530] should_fail_ex+0x4b4/0x5b0 [ 397.604903] __should_fail_alloc_page+0xe0/0x110 [ 397.605341] prepare_alloc_pages+0x178/0x500 [ 397.605759] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 397.606250] __alloc_pages+0x149/0x480 [ 397.606614] ? __pfx___alloc_pages+0x10/0x10 [ 397.607018] ? lock_acquire+0x19a/0x4c0 [ 397.607393] ? lock_release+0x1e3/0x680 [ 397.607763] ? __pfx_lock_release+0x10/0x10 [ 397.608158] alloc_pages+0x1a0/0x260 [ 397.608513] pte_alloc_one+0x1a/0x200 [ 397.608869] __do_fault+0x306/0x480 [ 397.609213] ? __pmd_alloc+0x31a/0x690 [ 397.609568] __handle_mm_fault+0xfdb/0x2980 [ 397.609958] ? __pfx___handle_mm_fault+0x10/0x10 [ 397.610397] ? find_vma+0x111/0x1b0 [ 397.610743] ? __pfx_find_vma+0x10/0x10 [ 397.611118] handle_mm_fault+0x1af/0xba0 [ 397.611493] do_user_addr_fault+0x74f/0x1480 [ 397.611901] exc_page_fault+0x9c/0x1a0 [ 397.612258] asm_exc_page_fault+0x26/0x30 [ 397.612646] RIP: 0033:0x7f92f1535a93 [ 397.612980] Code: 00 00 00 00 00 66 90 48 89 7c 24 f0 48 89 74 24 e8 48 89 54 24 e0 48 89 4c 24 d8 48 8b 4c 24 f0 48 8b 74 24 e8 4c 8b 44 24 e0 <8b> 81 0c 01 00 00 44 8b 89 08 01 00 00 48 8b 54 24 d8 c1 e0 04 8d [ 397.614546] RSP: 002b:00007f92eeb0c178 EFLAGS: 00010212 [ 397.615015] RAX: 00007f92f1535a70 RBX: 00007f92f16a9f60 RCX: 0000000020ffb000 [ 397.615632] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020ffb000 [ 397.616245] RBP: 00007f92eeb0c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 397.616896] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 397.617516] R13: 00007ffd10ad7f9f R14: 00007f92eeb0c300 R15: 0000000000022000 [ 397.618149] [ 397.618501] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF 05:31:50 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:31:50 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cc, &(0x7f0000000240)) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x0, 0x10, 0x8, 0x40, 0x0, 0x8, 0x1c, 0x9, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x100, 0x1, @perf_bp={&(0x7f0000000100)}, 0x40021, 0x5, 0x5, 0x0, 0x3, 0x9, 0x5, 0x0, 0x5, 0x0, 0xc89}, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0x2) r2 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x4, 0x1, 0x9, 0x0, 0x7, 0x30, 0xa, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfff, 0x2}, 0x2803, 0x7, 0x1ff, 0x6, 0x9, 0x5, 0x73d7, 0x0, 0xfae8, 0x0, 0x3f}, r3, 0x1, r2, 0x4) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) r4 = perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r4, 0x9, 0x7, 0xfffffffffffffffe) syz_mount_image$nfs4(0x0, &(0x7f0000000940)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={[{'['}, {'wfdno'}, {'trans=fd,'}, {'@$'}, {'\x00'}]}) 05:31:50 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) (fail_nth: 2) [ 397.645241] loop4: detected capacity change from 0 to 40 [ 397.671476] loop1: detected capacity change from 0 to 40 [ 397.723071] FAULT_INJECTION: forcing a failure. [ 397.723071] name failslab, interval 1, probability 0, space 0, times 0 [ 397.724570] CPU: 1 PID: 4929 Comm: syz-executor.0 Not tainted 6.4.0-next-20230703 #1 [ 397.725570] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 397.726650] Call Trace: [ 397.727005] [ 397.727323] dump_stack_lvl+0xc1/0xf0 [ 397.727884] should_fail_ex+0x4b4/0x5b0 [ 397.728460] ? __pmd_alloc+0x98/0x690 [ 397.728981] should_failslab+0x9/0x20 [ 397.729506] kmem_cache_alloc+0x62/0x370 [ 397.730084] __pmd_alloc+0x98/0x690 [ 397.730592] __handle_mm_fault+0xbd5/0x2980 [ 397.731183] ? __pfx_mt_find+0x10/0x10 [ 397.731738] ? __pfx___handle_mm_fault+0x10/0x10 [ 397.732414] ? find_vma+0x111/0x1b0 [ 397.732944] ? __pfx_find_vma+0x10/0x10 [ 397.733514] handle_mm_fault+0x1af/0xba0 [ 397.734089] do_user_addr_fault+0x74f/0x1480 [ 397.734712] exc_page_fault+0x9c/0x1a0 [ 397.735259] asm_exc_page_fault+0x26/0x30 [ 397.735823] RIP: 0033:0x7f82551aaa93 [ 397.736345] Code: 00 00 00 00 00 66 90 48 89 7c 24 f0 48 89 74 24 e8 48 89 54 24 e0 48 89 4c 24 d8 48 8b 4c 24 f0 48 8b 74 24 e8 4c 8b 44 24 e0 <8b> 81 0c 01 00 00 44 8b 89 08 01 00 00 48 8b 54 24 d8 c1 e0 04 8d [ 397.738678] RSP: 002b:00007f8252781178 EFLAGS: 00010212 [ 397.739395] RAX: 00007f82551aaa70 RBX: 00007f825531ef60 RCX: 0000000020ffb000 [ 397.740338] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020ffb000 [ 397.741279] RBP: 00007f82527811d0 R08: 0000000000000000 R09: 0000000000000000 [ 397.742183] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 397.743130] R13: 00007ffe10f41ddf R14: 00007f8252781300 R15: 0000000000022000 [ 397.744118] [ 397.748027] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF 05:32:08 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) 05:32:08 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) 05:32:08 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xf9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:32:08 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:32:08 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) (fail_nth: 5) [ 415.589689] loop1: detected capacity change from 0 to 40 05:32:08 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) (fail_nth: 3) 05:32:08 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:32:08 executing program 5: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}], 0x0, &(0x7f0000000080)) [ 415.600998] FAULT_INJECTION: forcing a failure. [ 415.600998] name failslab, interval 1, probability 0, space 0, times 0 [ 415.602058] CPU: 0 PID: 4945 Comm: syz-executor.7 Not tainted 6.4.0-next-20230703 #1 [ 415.602783] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 415.603549] Call Trace: [ 415.603804] [ 415.604032] dump_stack_lvl+0xc1/0xf0 [ 415.604426] should_fail_ex+0x4b4/0x5b0 [ 415.604828] ? ptlock_alloc+0x21/0x70 [ 415.605204] should_failslab+0x9/0x20 [ 415.605572] kmem_cache_alloc+0x62/0x370 [ 415.605977] ptlock_alloc+0x21/0x70 [ 415.606340] pte_alloc_one+0x6c/0x200 [ 415.606723] __do_fault+0x306/0x480 [ 415.607090] ? __pmd_alloc+0x31a/0x690 [ 415.607473] __handle_mm_fault+0xfdb/0x2980 [ 415.607886] ? __pfx___handle_mm_fault+0x10/0x10 [ 415.608364] ? find_vma+0x111/0x1b0 [ 415.608735] ? __pfx_find_vma+0x10/0x10 [ 415.609140] handle_mm_fault+0x1af/0xba0 [ 415.609541] do_user_addr_fault+0x74f/0x1480 [ 415.609979] exc_page_fault+0x9c/0x1a0 [ 415.610367] asm_exc_page_fault+0x26/0x30 [ 415.610761] RIP: 0033:0x7f92f1535a93 [ 415.611111] Code: 00 00 00 00 00 66 90 48 89 7c 24 f0 48 89 74 24 e8 48 89 54 24 e0 48 89 4c 24 d8 48 8b 4c 24 f0 48 8b 74 24 e8 4c 8b 44 24 e0 <8b> 81 0c 01 00 00 44 8b 89 08 01 00 00 48 8b 54 24 d8 c1 e0 04 8d [ 415.612762] RSP: 002b:00007f92eeb0c178 EFLAGS: 00010212 [ 415.613260] RAX: 00007f92f1535a70 RBX: 00007f92f16a9f60 RCX: 0000000020ffb000 [ 415.613909] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020ffb000 [ 415.614550] RBP: 00007f92eeb0c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 415.615200] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 415.615852] R13: 00007ffd10ad7f9f R14: 00007f92eeb0c300 R15: 0000000000022000 [ 415.616522] [ 415.616855] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 415.622335] loop3: detected capacity change from 0 to 40 [ 415.630624] loop4: detected capacity change from 0 to 40 [ 415.661546] syz-executor.5: attempt to access beyond end of device [ 415.661546] loop5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 415.665188] loop2: detected capacity change from 0 to 40 [ 415.667786] FAT-fs (loop5): unable to read boot sector 05:32:08 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) 05:32:08 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) 05:32:08 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) (fail_nth: 4) 05:32:08 executing program 5: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000080)) 05:32:08 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) (fail_nth: 6) [ 415.825584] loop4: detected capacity change from 0 to 40 [ 415.832700] FAULT_INJECTION: forcing a failure. [ 415.832700] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 415.833675] CPU: 0 PID: 4959 Comm: syz-executor.0 Not tainted 6.4.0-next-20230703 #1 [ 415.834304] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 415.834968] Call Trace: [ 415.835189] [ 415.835377] dump_stack_lvl+0xc1/0xf0 [ 415.835714] should_fail_ex+0x4b4/0x5b0 [ 415.836058] __should_fail_alloc_page+0xe0/0x110 [ 415.836475] prepare_alloc_pages+0x178/0x500 [ 415.836870] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 415.837320] __alloc_pages+0x149/0x480 [ 415.837665] ? __pfx___alloc_pages+0x10/0x10 [ 415.838057] ? lock_acquire+0x19a/0x4c0 [ 415.838409] ? lock_release+0x1e3/0x680 [ 415.838749] ? __pfx_lock_release+0x10/0x10 [ 415.839118] alloc_pages+0x1a0/0x260 [ 415.839443] pte_alloc_one+0x1a/0x200 [ 415.839778] __do_fault+0x306/0x480 [ 415.840107] ? __pmd_alloc+0x31a/0x690 [ 415.840437] __handle_mm_fault+0xfdb/0x2980 [ 415.840816] ? __pfx___handle_mm_fault+0x10/0x10 [ 415.841226] ? find_vma+0x111/0x1b0 [ 415.841549] ? __pfx_find_vma+0x10/0x10 [ 415.841896] handle_mm_fault+0x1af/0xba0 [ 415.842238] do_user_addr_fault+0x74f/0x1480 [ 415.842618] exc_page_fault+0x9c/0x1a0 [ 415.842950] asm_exc_page_fault+0x26/0x30 [ 415.843289] RIP: 0033:0x7f82551aaa93 [ 415.843604] Code: 00 00 00 00 00 66 90 48 89 7c 24 f0 48 89 74 24 e8 48 89 54 24 e0 48 89 4c 24 d8 48 8b 4c 24 f0 48 8b 74 24 e8 4c 8b 44 24 e0 <8b> 81 0c 01 00 00 44 8b 89 08 01 00 00 48 8b 54 24 d8 c1 e0 04 8d [ 415.845040] RSP: 002b:00007f8252781178 EFLAGS: 00010212 [ 415.845471] RAX: 00007f82551aaa70 RBX: 00007f825531ef60 RCX: 0000000020ffb000 [ 415.846037] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020ffb000 [ 415.846593] RBP: 00007f82527811d0 R08: 0000000000000000 R09: 0000000000000000 [ 415.847156] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 415.847718] R13: 00007ffe10f41ddf R14: 00007f8252781300 R15: 0000000000022000 [ 415.848300] [ 415.848621] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF 05:32:08 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) [ 416.216560] syz-executor.1: attempt to access beyond end of device [ 416.216560] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 416.218273] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 416.244836] syz-executor.5: attempt to access beyond end of device [ 416.244836] loop5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 416.245760] FAT-fs (loop5): unable to read boot sector [ 416.276138] loop4: detected capacity change from 0 to 40 05:32:22 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) (fail_nth: 7) 05:32:22 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) 05:32:22 executing program 5: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000080)) 05:32:22 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) (fail_nth: 5) 05:32:22 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') 05:32:22 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:32:22 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) [ 429.875015] syz-executor.5: attempt to access beyond end of device [ 429.875015] loop5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 429.891678] FAULT_INJECTION: forcing a failure. [ 429.891678] name failslab, interval 1, probability 0, space 0, times 0 [ 429.892528] CPU: 0 PID: 4985 Comm: syz-executor.0 Not tainted 6.4.0-next-20230703 #1 [ 429.893064] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 429.893628] Call Trace: [ 429.893815] [ 429.893980] dump_stack_lvl+0xc1/0xf0 05:32:22 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) [ 429.894268] should_fail_ex+0x4b4/0x5b0 [ 429.894734] ? ptlock_alloc+0x21/0x70 [ 429.895004] should_failslab+0x9/0x20 [ 429.895276] kmem_cache_alloc+0x62/0x370 [ 429.895576] ptlock_alloc+0x21/0x70 [ 429.895829] pte_alloc_one+0x6c/0x200 [ 429.896104] __do_fault+0x306/0x480 [ 429.896361] ? __pmd_alloc+0x31a/0x690 [ 429.896633] __handle_mm_fault+0xfdb/0x2980 [ 429.896953] ? __pfx___handle_mm_fault+0x10/0x10 [ 429.897299] ? find_vma+0x111/0x1b0 [ 429.897564] ? __pfx_find_vma+0x10/0x10 [ 429.897857] handle_mm_fault+0x1af/0xba0 [ 429.898142] do_user_addr_fault+0x74f/0x1480 [ 429.898461] exc_page_fault+0x9c/0x1a0 [ 429.898748] asm_exc_page_fault+0x26/0x30 [ 429.899040] RIP: 0033:0x7f82551aaa93 [ 429.899294] Code: 00 00 00 00 00 66 90 48 89 7c 24 f0 48 89 74 24 e8 48 89 54 24 e0 48 89 4c 24 d8 48 8b 4c 24 f0 48 8b 74 24 e8 4c 8b 44 24 e0 <8b> 81 0c 01 00 00 44 8b 89 08 01 00 00 48 8b 54 24 d8 c1 e0 04 8d [ 429.900493] RSP: 002b:00007f8252781178 EFLAGS: 00010212 [ 429.900863] RAX: 00007f82551aaa70 RBX: 00007f825531ef60 RCX: 0000000020ffb000 [ 429.901344] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020ffb000 [ 429.901829] RBP: 00007f82527811d0 R08: 0000000000000000 R09: 0000000000000000 [ 429.902313] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 429.902797] R13: 00007ffe10f41ddf R14: 00007f8252781300 R15: 0000000000022000 [ 429.903291] [ 429.903594] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 429.907919] loop4: detected capacity change from 0 to 40 [ 429.909463] loop1: detected capacity change from 0 to 40 [ 429.910836] FAT-fs (loop5): unable to read boot sector [ 429.942908] FAULT_INJECTION: forcing a failure. [ 429.942908] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 429.944862] CPU: 1 PID: 4989 Comm: syz-executor.7 Not tainted 6.4.0-next-20230703 #1 [ 429.945900] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 429.946959] Call Trace: [ 429.947325] [ 429.947641] dump_stack_lvl+0xc1/0xf0 [ 429.948211] should_fail_ex+0x4b4/0x5b0 [ 429.948783] __should_fail_alloc_page+0xe0/0x110 [ 429.949465] prepare_alloc_pages+0x178/0x500 [ 429.950095] __alloc_pages+0x149/0x480 [ 429.950670] ? __pfx___alloc_pages+0x10/0x10 [ 429.951322] ? __filemap_get_folio+0x1d3/0x8d0 [ 429.951977] alloc_pages+0x1a0/0x260 [ 429.952533] secretmem_fault+0x18a/0x840 [ 429.953169] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 429.953920] ? pte_alloc_one+0x194/0x200 [ 429.954530] __do_fault+0x10d/0x480 [ 429.955067] ? __pmd_alloc+0x31a/0x690 [ 429.955641] __handle_mm_fault+0xfdb/0x2980 [ 429.956267] ? __pfx___handle_mm_fault+0x10/0x10 [ 429.956965] ? find_vma+0x111/0x1b0 [ 429.957524] ? __pfx_find_vma+0x10/0x10 [ 429.958112] handle_mm_fault+0x1af/0xba0 [ 429.958726] do_user_addr_fault+0x74f/0x1480 [ 429.959406] exc_page_fault+0x9c/0x1a0 [ 429.959989] asm_exc_page_fault+0x26/0x30 [ 429.960748] RIP: 0033:0x7f92f1535a93 [ 429.961383] Code: 00 00 00 00 00 66 90 48 89 7c 24 f0 48 89 74 24 e8 48 89 54 24 e0 48 89 4c 24 d8 48 8b 4c 24 f0 48 8b 74 24 e8 4c 8b 44 24 e0 <8b> 81 0c 01 00 00 44 8b 89 08 01 00 00 48 8b 54 24 d8 c1 e0 04 8d [ 429.963758] RSP: 002b:00007f92eeb0c178 EFLAGS: 00010212 [ 429.964479] RAX: 00007f92f1535a70 RBX: 00007f92f16a9f60 RCX: 0000000020ffb000 [ 429.965445] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020ffb000 [ 429.966401] RBP: 00007f92eeb0c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 429.967366] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 429.968317] R13: 00007ffd10ad7f9f R14: 00007f92eeb0c300 R15: 0000000000022000 [ 429.969307] [ 429.969745] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 429.995898] loop3: detected capacity change from 0 to 40 [ 430.000052] loop2: detected capacity change from 0 to 40 05:32:22 executing program 5: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000080)) 05:32:22 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) 05:32:22 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) 05:32:22 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) (fail_nth: 1) [ 430.093913] loop4: detected capacity change from 0 to 40 05:32:22 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) (fail_nth: 8) [ 430.163353] syz-executor.5: attempt to access beyond end of device [ 430.163353] loop5: rw=0, sector=0, nr_sectors = 1 limit=0 05:32:22 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) (fail_nth: 6) [ 430.173560] FAT-fs (loop5): unable to read boot sector 05:32:22 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cc, 0x0) [ 430.211584] FAULT_INJECTION: forcing a failure. [ 430.211584] name failslab, interval 1, probability 0, space 0, times 0 [ 430.213475] CPU: 1 PID: 5002 Comm: syz-executor.3 Not tainted 6.4.0-next-20230703 #1 [ 430.214508] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 430.215587] Call Trace: [ 430.215944] [ 430.216281] dump_stack_lvl+0xc1/0xf0 [ 430.216833] should_fail_ex+0x4b4/0x5b0 [ 430.217398] ? __alloc_skb+0x28c/0x330 [ 430.217930] should_failslab+0x9/0x20 [ 430.218463] kmem_cache_alloc_node+0x65/0x3b0 [ 430.219089] __alloc_skb+0x28c/0x330 [ 430.219619] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 430.220367] ? __pfx___alloc_skb+0x10/0x10 [ 430.220965] ? __get_task_comm+0x41/0x50 [ 430.221554] create_monitor_ctrl_open+0x170/0x780 [ 430.222232] ? __pfx_create_monitor_ctrl_open+0x10/0x10 [ 430.222943] ? security_capable+0x99/0xc0 [ 430.223580] hci_sock_ioctl+0x45c/0x8d0 [ 430.224144] ? __pfx_hci_sock_ioctl+0x10/0x10 [ 430.224788] ? __pfx___lock_acquire+0x10/0x10 [ 430.225436] sock_do_ioctl+0xd2/0x240 [ 430.225982] ? __pfx_sock_do_ioctl+0x10/0x10 [ 430.226614] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 430.227248] ? ioctl_has_perm.constprop.0.isra.0+0x29b/0x430 [ 430.228022] ? ioctl_has_perm.constprop.0.isra.0+0x2a4/0x430 [ 430.228825] ? expand_files+0x718/0x8e0 [ 430.229394] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 430.230243] sock_ioctl+0x424/0x670 [ 430.230747] ? __pfx_sock_ioctl+0x10/0x10 [ 430.231358] ? selinux_file_ioctl+0xba/0x270 [ 430.231982] ? __pfx_sock_ioctl+0x10/0x10 [ 430.232571] __x64_sys_ioctl+0x1a4/0x210 [ 430.233189] do_syscall_64+0x3f/0x90 [ 430.233720] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 430.234465] RIP: 0033:0x7f34ee85ab19 [ 430.234962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 430.237423] RSP: 002b:00007f34ebdd0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 430.238455] RAX: ffffffffffffffda RBX: 00007f34ee96df60 RCX: 00007f34ee85ab19 [ 430.239444] RDX: 0000000000000000 RSI: 00000000400448cc RDI: 0000000000000004 [ 430.240418] RBP: 00007f34ebdd01d0 R08: 0000000000000000 R09: 0000000000000000 [ 430.241417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.242384] R13: 00007ffcada2c8df R14: 00007f34ebdd0300 R15: 0000000000022000 [ 430.243392] 05:32:22 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) 05:32:22 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) (fail_nth: 7) [ 430.350894] FAULT_INJECTION: forcing a failure. [ 430.350894] name failslab, interval 1, probability 0, space 0, times 0 [ 430.351826] CPU: 0 PID: 5007 Comm: syz-executor.7 Not tainted 6.4.0-next-20230703 #1 [ 430.352359] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 430.352921] Call Trace: [ 430.353113] [ 430.353274] dump_stack_lvl+0x91/0xf0 [ 430.353557] should_fail_ex+0x4b4/0x5b0 [ 430.353850] ? prepare_signal+0x13a/0xca0 [ 430.354171] ? __sigqueue_alloc+0x252/0x6d0 [ 430.354493] should_failslab+0x9/0x20 [ 430.354775] kmem_cache_alloc+0x62/0x370 [ 430.355072] __sigqueue_alloc+0x252/0x6d0 [ 430.355368] __send_signal_locked+0x72e/0x1060 [ 430.355692] ? send_signal_locked+0x41c/0x820 [ 430.356016] force_sig_info_to_task+0x2be/0x430 [ 430.356353] force_sig_fault+0xb6/0xf0 [ 430.356631] ? __pfx_force_sig_fault+0x10/0x10 [ 430.356970] ? __pfx_is_prefetch.constprop.0+0x10/0x10 [ 430.357349] ? __pfx___up_read+0x10/0x10 [ 430.357661] __bad_area_nosemaphore+0x327/0x640 [ 430.358005] ? lock_mm_and_find_vma+0xc1/0x780 [ 430.358329] do_user_addr_fault+0x80d/0x1480 [ 430.358649] exc_page_fault+0x9c/0x1a0 [ 430.358933] asm_exc_page_fault+0x26/0x30 [ 430.359258] RIP: 0033:0x7f92f1535abd [ 430.359536] Code: 8b 81 0c 01 00 00 44 8b 89 08 01 00 00 48 8b 54 24 d8 c1 e0 04 8d b8 7f 01 00 00 83 e7 c0 45 85 c9 74 07 89 d0 31 d2 41 f7 f1 41 0f 6f 00 89 d0 c1 e0 06 48 01 c6 0f 11 06 f3 41 0f 6f 48 10 [ 430.360885] RSP: 002b:00007f92eeb0c178 EFLAGS: 00010246 [ 430.361282] RAX: 0000000000000000 RBX: 00007f92f16a9f60 RCX: 0000000020ffb000 [ 430.361806] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000140 [ 430.362323] RBP: 00007f92eeb0c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 430.362837] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 430.363370] R13: 00007ffd10ad7f9f R14: 00007f92eeb0c300 R15: 0000000000022000 [ 430.363911] [ 430.373692] loop4: detected capacity change from 0 to 40 [ 430.377112] FAULT_INJECTION: forcing a failure. [ 430.377112] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 430.377980] CPU: 0 PID: 5013 Comm: syz-executor.0 Not tainted 6.4.0-next-20230703 #1 [ 430.378544] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 430.379134] Call Trace: [ 430.379324] [ 430.379496] dump_stack_lvl+0xc1/0xf0 [ 430.379788] should_fail_ex+0x4b4/0x5b0 [ 430.380082] __should_fail_alloc_page+0xe0/0x110 [ 430.380441] prepare_alloc_pages+0x178/0x500 [ 430.380795] __alloc_pages+0x149/0x480 [ 430.381094] ? __pfx___alloc_pages+0x10/0x10 [ 430.381433] ? __filemap_get_folio+0x1d3/0x8d0 [ 430.381786] alloc_pages+0x1a0/0x260 [ 430.382071] secretmem_fault+0x18a/0x840 [ 430.382378] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 430.382757] ? pte_alloc_one+0x194/0x200 [ 430.383062] __do_fault+0x10d/0x480 [ 430.383337] ? __pmd_alloc+0x31a/0x690 [ 430.383624] __handle_mm_fault+0xfdb/0x2980 [ 430.383938] ? __pfx___handle_mm_fault+0x10/0x10 [ 430.384309] ? find_vma+0x111/0x1b0 [ 430.384583] ? __pfx_find_vma+0x10/0x10 [ 430.384888] handle_mm_fault+0x1af/0xba0 [ 430.385193] do_user_addr_fault+0x74f/0x1480 [ 430.385533] exc_page_fault+0x9c/0x1a0 [ 430.385817] asm_exc_page_fault+0x26/0x30 [ 430.386123] RIP: 0033:0x7f82551aaa93 [ 430.386389] Code: 00 00 00 00 00 66 90 48 89 7c 24 f0 48 89 74 24 e8 48 89 54 24 e0 48 89 4c 24 d8 48 8b 4c 24 f0 48 8b 74 24 e8 4c 8b 44 24 e0 <8b> 81 0c 01 00 00 44 8b 89 08 01 00 00 48 8b 54 24 d8 c1 e0 04 8d [ 430.387671] RSP: 002b:00007f8252781178 EFLAGS: 00010212 [ 430.388070] RAX: 00007f82551aaa70 RBX: 00007f825531ef60 RCX: 0000000020ffb000 [ 430.388593] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020ffb000 [ 430.389129] RBP: 00007f82527811d0 R08: 0000000000000000 R09: 0000000000000000 [ 430.389644] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 430.390164] R13: 00007ffe10f41ddf R14: 00007f8252781300 R15: 0000000000022000 [ 430.390700] [ 430.390919] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF 05:32:34 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) (fail_nth: 2) 05:32:34 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cc, 0x0) 05:32:34 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:32:34 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:32:34 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) (fail_nth: 8) 05:32:34 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) 05:32:34 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) (fail_nth: 9) 05:32:34 executing program 5: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) [ 442.252990] loop4: detected capacity change from 0 to 40 [ 442.274624] FAULT_INJECTION: forcing a failure. [ 442.274624] name failslab, interval 1, probability 0, space 0, times 0 [ 442.276033] CPU: 1 PID: 5022 Comm: syz-executor.0 Not tainted 6.4.0-next-20230703 #1 [ 442.277150] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 442.278153] Call Trace: [ 442.278476] [ 442.278767] dump_stack_lvl+0x91/0xf0 [ 442.279279] should_fail_ex+0x4b4/0x5b0 [ 442.279788] ? prepare_signal+0x13a/0xca0 [ 442.280337] ? __sigqueue_alloc+0x252/0x6d0 [ 442.280894] should_failslab+0x9/0x20 [ 442.281380] kmem_cache_alloc+0x62/0x370 [ 442.281909] __sigqueue_alloc+0x252/0x6d0 [ 442.282458] __send_signal_locked+0x72e/0x1060 [ 442.283050] ? send_signal_locked+0x41c/0x820 [ 442.283628] force_sig_info_to_task+0x2be/0x430 [ 442.284233] force_sig_fault+0xb6/0xf0 05:32:35 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) (fail_nth: 10) [ 442.284736] ? __pfx_force_sig_fault+0x10/0x10 [ 442.285443] ? __pfx_is_prefetch.constprop.0+0x10/0x10 [ 442.286115] ? __pfx___up_read+0x10/0x10 [ 442.286642] __bad_area_nosemaphore+0x327/0x640 [ 442.287222] ? lock_mm_and_find_vma+0xc1/0x780 [ 442.287799] do_user_addr_fault+0x80d/0x1480 [ 442.288364] exc_page_fault+0x9c/0x1a0 [ 442.288864] asm_exc_page_fault+0x26/0x30 [ 442.289398] RIP: 0033:0x7f82551aaabd [ 442.289859] Code: 8b 81 0c 01 00 00 44 8b 89 08 01 00 00 48 8b 54 24 d8 c1 e0 04 8d b8 7f 01 00 00 83 e7 c0 45 85 c9 74 07 89 d0 31 d2 41 f7 f1 41 0f 6f 00 89 d0 c1 e0 06 48 01 c6 0f 11 06 f3 41 0f 6f 48 10 [ 442.292010] RSP: 002b:00007f8252781178 EFLAGS: 00010246 [ 442.292670] RAX: 0000000000000000 RBX: 00007f825531ef60 RCX: 0000000020ffb000 [ 442.293542] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000140 05:32:35 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) [ 442.294402] RBP: 00007f82527811d0 R08: 0000000000000000 R09: 0000000000000000 [ 442.295381] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 442.296254] R13: 00007ffe10f41ddf R14: 00007f8252781300 R15: 0000000000022000 [ 442.297148] [ 442.329134] loop1: detected capacity change from 0 to 40 [ 442.330806] loop5: detected capacity change from 0 to 10 05:32:35 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cc, 0x0) [ 442.345327] FAT-fs (loop5): bogus number of reserved sectors [ 442.345949] FAT-fs (loop5): Can't find a valid FAT filesystem [ 442.373376] loop4: detected capacity change from 0 to 40 05:32:35 executing program 5: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:32:35 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) ioctl$sock_bt_hci(r0, 0x400448cc, 0x0) 05:32:35 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) (fail_nth: 3) [ 442.463594] loop5: detected capacity change from 0 to 10 [ 442.485045] FAT-fs (loop5): bogus number of reserved sectors [ 442.485456] FAT-fs (loop5): Can't find a valid FAT filesystem 05:32:35 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) ioctl$sock_bt_hci(r0, 0x400448cc, 0x0) 05:32:35 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) (fail_nth: 9) 05:32:35 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) (fail_nth: 11) 05:32:35 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) [ 442.589935] FAULT_INJECTION: forcing a failure. [ 442.589935] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 442.591479] CPU: 1 PID: 5054 Comm: syz-executor.7 Not tainted 6.4.0-next-20230703 #1 [ 442.592437] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 442.593448] Call Trace: [ 442.593787] [ 442.594087] dump_stack_lvl+0xc1/0xf0 [ 442.594603] should_fail_ex+0x4b4/0x5b0 [ 442.595124] _copy_to_user+0x30/0xc0 [ 442.595616] copy_siginfo_to_user+0x25/0xc0 [ 442.596175] x64_setup_rt_frame+0x887/0x1010 [ 442.596755] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 442.597385] ? force_sig_fault+0xb6/0xf0 [ 442.597907] ? __pfx_force_sig_fault+0x10/0x10 [ 442.598497] ? __pfx_is_prefetch.constprop.0+0x10/0x10 [ 442.599163] arch_do_signal_or_restart+0x484/0x590 [ 442.599779] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 442.600465] ? lock_mm_and_find_vma+0xc1/0x780 [ 442.601098] exit_to_user_mode_prepare+0xeb/0x180 [ 442.601722] irqentry_exit_to_user_mode+0x9/0x30 [ 442.602362] exc_page_fault+0xc8/0x1a0 [ 442.602894] asm_exc_page_fault+0x26/0x30 [ 442.603442] RIP: 0033:0x7f92f1535abd [ 442.603940] Code: 8b 81 0c 01 00 00 44 8b 89 08 01 00 00 48 8b 54 24 d8 c1 e0 04 8d b8 7f 01 00 00 83 e7 c0 45 85 c9 74 07 89 d0 31 d2 41 f7 f1 41 0f 6f 00 89 d0 c1 e0 06 48 01 c6 0f 11 06 f3 41 0f 6f 48 10 [ 442.606231] RSP: 002b:00007f92eeb0c178 EFLAGS: 00010246 [ 442.606913] RAX: 0000000000000000 RBX: 00007f92f16a9f60 RCX: 0000000020ffb000 [ 442.607830] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000140 [ 442.608753] RBP: 00007f92eeb0c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 442.609680] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000002 [ 442.610578] R13: 00007ffd10ad7f9f R14: 00007f92eeb0c300 R15: 0000000000022000 [ 442.611506] [ 442.980931] syz-executor.1: attempt to access beyond end of device [ 442.980931] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 442.982390] Buffer I/O error on dev loop1, logical block 10, lost async page write 05:32:49 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef) 05:32:49 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:32:49 executing program 5: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:32:49 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) (fail_nth: 10) 05:32:49 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) (fail_nth: 4) [ 457.141382] loop1: detected capacity change from 0 to 40 05:32:49 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) [ 457.156097] loop5: detected capacity change from 0 to 10 05:32:49 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) ioctl$sock_bt_hci(r0, 0x400448cc, 0x0) 05:32:49 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) [ 457.163599] FAT-fs (loop5): bogus number of reserved sectors [ 457.164037] FAT-fs (loop5): Can't find a valid FAT filesystem [ 457.190571] loop4: detected capacity change from 0 to 40 05:32:49 executing program 5: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:32:49 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) [ 457.265032] loop5: detected capacity change from 0 to 10 05:32:49 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef) [ 457.272467] FAT-fs (loop5): bogus number of reserved sectors [ 457.273090] FAT-fs (loop5): Can't find a valid FAT filesystem 05:32:49 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) 05:32:50 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) (fail_nth: 11) 05:32:50 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) (fail_nth: 5) 05:32:50 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) [ 457.305497] loop4: detected capacity change from 0 to 40 05:32:50 executing program 5: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) [ 457.360619] loop1: detected capacity change from 0 to 40 [ 457.367398] FAULT_INJECTION: forcing a failure. [ 457.367398] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 457.368508] CPU: 0 PID: 5092 Comm: syz-executor.3 Not tainted 6.4.0-next-20230703 #1 [ 457.369044] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 457.369771] Call Trace: [ 457.369987] [ 457.370188] dump_stack_lvl+0xc1/0xf0 [ 457.370525] should_fail_ex+0x4b4/0x5b0 [ 457.370829] _copy_to_user+0x30/0xc0 [ 457.371108] simple_read_from_buffer+0xd0/0x170 [ 457.371466] proc_fail_nth_read+0x1a2/0x240 [ 457.371786] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 457.372142] ? security_file_permission+0xb5/0xe0 [ 457.372507] vfs_read+0x1de/0x8f0 [ 457.372761] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 457.373132] ? __pfx_vfs_read+0x10/0x10 [ 457.373423] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 457.373873] ? __fget_files+0x267/0x480 [ 457.374199] ksys_read+0x122/0x250 [ 457.374459] ? __pfx_ksys_read+0x10/0x10 [ 457.374764] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 457.375155] do_syscall_64+0x3f/0x90 [ 457.375444] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 457.375826] RIP: 0033:0x7f34ee80d69c [ 457.376090] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 457.377326] RSP: 002b:00007f34ebdd0170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 457.377866] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f34ee80d69c [ 457.378356] RDX: 000000000000000f RSI: 00007f34ebdd01e0 RDI: 0000000000000006 [ 457.378875] RBP: 00007f34ebdd01d0 R08: 0000000000000000 R09: 0000000000000000 [ 457.379407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.379945] R13: 00007ffcada2c8df R14: 00007f34ebdd0300 R15: 0000000000022000 [ 457.380508] [ 457.407033] FAULT_INJECTION: forcing a failure. [ 457.407033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 457.408115] CPU: 0 PID: 5094 Comm: syz-executor.0 Not tainted 6.4.0-next-20230703 #1 [ 457.408729] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 457.409314] Call Trace: [ 457.409503] [ 457.409672] dump_stack_lvl+0xc1/0xf0 [ 457.409961] should_fail_ex+0x4b4/0x5b0 [ 457.410248] _copy_to_user+0x30/0xc0 [ 457.410523] copy_siginfo_to_user+0x25/0xc0 [ 457.410843] x64_setup_rt_frame+0x887/0x1010 [ 457.411172] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 457.411521] ? force_sig_fault+0xb6/0xf0 [ 457.411819] ? __pfx_force_sig_fault+0x10/0x10 [ 457.412148] ? __pfx_is_prefetch.constprop.0+0x10/0x10 [ 457.412521] arch_do_signal_or_restart+0x484/0x590 [ 457.412891] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 457.413280] ? lock_mm_and_find_vma+0xc1/0x780 [ 457.413614] exit_to_user_mode_prepare+0xeb/0x180 [ 457.413975] irqentry_exit_to_user_mode+0x9/0x30 [ 457.414315] exc_page_fault+0xc8/0x1a0 [ 457.414610] asm_exc_page_fault+0x26/0x30 [ 457.414907] RIP: 0033:0x7f82551aaabd [ 457.415165] Code: 8b 81 0c 01 00 00 44 8b 89 08 01 00 00 48 8b 54 24 d8 c1 e0 04 8d b8 7f 01 00 00 83 e7 c0 45 85 c9 74 07 89 d0 31 d2 41 f7 f1 41 0f 6f 00 89 d0 c1 e0 06 48 01 c6 0f 11 06 f3 41 0f 6f 48 10 [ 457.416409] RSP: 002b:00007f8252781178 EFLAGS: 00010246 [ 457.416802] RAX: 0000000000000000 RBX: 00007f825531ef60 RCX: 0000000020ffb000 [ 457.417327] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000140 [ 457.417833] RBP: 00007f82527811d0 R08: 0000000000000000 R09: 0000000000000000 [ 457.418339] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000002 [ 457.418869] R13: 00007ffe10f41ddf R14: 00007f8252781300 R15: 0000000000022000 [ 457.419408] [ 457.439972] loop5: detected capacity change from 0 to 10 [ 457.448054] FAT-fs (loop5): bogus number of reserved sectors [ 457.448489] FAT-fs (loop5): Can't find a valid FAT filesystem 05:33:02 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) 05:33:02 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) 05:33:02 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:33:02 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) 05:33:02 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef) 05:33:02 executing program 5: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:33:02 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:33:02 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x2) [ 470.179549] loop4: detected capacity change from 0 to 40 [ 470.183435] loop5: detected capacity change from 0 to 10 [ 470.188503] loop1: detected capacity change from 0 to 40 05:33:02 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:33:02 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x2, 0x0) [ 470.215238] FAT-fs (loop5): bogus number of reserved sectors [ 470.216023] FAT-fs (loop5): Can't find a valid FAT filesystem 05:33:02 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) 05:33:03 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x3) 05:33:03 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) 05:33:03 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, 0xffffffffffffffff, 0x0, 0xfffffdef) [ 470.377145] loop1: detected capacity change from 0 to 40 05:33:03 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x2) 05:33:03 executing program 5: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:33:03 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x4b47, 0x0) [ 470.507760] loop4: detected capacity change from 0 to 40 [ 470.605878] loop5: detected capacity change from 0 to 10 [ 470.607441] FAT-fs (loop5): bogus number of reserved sectors [ 470.607876] FAT-fs (loop5): Can't find a valid FAT filesystem [ 471.216657] I/O error, dev loop5, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 471.217512] Buffer I/O error on dev loop5, logical block 1, async page read [ 471.219125] systemd-udevd: attempt to access beyond end of device [ 471.219125] loop5: rw=0, sector=2, nr_sectors = 1 limit=0 [ 471.220085] Buffer I/O error on dev loop5, logical block 2, async page read [ 471.220708] systemd-udevd: attempt to access beyond end of device [ 471.220708] loop5: rw=0, sector=3, nr_sectors = 1 limit=0 [ 471.221584] Buffer I/O error on dev loop5, logical block 3, async page read [ 471.235847] systemd-udevd: attempt to access beyond end of device [ 471.235847] loop5: rw=0, sector=4, nr_sectors = 1 limit=0 [ 471.236665] Buffer I/O error on dev loop5, logical block 4, async page read [ 471.238178] systemd-udevd: attempt to access beyond end of device [ 471.238178] loop5: rw=0, sector=5, nr_sectors = 1 limit=0 [ 471.239233] Buffer I/O error on dev loop5, logical block 5, async page read [ 471.240451] systemd-udevd: attempt to access beyond end of device [ 471.240451] loop5: rw=0, sector=6, nr_sectors = 1 limit=0 [ 471.241310] Buffer I/O error on dev loop5, logical block 6, async page read [ 471.245425] systemd-udevd: attempt to access beyond end of device [ 471.245425] loop5: rw=0, sector=7, nr_sectors = 1 limit=0 [ 471.246274] Buffer I/O error on dev loop5, logical block 7, async page read 05:33:14 executing program 5: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:33:14 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:33:14 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) 05:33:14 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x4b49, 0x0) 05:33:14 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x8) 05:33:14 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, 0xffffffffffffffff, 0x0, 0xfffffdef) 05:33:14 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x3) 05:33:14 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) [ 482.082774] loop1: detected capacity change from 0 to 40 [ 482.123163] loop5: detected capacity change from 0 to 10 [ 482.126933] loop4: detected capacity change from 0 to 40 [ 482.129206] loop2: detected capacity change from 0 to 40 05:33:14 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0xb) 05:33:14 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) 05:33:14 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x8) [ 482.135770] FAT-fs (loop5): bogus number of reserved sectors [ 482.136286] FAT-fs (loop5): Can't find a valid FAT filesystem 05:33:14 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x541b, 0x0) [ 482.505460] syz-executor.2: attempt to access beyond end of device [ 482.505460] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 482.506919] Buffer I/O error on dev loop2, logical block 10, lost async page write 05:33:27 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0xb) 05:33:27 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, 0xffffffffffffffff, 0x0, 0xfffffdef) 05:33:27 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 05:33:27 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x10) 05:33:27 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) [ 494.551545] loop2: detected capacity change from 0 to 40 05:33:27 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x5421, 0x0) 05:33:27 executing program 5: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:33:27 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) [ 494.556416] loop1: detected capacity change from 0 to 40 [ 494.607694] loop5: detected capacity change from 0 to 10 [ 494.614347] loop4: detected capacity change from 0 to 40 [ 494.627768] FAT-fs (loop5): bogus number of reserved sectors [ 494.628548] FAT-fs (loop5): Can't find a valid FAT filesystem 05:33:27 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x5450, 0x0) 05:33:27 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x7e) 05:33:27 executing program 6: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) 05:33:27 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x10) 05:33:27 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) 05:33:27 executing program 5: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400", 0xc}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:33:27 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x5451, 0x0) 05:33:27 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) [ 494.826930] loop4: detected capacity change from 0 to 40 [ 494.833145] loop5: detected capacity change from 0 to 10 [ 494.846991] FAT-fs (loop5): bogus number of reserved sectors [ 494.847792] FAT-fs (loop5): Can't find a valid FAT filesystem [ 494.900954] loop1: detected capacity change from 0 to 40 05:33:39 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x7e) 05:33:39 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:33:39 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x5452, 0x0) 05:33:39 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 05:33:39 executing program 6: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) 05:33:39 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) 05:33:39 executing program 5: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400", 0xc}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:33:39 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0xaa) [ 506.719857] loop5: detected capacity change from 0 to 10 [ 506.722526] loop4: detected capacity change from 0 to 40 [ 506.725690] loop2: detected capacity change from 0 to 40 [ 506.736929] FAT-fs (loop5): bogus number of reserved sectors [ 506.737119] loop1: detected capacity change from 0 to 40 [ 506.737373] FAT-fs (loop5): Can't find a valid FAT filesystem 05:33:39 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0xb3) 05:33:39 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x113) 05:33:39 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x5460, 0x0) 05:33:39 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) 05:33:39 executing program 5: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400", 0xc}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:33:39 executing program 6: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) [ 506.844060] loop4: detected capacity change from 0 to 40 [ 506.845765] loop5: detected capacity change from 0 to 10 [ 506.855061] FAT-fs (loop5): bogus number of reserved sectors [ 506.855552] FAT-fs (loop5): Can't find a valid FAT filesystem 05:33:39 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x300) 05:33:39 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x8901, 0x0) 05:33:39 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) 05:33:51 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x300) 05:33:51 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:33:51 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) 05:33:51 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x8902, 0x0) 05:33:51 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 05:33:51 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) 05:33:51 executing program 5: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440", 0x12}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:33:51 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0xb00) [ 519.038320] loop4: detected capacity change from 0 to 40 [ 519.052510] loop5: detected capacity change from 0 to 10 05:33:51 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x8903, 0x0) [ 519.059445] loop1: detected capacity change from 0 to 40 [ 519.067415] loop2: detected capacity change from 0 to 40 05:33:51 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x1301) [ 519.105877] FAT-fs (loop5): invalid media value (0x00) [ 519.106624] FAT-fs (loop5): Can't find a valid FAT filesystem 05:33:51 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x8904, 0x0) 05:33:51 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x2000) 05:33:51 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) 05:33:51 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x310) 05:33:51 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) [ 519.369925] loop4: detected capacity change from 0 to 40 05:33:52 executing program 5: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440", 0x12}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:33:52 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) 05:33:52 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$sock_bt_hci(r0, 0x400448cc, 0x0) [ 519.462152] loop4: detected capacity change from 0 to 40 [ 519.603297] loop5: detected capacity change from 0 to 10 [ 519.622119] FAT-fs (loop5): invalid media value (0x00) [ 519.622844] FAT-fs (loop5): Can't find a valid FAT filesystem 05:34:05 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:34:05 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0xb00) 05:34:05 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:34:05 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) 05:34:05 executing program 5: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440", 0x12}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:34:05 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$sock_bt_hci(r0, 0x400448cc, 0x0) 05:34:05 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x8906, 0x0) 05:34:05 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x4000) [ 532.424691] loop4: detected capacity change from 0 to 40 [ 532.428431] loop5: detected capacity change from 0 to 10 [ 532.432666] FAT-fs (loop5): invalid media value (0x00) [ 532.433115] FAT-fs (loop5): Can't find a valid FAT filesystem [ 532.440129] loop2: detected capacity change from 0 to 40 05:34:05 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) 05:34:05 executing program 5: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000", 0x15}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) [ 532.549432] loop4: detected capacity change from 0 to 40 05:34:05 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$sock_bt_hci(r0, 0x400448cc, 0x0) 05:34:05 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x8907, 0x0) 05:34:05 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x1003) 05:34:05 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x60ff) [ 532.587664] loop5: detected capacity change from 0 to 10 [ 532.589927] FAT-fs (loop5): invalid media value (0x00) [ 532.590352] FAT-fs (loop5): Can't find a valid FAT filesystem 05:34:05 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) 05:34:05 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cc, 0x0) [ 532.741149] loop4: detected capacity change from 0 to 40 [ 532.853803] syz-executor.2: attempt to access beyond end of device [ 532.853803] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 532.854901] Buffer I/O error on dev loop2, logical block 10, lost async page write 05:34:17 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x2000) 05:34:17 executing program 5: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000", 0x15}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:34:17 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x8912, 0x0) 05:34:17 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:34:17 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:34:17 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x7e00) 05:34:17 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) 05:34:17 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cc, 0x0) [ 544.734456] loop4: detected capacity change from 0 to 40 [ 544.748395] loop5: detected capacity change from 0 to 10 [ 544.766704] FAT-fs (loop5): invalid media value (0x00) [ 544.767761] FAT-fs (loop5): Can't find a valid FAT filesystem [ 544.796134] loop2: detected capacity change from 0 to 40 05:34:17 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cc, 0x0) 05:34:17 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) 05:34:17 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0xaa00) 05:34:17 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x8940, 0x0) 05:34:17 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x0, 0x0) 05:34:17 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x80000) 05:34:17 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x0, 0x0) 05:34:17 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x200000) [ 547.697305] loop4: detected capacity change from 0 to 40 [ 560.583453] loop4: detected capacity change from 0 to 40 05:34:33 executing program 5: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000", 0x15}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:34:33 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x8941, 0x0) 05:34:33 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x0, 0x0) 05:34:33 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:34:33 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0xf0ff1f) 05:34:33 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x4000) 05:34:33 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:34:33 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) [ 560.630204] loop2: detected capacity change from 0 to 40 [ 560.643250] loop5: detected capacity change from 0 to 10 [ 560.656537] FAT-fs (loop5): invalid media value (0x00) [ 560.657304] FAT-fs (loop5): Can't find a valid FAT filesystem 05:34:33 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) 05:34:33 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x60ff) 05:34:33 executing program 5: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f8", 0x16}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:34:33 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x1000000) 05:34:33 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) [ 560.813794] loop4: detected capacity change from 0 to 40 [ 560.836305] loop6: detected capacity change from 0 to 40 [ 560.872628] loop5: detected capacity change from 0 to 10 05:34:33 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) [ 560.889084] FAT-fs (loop5): bogus number of FAT sectors [ 560.889817] FAT-fs (loop5): Can't find a valid FAT filesystem 05:34:33 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x7e00) 05:34:33 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x894c, 0x0) [ 560.968613] loop4: detected capacity change from 0 to 40 05:34:33 executing program 5: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f8", 0x16}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) [ 561.018432] syz-executor.6: attempt to access beyond end of device [ 561.018432] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 561.022551] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 561.055649] loop5: detected capacity change from 0 to 10 [ 561.065857] FAT-fs (loop5): bogus number of FAT sectors [ 561.066606] FAT-fs (loop5): Can't find a valid FAT filesystem [ 561.171222] syz-executor.2: attempt to access beyond end of device [ 561.171222] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 561.172214] Buffer I/O error on dev loop2, logical block 10, lost async page write 05:34:45 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0xb300) 05:34:45 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x2000000) 05:34:45 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) 05:34:45 executing program 6: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x10) 05:34:45 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x8982, 0x0) 05:34:45 executing program 5: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f8", 0x16}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:34:45 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000300)=0x7fffffff) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 05:34:45 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) [ 573.066782] loop5: detected capacity change from 0 to 10 [ 573.085813] FAT-fs (loop5): bogus number of FAT sectors [ 573.086536] FAT-fs (loop5): Can't find a valid FAT filesystem [ 573.089605] loop2: detected capacity change from 0 to 40 [ 573.095578] loop1: detected capacity change from 0 to 40 [ 573.104276] loop4: detected capacity change from 0 to 40 05:34:45 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x3000000) 05:34:45 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) 05:34:45 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x80000) 05:34:45 executing program 5: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, 0x0) 05:34:45 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) [ 573.316450] loop4: detected capacity change from 0 to 40 [ 573.340933] loop5: detected capacity change from 0 to 10 05:34:46 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) 05:34:46 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0xb000000) 05:34:46 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x8983, 0x0) 05:35:03 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:35:03 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x89a0, 0x0) 05:35:03 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x10000000) 05:35:03 executing program 5: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, 0x0) 05:35:03 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) 05:35:03 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000300)=0x7fffffff) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 05:35:03 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:35:03 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x200000) [ 591.063199] loop5: detected capacity change from 0 to 10 [ 591.095470] loop2: detected capacity change from 0 to 40 [ 591.100099] loop6: detected capacity change from 0 to 40 [ 591.107769] loop1: detected capacity change from 0 to 40 05:35:03 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x13010000) 05:35:03 executing program 5: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, 0x0) 05:35:03 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0xf0ff1f) [ 591.165998] loop5: detected capacity change from 0 to 10 05:35:03 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x1fffefff) 05:35:04 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x1ffff000) [ 591.412120] syz-executor.6: attempt to access beyond end of device [ 591.412120] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 591.413045] Buffer I/O error on dev loop6, logical block 10, lost async page write 05:35:18 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x89a1, 0x0) 05:35:18 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x1000000) 05:35:18 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000300)=0x7fffffff) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 05:35:18 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:35:18 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x40000000) 05:35:18 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:35:18 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000080)) 05:35:18 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) [ 605.621535] loop2: detected capacity change from 0 to 40 [ 605.629380] loop1: detected capacity change from 0 to 40 [ 605.661244] loop5: detected capacity change from 0 to 40 [ 605.664199] syz-executor.6: attempt to access beyond end of device [ 605.664199] loop6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 605.680470] FAT-fs (loop6): unable to read boot sector 05:35:18 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x7e000000) 05:35:18 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) 05:35:18 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x2000000) [ 605.941499] syz-executor.2: attempt to access beyond end of device [ 605.941499] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 605.943370] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 606.039683] syz-executor.5: attempt to access beyond end of device [ 606.039683] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 606.041673] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 606.097606] loop6: detected capacity change from 0 to 40 05:35:18 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0xaa000000) 05:35:18 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:35:18 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:35:18 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:35:18 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448c9, 0x0) [ 606.331979] loop2: detected capacity change from 0 to 40 05:35:19 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448ca, 0x0) 05:35:19 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x3000000) [ 606.535645] syz-executor.4: attempt to access beyond end of device [ 606.535645] loop4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 606.549870] FAT-fs (loop4): unable to read boot sector [ 606.553881] loop5: detected capacity change from 0 to 40 05:35:19 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0xb000000) 05:35:19 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 05:35:19 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x10000000) [ 606.730729] syz-executor.5: attempt to access beyond end of device [ 606.730729] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 606.733516] Buffer I/O error on dev loop5, logical block 10, lost async page write 05:35:19 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0xff600000) 05:35:19 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) 05:35:19 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x10030000) 05:35:19 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) [ 606.974684] loop1: detected capacity change from 0 to 40 [ 606.977418] syz-executor.4: attempt to access beyond end of device [ 606.977418] loop4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 606.982901] FAT-fs (loop4): unable to read boot sector 05:35:19 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:35:19 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cb, 0x0) 05:35:19 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) [ 607.065655] loop6: detected capacity change from 0 to 40 [ 607.081438] loop5: detected capacity change from 0 to 40 [ 607.083213] syz-executor.4: attempt to access beyond end of device [ 607.083213] loop4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 607.084088] FAT-fs (loop4): unable to read boot sector 05:35:19 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0xffefff1f) [ 607.131242] syz-executor.1: attempt to access beyond end of device [ 607.131242] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 607.132371] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 607.133983] syz-executor.2: attempt to access beyond end of device [ 607.133983] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 607.135852] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 607.209217] syz-executor.6: attempt to access beyond end of device [ 607.209217] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 607.210197] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 607.288690] Buffer I/O error on dev loop5, logical block 10, lost async page write 05:35:31 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) 05:35:31 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0xffffffff) 05:35:31 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 05:35:31 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:35:31 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448ca, 0x0) 05:35:31 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448dc, 0x0) 05:35:31 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[]) 05:35:31 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x1fffefff) 05:35:31 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = getpgrp(0x0) r3 = getpid() r4 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) clone3(&(0x7f0000000200)={0x19000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x36}, &(0x7f00000000c0)=""/186, 0xba, &(0x7f0000000180)=""/17, &(0x7f00000001c0)=[r2, 0xffffffffffffffff, r3], 0x3, {r4}}, 0x58) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) [ 619.057694] loop5: detected capacity change from 0 to 40 [ 619.069409] loop1: detected capacity change from 0 to 40 [ 619.106087] loop2: detected capacity change from 0 to 40 05:35:31 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) [ 619.158873] loop6: detected capacity change from 0 to 40 [ 619.197299] bio_check_eod: 1 callbacks suppressed [ 619.197312] syz-executor.4: attempt to access beyond end of device [ 619.197312] loop4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 619.198619] FAT-fs (loop4): unable to read boot sector [ 619.264842] syz-executor.6: attempt to access beyond end of device [ 619.264842] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 619.265891] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 619.414803] syz-executor.2: attempt to access beyond end of device [ 619.414803] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 619.415884] Buffer I/O error on dev loop2, logical block 10, lost async page write 05:35:45 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[]) 05:35:45 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) 05:35:45 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 05:35:45 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448dd, 0x0) 05:35:45 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000003, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:35:45 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cb, 0x0) 05:35:45 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x1ffff000) 05:35:45 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) [ 632.666046] loop2: detected capacity change from 0 to 40 [ 632.673371] loop5: detected capacity change from 0 to 40 [ 632.702959] syz-executor.4: attempt to access beyond end of device [ 632.702959] loop4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 632.704805] FAT-fs (loop4): unable to read boot sector 05:35:45 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448e4, 0x0) [ 632.708152] loop1: detected capacity change from 0 to 40 05:35:45 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cb, 0x0) [ 632.876785] syz-executor.2: attempt to access beyond end of device [ 632.876785] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 632.877739] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 633.115821] syz-executor.1: attempt to access beyond end of device [ 633.115821] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 633.117780] Buffer I/O error on dev loop1, logical block 10, lost async page write 05:35:56 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x5a42, &(0x7f0000000000)={0x0, 0x31c9, 0x8, 0x2, 0x26d, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:35:56 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x40000000) 05:35:56 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:35:56 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:35:56 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448e6, 0x0) 05:35:56 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[]) 05:35:56 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cb, 0x0) 05:35:56 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) [ 644.260008] loop1: detected capacity change from 0 to 40 [ 644.261534] loop5: detected capacity change from 0 to 40 05:35:57 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r2) 05:35:57 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) [ 644.309355] syz-executor.4: attempt to access beyond end of device [ 644.309355] loop4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 644.311201] loop2: detected capacity change from 0 to 40 05:35:57 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x7e000000) [ 644.338430] FAT-fs (loop4): unable to read boot sector 05:35:57 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) (fail_nth: 1) 05:35:57 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448e7, 0x0) [ 644.376931] loop5: detected capacity change from 0 to 40 05:35:57 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0xb3000000) [ 644.425864] FAULT_INJECTION: forcing a failure. [ 644.425864] name failslab, interval 1, probability 0, space 0, times 0 [ 644.426697] CPU: 0 PID: 5755 Comm: syz-executor.6 Not tainted 6.4.0-next-20230703 #1 [ 644.427251] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 644.427846] Call Trace: [ 644.428039] [ 644.428213] dump_stack_lvl+0xc1/0xf0 [ 644.428506] should_fail_ex+0x4b4/0x5b0 [ 644.428802] ? __do_sys_memfd_create+0x12d/0x940 [ 644.429153] should_failslab+0x9/0x20 [ 644.429432] __kmem_cache_alloc_node+0x66/0x320 [ 644.429790] ? __do_sys_memfd_create+0x12d/0x940 [ 644.430135] ? __do_sys_memfd_create+0x12d/0x940 [ 644.430476] __kmalloc+0x4a/0x160 [ 644.430737] __do_sys_memfd_create+0x12d/0x940 [ 644.431070] ? ksys_write+0x19e/0x250 [ 644.431356] ? __pfx___do_sys_memfd_create+0x10/0x10 [ 644.431727] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 644.432112] do_syscall_64+0x3f/0x90 [ 644.432398] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 644.432789] RIP: 0033:0x7fa31f754b19 [ 644.433058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 644.434352] RSP: 002b:00007fa31ccc9f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 644.434894] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fa31f754b19 [ 644.435420] RDX: 0000000000001400 RSI: 0000000000000000 RDI: 00007fa31f7ae0fb [ 644.435934] RBP: 0000000000000002 R08: 0000000000000a00 R09: ffffffffffffffff [ 644.436437] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000 [ 644.436943] R13: 0000000020000100 R14: 0000000000001400 R15: 0000000020000080 [ 644.437466] 05:35:57 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') 05:35:57 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) [ 644.506057] loop4: detected capacity change from 0 to 40 [ 644.522201] FAT-fs (loop4): bogus number of reserved sectors [ 644.523146] FAT-fs (loop4): Can't find a valid FAT filesystem [ 644.527795] syz-executor.2: attempt to access beyond end of device [ 644.527795] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 644.528693] loop5: detected capacity change from 0 to 40 [ 644.529110] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 644.562513] syz-executor.1: attempt to access beyond end of device [ 644.562513] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 644.564242] Buffer I/O error on dev loop1, logical block 10, lost async page write 05:36:10 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) (fail_nth: 2) 05:36:10 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:36:10 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x40049409, 0x0) 05:36:10 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0xff600000) 05:36:10 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') 05:36:10 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:36:10 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) 05:36:10 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x420440, 0x0) r3 = syz_mount_image$nfs(&(0x7f0000001340), &(0x7f0000001380)='./file0\x00', 0x7, 0x7, &(0x7f0000004640)=[{&(0x7f00000013c0)="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", 0x1000, 0x2}, {&(0x7f00000023c0), 0x0, 0x7269}, {&(0x7f0000002400)="87b89df3d54e07e85a37ebd6741f66f7a294dce517412f01c929bd9c983f75889834a028518f38cf72912d86582befb090a4335c655c82d633c37907d10be365b69960f907525f5e4201876c1b5fb19fd84c3bfc788e56837194dfb3f7c91d1cc80cf49365601dc9455716677f99ca871c363f00fd46b43c8b5a963794434c905b11ecb6dade21148497d1152d8c05742d30f7300f821b358f14acecac5c0d4f9740f6f774c1b23065752dc49128b5124ab98558fe56ed615b5caa475854db0e43f4a09e078d0d95bc879bea8556ab21c5ce8f25a6796aa5192ce9f1f5e445d8", 0xe0, 0x90}, {&(0x7f0000002500)="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", 0x1000, 0x6}, {&(0x7f0000003500)="a994388f88541befe3d18522d9bc32a97e9434321214d3cf7b07dca6eaf589d7c14a2536656cac8d77b92117fb4cdbce04081324fdbcd05425f09c92ef4ef1fe83d84c8b10f93a3a906b3b9cb9aba2f540e49142ae4cddece480004f251bdf2a309b7bf04e1270dd454bf07cd3aeee3342d10195b1dd3cf072e9798b1d5c4ee2531447ee8e627698081a947bd861fcd4a5dcd216534302b6aca49943242e6fee28bd9b88b1359150f55731b80222b3f262874afbd2e1e2302730ee7603697e1c5d195e7b", 0xc4, 0xda1}, {&(0x7f0000003600)="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", 0x1000, 0x6}, {&(0x7f0000004600)="dcf17809fbefa5e6750320de0b7178d85ddfe862f32742ae7bd6ffd0a663e258aaffbd3dcc98e080265b952f25edc66abe8a6fb41a4c06", 0x37, 0x5}], 0x80080, &(0x7f0000004700)={[{',:\''}, {'.+%%{'}, {'$}\x05'}], [{@fowner_gt={'fowner>', 0xee01}}, {@dont_hash}, {@fowner_lt={'fowner<', 0xee00}}, {@dont_appraise}]}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup(r4) ioctl$sock_bt_hci(r5, 0x400448cc, &(0x7f0000000240)) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0x0, 0x7, r3, &(0x7f0000004780)={r5, r0, 0x4}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000600)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000340)={{}, 0x0, 0x10, @inherit={0x60, &(0x7f0000000000)={0x1, 0x3, 0x101, 0xfffffffffffffff8, {0x0, 0x3, 0x5b, 0xffffffff, 0x1000}, [0x4, 0x3, 0x800]}}, @devid=r6}) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000040)={r6, "03ef845124e516f2e73f556f979b81c3"}) [ 657.438179] loop4: detected capacity change from 0 to 40 [ 657.441678] FAT-fs (loop4): bogus number of reserved sectors [ 657.442676] FAT-fs (loop4): Can't find a valid FAT filesystem [ 657.462627] loop2: detected capacity change from 0 to 40 [ 657.466439] loop5: detected capacity change from 0 to 40 [ 657.472387] loop6: detected capacity change from 0 to 10 [ 657.491581] loop1: detected capacity change from 0 to 40 [ 657.496648] loop7: detected capacity change from 0 to 114 05:36:10 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0xffefff1f) 05:36:10 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x40086602, 0x0) 05:36:10 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) [ 657.540698] loop7: detected capacity change from 0 to 114 05:36:10 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) [ 657.591022] loop5: detected capacity change from 0 to 40 [ 657.592184] syz-executor.2: attempt to access beyond end of device [ 657.592184] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 657.595244] Buffer I/O error on dev loop2, logical block 10, lost async page write 05:36:10 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) (fail_nth: 3) 05:36:10 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x40087602, 0x0) 05:36:10 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup(r2) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) ioctl$sock_bt_hci(r3, 0x400448cc, &(0x7f0000000240)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:36:10 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) 05:36:10 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) [ 657.678414] loop4: detected capacity change from 0 to 40 [ 657.693400] FAT-fs (loop4): bogus number of reserved sectors [ 657.693853] FAT-fs (loop4): Can't find a valid FAT filesystem [ 657.707707] loop2: detected capacity change from 0 to 40 [ 657.710333] loop5: detected capacity change from 0 to 40 [ 657.729877] FAULT_INJECTION: forcing a failure. [ 657.729877] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 657.731594] CPU: 1 PID: 5811 Comm: syz-executor.6 Not tainted 6.4.0-next-20230703 #1 [ 657.732597] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 657.733642] Call Trace: [ 657.733983] [ 657.734283] dump_stack_lvl+0xc1/0xf0 [ 657.734824] should_fail_ex+0x4b4/0x5b0 [ 657.735366] _copy_from_user+0x30/0xf0 [ 657.735906] __do_sys_memfd_create+0x1b0/0x940 [ 657.736577] ? ksys_write+0x19e/0x250 [ 657.737172] ? __pfx___do_sys_memfd_create+0x10/0x10 [ 657.737884] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 657.738586] do_syscall_64+0x3f/0x90 [ 657.739101] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 657.739917] RIP: 0033:0x7fa31f754b19 [ 657.740400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 657.742827] RSP: 002b:00007fa31ccc9f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 657.743809] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fa31f754b19 [ 657.744719] RDX: 0000000000001400 RSI: 0000000000000000 RDI: 00007fa31f7ae0fb [ 657.745751] RBP: 0000000000000002 R08: 0000000000000a00 R09: ffffffffffffffff [ 657.746692] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000 [ 657.747615] R13: 0000000020000100 R14: 0000000000001400 R15: 0000000020000080 [ 657.748552] [ 657.787820] syz-executor.2: attempt to access beyond end of device [ 657.787820] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 657.788870] Buffer I/O error on dev loop2, logical block 10, lost async page write 05:36:24 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) (fail_nth: 4) 05:36:24 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0xffffffff) 05:36:24 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) 05:36:24 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:36:24 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) 05:36:24 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x401c5820, 0x0) [ 672.207679] FAULT_INJECTION: forcing a failure. [ 672.207679] name failslab, interval 1, probability 0, space 0, times 0 [ 672.208557] CPU: 0 PID: 5831 Comm: syz-executor.6 Not tainted 6.4.0-next-20230703 #1 [ 672.209096] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 672.209658] Call Trace: [ 672.209849] [ 672.210013] dump_stack_lvl+0xc1/0xf0 [ 672.210309] should_fail_ex+0x4b4/0x5b0 [ 672.210598] should_failslab+0x9/0x20 [ 672.210873] kmem_cache_alloc_lru+0x7a/0x680 [ 672.211194] ? find_held_lock+0x2c/0x110 [ 672.211497] ? shmem_alloc_inode+0x27/0x50 [ 672.211814] ? alloc_fd+0x2eb/0x760 [ 672.212082] ? shmem_alloc_inode+0x27/0x50 [ 672.212378] shmem_alloc_inode+0x27/0x50 [ 672.212670] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 672.213003] alloc_inode+0x63/0x240 [ 672.213261] new_inode+0x25/0x1f0 [ 672.213506] shmem_get_inode+0x183/0xe10 [ 672.213792] ? do_raw_spin_unlock+0x53/0x220 [ 672.214112] __shmem_file_setup+0x171/0x300 [ 672.214413] __do_sys_memfd_create+0x32b/0x940 [ 672.214736] ? ksys_write+0x19e/0x250 [ 672.215007] ? __pfx___do_sys_memfd_create+0x10/0x10 [ 672.215363] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 672.215736] do_syscall_64+0x3f/0x90 [ 672.216020] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 672.216384] RIP: 0033:0x7fa31f754b19 [ 672.216640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 672.217924] RSP: 002b:00007fa31ccc9f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 672.218487] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fa31f754b19 [ 672.218991] RDX: 0000000000001400 RSI: 0000000000000000 RDI: 00007fa31f7ae0fb [ 672.219524] RBP: 0000000000000002 R08: 0000000000000a00 R09: ffffffffffffffff [ 672.220047] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000 [ 672.220580] R13: 0000000020000100 R14: 0000000000001400 R15: 0000000020000080 [ 672.221106] 05:36:24 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:36:24 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cc, &(0x7f0000000240)) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000b80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b40)={&(0x7f0000000040)={0xacc, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0xffff}, @chandef_params, @beacon=[@NL80211_ATTR_PROBE_RESP={0x3f, 0x91, "91c397f35868bcd5371ea6e5a81e5c2cc69ae92a0b66933293b38a72631e072c22b4e16ac24edc6ba7a3c886d81feac4a92eeb553cd10356e4c79a"}, @NL80211_ATTR_IE_PROBE_RESP={0xc, 0x7f, [@mesh_id={0x72, 0x6}]}, @NL80211_ATTR_IE={0x4f, 0x2a, [@mesh_chsw={0x76, 0x6, {0xeb, 0x80, 0x2e, 0x3}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x6, 0x84, 0x1f}}, @dsss={0x3, 0x1, 0x30}, @erp={0x2a, 0x1, {0x0, 0x1}}, @random={0xff, 0x35, "2a964ccd65d41c01c5478efada67c619c62012ef89e20cc307bebfd473b2538ecb24da74755eff89b1a6fafdcb42b78ef5ce48b5f1"}]}, @NL80211_ATTR_IE_PROBE_RESP={0xd, 0x7f, [@supported_rates={0x1, 0x7, [{0x6}, {0x5, 0x1}, {0x36, 0x1}, {0x1, 0x1}, {0x16, 0x1}, {0x36}, {0x0, 0x1}]}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x30, 0x80, [@mesh_chsw={0x76, 0x6, {0x80, 0xf9, 0x23}}, @ht={0x2d, 0x1a, {0x2000, 0x1, 0x1, 0x0, {0x2, 0x81a, 0x0, 0x3fd, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x20f, 0xffff513d}}, @peer_mgmt={0x75, 0x6, {0x1, 0x5, @val=0x1, @void, @void}}]}, @NL80211_ATTR_PROBE_RESP={0x705, 0x91, "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"}, @NL80211_ATTR_BEACON_TAIL={0x1e, 0xf, [@peer_mgmt={0x75, 0x18, {0x0, 0xfff9, @val=0x5, @val=0x11, @val="b407b06dc9a7b7d150b634907073c8e8"}}]}, @NL80211_ATTR_BEACON_HEAD={0x28e, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x3bbe}, @device_a, @broadcast, @initial, {0x2, 0xff}}, @ver_80211n={0x0, 0x7, 0x2, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1}}, 0x0, @random=0x1, 0x300, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0x34}, @void, @val={0x6, 0x2}, @val={0x5, 0x50, {0x1, 0x78, 0x3, "d11d3dae23275dd5238fd2eac1b2897911704d0256bc5c76c51400ccdcaf45f5ff2d581c7e6548e28228c41ac203f05140991eca050ef9c78257912e043e9852a5cef6397e925c2546d556e3f5"}}, @val={0x25, 0x3, {0x0, 0x74, 0x80}}, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @void, @void, @void, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x7, 0x40}}, @val={0x76, 0x6, {0x8, 0x5, 0x15, 0x6}}, [{0xdd, 0xd3, "e20f4794aefa06b4f4022e59773e2995f300c06b28718037fcb61e37299802705c1fc468615c4b519a0705740ffa1444b39f9cb095d773bb5775826bfc403cce6e4f5bac899bfe78333a6b146d84c54b8289976d88773fddf4c8ddab8490233507290faabfdce0f45d92e7a08890531af027aedc01b4868890dba48a709eefa1aa717a9dce21fc4d9a184baebc2c5c2ef8df79672e19483d77c9c3b378b323205ecd21da239876b0d1996746535b4e276a881b570cb63757625acb54a3d1e9311174a0e0d0080d1d6f165220bdf16b177aec19"}, {0xdd, 0x29, "5a38efdf6b0c5bdb96ff6ed7bb37c8d07991a14f9918f45b283722fda0bbdbb10b0c3921c0a91eaac7"}, {0xdd, 0xe6, "fc213100c86a24ff4e41ea56da2ef1aaf84e058b00b0af1446d6e36544425353d925711451860b3fb64e9acdd0254cf885e842bc05369fe3aff0bbc64d94e37c18239e350e5f0e892e2c888eeb50abedbc1a5b127ef90a77cdf35d845bca3dcaf28662b04e947969a1c157d7985cc427cd87e32261a8ffb37ec7974e463f2ed4d258ab0371fb8726519c3acd89696ecd2e0e8649d9b30a64df3730ac388c14cafcb7165240a6139a58969d3a65ad996f3e6fdc7a55d22696ad68132f0a931c6ab573738a1b7f39e482906f66d5da82510ebeabd51707e5f26ee34ec22f046a1fbb10017305b6"}]}}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x4}, @NL80211_ATTR_HE_OBSS_PD={0xc, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}]}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac06}]]}, 0xacc}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r2 = memfd_secret(0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r2, 0x3) syz_io_uring_submit(r3, 0x0, 0x0, 0x0) [ 672.227119] loop2: detected capacity change from 0 to 40 [ 672.251929] loop5: detected capacity change from 0 to 40 [ 672.253076] loop4: detected capacity change from 0 to 40 [ 672.255461] loop1: detected capacity change from 0 to 40 [ 672.258603] FAT-fs (loop4): bogus number of reserved sectors [ 672.259384] FAT-fs (loop4): Can't find a valid FAT filesystem 05:36:25 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) (fail_nth: 5) 05:36:25 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) [ 672.322270] syz-executor.2: attempt to access beyond end of device [ 672.322270] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 672.325019] Buffer I/O error on dev loop2, logical block 10, lost async page write 05:36:25 executing program 0: r0 = memfd_secret(0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000040)={{r0}, r1, 0xc, @unused=[0x2, 0x7fffffff, 0x1f, 0x6], @subvolid=0xbed}) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r2, 0x0, 0x0, 0x0) [ 672.346316] loop6: detected capacity change from 0 to 10 [ 672.355447] loop5: detected capacity change from 0 to 40 05:36:25 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) 05:36:25 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x5) syz_open_dev$vcsa(&(0x7f0000000000), 0x8000000302, 0x40001) 05:36:25 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x4020940d, 0x0) 05:36:25 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) 05:36:25 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) (fail_nth: 6) 05:36:25 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) [ 672.480482] FAULT_INJECTION: forcing a failure. [ 672.480482] name failslab, interval 1, probability 0, space 0, times 0 [ 672.481447] CPU: 0 PID: 5858 Comm: syz-executor.6 Not tainted 6.4.0-next-20230703 #1 [ 672.482019] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 672.482615] Call Trace: [ 672.482811] [ 672.482984] dump_stack_lvl+0xc1/0xf0 [ 672.483287] should_fail_ex+0x4b4/0x5b0 [ 672.483598] ? security_inode_alloc+0x38/0x160 [ 672.483971] should_failslab+0x9/0x20 [ 672.484268] kmem_cache_alloc+0x62/0x370 [ 672.484330] loop4: detected capacity change from 0 to 40 [ 672.484581] security_inode_alloc+0x38/0x160 [ 672.485617] inode_init_always+0xbb2/0xea0 [ 672.485947] alloc_inode+0x84/0x240 [ 672.486222] new_inode+0x25/0x1f0 [ 672.486488] shmem_get_inode+0x183/0xe10 [ 672.486803] ? do_raw_spin_unlock+0x53/0x220 [ 672.487145] __shmem_file_setup+0x171/0x300 [ 672.487473] __do_sys_memfd_create+0x32b/0x940 [ 672.487832] ? ksys_write+0x19e/0x250 [ 672.488120] ? __pfx___do_sys_memfd_create+0x10/0x10 [ 672.488503] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 672.488904] do_syscall_64+0x3f/0x90 [ 672.489198] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 672.489594] RIP: 0033:0x7fa31f754b19 [ 672.489874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 672.491170] RSP: 002b:00007fa31ccc9f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 672.491732] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fa31f754b19 [ 672.492258] RDX: 0000000000001400 RSI: 0000000000000000 RDI: 00007fa31f7ae0fb [ 672.492749] RBP: 0000000000000002 R08: 0000000000000a00 R09: ffffffffffffffff [ 672.493269] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000 [ 672.493785] R13: 0000000020000100 R14: 0000000000001400 R15: 0000000020000080 [ 672.494311] 05:36:25 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x800448d2, 0x0) [ 672.501848] FAT-fs (loop4): bogus number of reserved sectors [ 672.502442] loop5: detected capacity change from 0 to 40 [ 672.502582] FAT-fs (loop4): Can't find a valid FAT filesystem [ 672.505378] loop2: detected capacity change from 0 to 40 05:36:25 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) [ 672.585439] syz-executor.2: attempt to access beyond end of device [ 672.585439] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 672.586538] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 672.597119] loop5: detected capacity change from 0 to 40 05:36:25 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x0, &(0x7f0000000040), 0x0, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x3000000, 0x810, r2, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup(r4) ioctl$sock_bt_hci(r5, 0x400448cc, &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3000000, 0x4010, r5, 0x8000000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x13, r6, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000140)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r7, 0x0, &(0x7f0000000040), 0x0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x6f4) fsmount(r2, 0x1, 0x2) 05:36:25 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) 05:36:25 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) [ 672.677691] loop4: detected capacity change from 0 to 40 [ 672.684998] FAT-fs (loop4): bogus number of reserved sectors [ 672.685829] FAT-fs (loop4): Can't find a valid FAT filesystem [ 672.906649] loop2: detected capacity change from 0 to 40 [ 674.048244] I/O error, dev loop4, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 674.052460] Buffer I/O error on dev loop4, logical block 1, async page read [ 674.075266] systemd-udevd: attempt to access beyond end of device [ 674.075266] loop4: rw=0, sector=2, nr_sectors = 1 limit=0 [ 674.077126] Buffer I/O error on dev loop4, logical block 2, async page read [ 674.081456] systemd-udevd: attempt to access beyond end of device [ 674.081456] loop4: rw=0, sector=3, nr_sectors = 1 limit=0 [ 674.082593] Buffer I/O error on dev loop4, logical block 3, async page read [ 674.084399] systemd-udevd: attempt to access beyond end of device [ 674.084399] loop4: rw=0, sector=4, nr_sectors = 1 limit=0 [ 674.085478] Buffer I/O error on dev loop4, logical block 4, async page read [ 674.087157] systemd-udevd: attempt to access beyond end of device [ 674.087157] loop4: rw=0, sector=5, nr_sectors = 1 limit=0 [ 674.088273] Buffer I/O error on dev loop4, logical block 5, async page read [ 674.090001] systemd-udevd: attempt to access beyond end of device [ 674.090001] loop4: rw=0, sector=6, nr_sectors = 1 limit=0 [ 674.091110] Buffer I/O error on dev loop4, logical block 6, async page read [ 674.092862] systemd-udevd: attempt to access beyond end of device [ 674.092862] loop4: rw=0, sector=7, nr_sectors = 1 limit=0 [ 674.093919] Buffer I/O error on dev loop4, logical block 7, async page read 05:36:39 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) [ 686.862194] loop6: detected capacity change from 0 to 10 [ 686.862618] loop5: detected capacity change from 0 to 40 [ 686.864317] loop4: detected capacity change from 0 to 40 05:36:39 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 05:36:39 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) (fail_nth: 7) 05:36:39 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) 05:36:39 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) 05:36:39 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f0000000000)={0x0, 0x9000000000000, [0x0, 0xffffffffffffffc1, 0x5, 0x970, 0x0, 0x8]}) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) [ 686.872557] FAT-fs (loop4): bogus number of reserved sectors [ 686.873428] FAT-fs (loop4): Can't find a valid FAT filesystem 05:36:39 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) [ 686.884651] loop1: detected capacity change from 0 to 40 [ 686.895805] loop2: detected capacity change from 0 to 40 05:36:39 executing program 7: r0 = memfd_secret(0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x7, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) socket$inet6(0xa, 0x800, 0xc0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat2(r1, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)={0x4a0c2, 0x24, 0x9}, 0x18) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x30, r2, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x0, &(0x7f0000000040), 0x0, 0x4) syz_io_uring_submit(r3, 0x0, 0x0, 0x0) 05:36:39 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) 05:36:39 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x800448d4, 0x0) 05:36:39 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x800448d5, 0x0) [ 687.099126] loop5: detected capacity change from 0 to 40 [ 687.385836] syz-executor.1: attempt to access beyond end of device [ 687.385836] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 687.387526] Buffer I/O error on dev loop1, logical block 10, lost async page write 05:36:53 executing program 1: pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 05:36:53 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:36:53 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x800448d7, 0x0) 05:36:53 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) [ 700.908290] loop4: detected capacity change from 0 to 40 05:36:53 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) (fail_nth: 8) 05:36:53 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) 05:36:53 executing program 7: r0 = memfd_secret(0x0) ioctl$FICLONE(r0, 0x40049409, r0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) [ 700.926515] loop2: detected capacity change from 0 to 40 [ 700.929519] FAULT_INJECTION: forcing a failure. [ 700.929519] name failslab, interval 1, probability 0, space 0, times 0 [ 700.931049] CPU: 1 PID: 5931 Comm: syz-executor.6 Not tainted 6.4.0-next-20230703 #1 [ 700.932153] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 700.933307] Call Trace: [ 700.933678] [ 700.934006] dump_stack_lvl+0xc1/0xf0 [ 700.934571] should_fail_ex+0x4b4/0x5b0 [ 700.935153] should_failslab+0x9/0x20 [ 700.935714] kmem_cache_alloc_lru+0x7a/0x680 [ 700.936367] ? __d_alloc+0x31/0x9c0 [ 700.936902] ? __d_alloc+0x31/0x9c0 [ 700.937442] __d_alloc+0x31/0x9c0 [ 700.937959] ? get_random_u32+0x3b2/0x670 [ 700.938562] d_alloc_pseudo+0x1d/0x70 [ 700.939128] alloc_file_pseudo+0xd2/0x260 [ 700.939745] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 700.940437] ? lockdep_annotate_inode_mutex_key+0x4b/0x200 [ 700.941256] ? shmem_get_inode+0x6be/0xe10 [ 700.941858] ? do_raw_spin_unlock+0x53/0x220 [ 700.942515] __shmem_file_setup+0x202/0x300 [ 700.943141] __do_sys_memfd_create+0x32b/0x940 [ 700.943809] ? ksys_write+0x19e/0x250 [ 700.944367] ? __pfx___do_sys_memfd_create+0x10/0x10 [ 700.945082] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 700.945835] do_syscall_64+0x3f/0x90 [ 700.946379] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 700.947118] RIP: 0033:0x7fa31f754b19 [ 700.947644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 700.950124] RSP: 002b:00007fa31ccc9f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 700.951200] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fa31f754b19 [ 700.952215] RDX: 0000000000001400 RSI: 0000000000000000 RDI: 00007fa31f7ae0fb [ 700.953222] RBP: 0000000000000002 R08: 0000000000000a00 R09: ffffffffffffffff [ 700.954224] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000 [ 700.955220] R13: 0000000020000100 R14: 0000000000001400 R15: 0000000020000080 [ 700.956253] [ 700.961058] FAT-fs (loop4): bogus number of reserved sectors [ 700.962139] FAT-fs (loop4): Can't find a valid FAT filesystem [ 700.962450] loop1: detected capacity change from 0 to 40 [ 701.017633] loop5: detected capacity change from 0 to 40 05:36:53 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x200000e, 0x4010, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="d5ff003000"]) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000100)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup(r3) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sysvipc/msg\x00', 0x0, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r5, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)={0x38, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x19a3b996}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x20004020) ioctl$sock_bt_hci(r4, 0x400448cc, &(0x7f0000000240)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cc, &(0x7f0000000240)) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000004c0)={0x0, 'macsec0\x00', {0x3}, 0x1}) io_uring_enter(r4, 0x3a1a, 0x5404, 0x2, &(0x7f00000000c0)={[0x2]}, 0x8) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = dup(r6) ioctl$sock_bt_hci(r7, 0x400448cc, &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000021000e0018000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000080)={&(0x7f0000000000)=""/103, 0x67, 0xffffbbce, 0x5e}) 05:36:53 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x800448f0, 0x0) 05:36:53 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) [ 701.088194] syz-executor.1: attempt to access beyond end of device [ 701.088194] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 701.089334] Buffer I/O error on dev loop1, logical block 10, lost async page write 05:36:53 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) setsockopt$sock_timeval(r3, 0x1, 0x43, &(0x7f0000000040)={0x0, 0xea60}, 0x10) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r2) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:36:53 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) 05:36:53 executing program 1: pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) [ 701.248799] loop4: detected capacity change from 0 to 40 [ 701.250512] FAT-fs (loop4): bogus number of reserved sectors [ 701.250948] FAT-fs (loop4): Can't find a valid FAT filesystem [ 701.768090] I/O error, dev loop4, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 701.769503] Buffer I/O error on dev loop4, logical block 1, async page read [ 701.787185] systemd-udevd: attempt to access beyond end of device [ 701.787185] loop4: rw=0, sector=2, nr_sectors = 1 limit=0 [ 701.788742] Buffer I/O error on dev loop4, logical block 2, async page read [ 701.799777] systemd-udevd: attempt to access beyond end of device [ 701.799777] loop4: rw=0, sector=3, nr_sectors = 1 limit=0 [ 701.801282] Buffer I/O error on dev loop4, logical block 3, async page read [ 701.807604] loop1: detected capacity change from 0 to 40 [ 701.815395] loop5: detected capacity change from 0 to 40 [ 701.834593] systemd-udevd: attempt to access beyond end of device [ 701.834593] loop4: rw=0, sector=4, nr_sectors = 1 limit=0 [ 701.836177] Buffer I/O error on dev loop4, logical block 4, async page read [ 701.863950] systemd-udevd: attempt to access beyond end of device [ 701.863950] loop4: rw=0, sector=5, nr_sectors = 1 limit=0 [ 701.866577] Buffer I/O error on dev loop4, logical block 5, async page read [ 701.871286] systemd-udevd: attempt to access beyond end of device [ 701.871286] loop4: rw=0, sector=6, nr_sectors = 1 limit=0 [ 701.872807] Buffer I/O error on dev loop4, logical block 6, async page read [ 701.893484] systemd-udevd: attempt to access beyond end of device [ 701.893484] loop4: rw=0, sector=7, nr_sectors = 1 limit=0 [ 701.894299] Buffer I/O error on dev loop4, logical block 7, async page read 05:37:06 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup(r2) ioctl$sock_bt_hci(r3, 0x400448cc, &(0x7f0000000240)) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x4, 0x1, 0x4, 0x7, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xb}, 0x700, 0x8, 0x1000, 0x7}}) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000140)={0x2a4, r4, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0xe54a}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PEERS={0x228, 0x8, 0x0, 0x1, [{0x224, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x29}, @WGPEER_A_ALLOWEDIPS={0x1ac, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2eed722bdb1c1bd17c54c2718bf6dcae82403d3dac577e379cccf1c7f765c5d7"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "07dc757bc3d1f4d18814b71e8c6d3c9c2d7e5e08531210c62313bf1f43141c2d"}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7f}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x80}, 0x4004) ioctl$HIDIOCINITREPORT(r3, 0x4805, 0x0) [ 713.894196] loop5: detected capacity change from 0 to 40 [ 713.898044] loop1: detected capacity change from 0 to 40 [ 713.912605] loop4: detected capacity change from 0 to 40 [ 713.915610] loop6: detected capacity change from 0 to 10 [ 713.925669] loop2: detected capacity change from 0 to 40 [ 713.929839] FAT-fs (loop4): bogus number of reserved sectors [ 713.930700] FAT-fs (loop4): Can't find a valid FAT filesystem 05:37:06 executing program 7: r0 = memfd_secret(0x0) recvmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/28, 0x1c}, {&(0x7f0000000040)=""/178, 0xb2}, {&(0x7f0000000100)=""/109, 0x6d}, {&(0x7f0000000180)=""/198, 0xc6}], 0x4, &(0x7f00000002c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf0}, 0x100) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x40010, r1, 0x0) pread64(r2, &(0x7f0000000400)=""/26, 0x1a, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r3, 0x0, 0x0, 0x0) 05:37:06 executing program 1: pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 05:37:06 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) 05:37:06 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:37:06 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) 05:37:06 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x80086601, 0x0) 05:37:06 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) (fail_nth: 9) 05:37:06 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x80087601, 0x0) 05:37:06 executing program 5: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) 05:37:06 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) (fail_nth: 10) [ 714.012759] syz-executor.1: attempt to access beyond end of device 05:37:06 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) [ 714.012759] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 714.013919] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 714.020890] loop5: detected capacity change from 0 to 40 [ 714.058083] loop4: detected capacity change from 0 to 40 [ 714.064999] syz-executor.2: attempt to access beyond end of device [ 714.064999] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 714.066299] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 714.067489] FAT-fs (loop4): bogus number of reserved sectors [ 714.067925] FAT-fs (loop4): Can't find a valid FAT filesystem 05:37:06 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 05:37:06 executing program 5: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) 05:37:06 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x80108906, 0x0) [ 714.120678] loop1: detected capacity change from 0 to 40 [ 714.134131] loop5: detected capacity change from 0 to 40 [ 714.139131] FAULT_INJECTION: forcing a failure. [ 714.139131] name failslab, interval 1, probability 0, space 0, times 0 [ 714.140759] CPU: 0 PID: 5993 Comm: syz-executor.6 Not tainted 6.4.0-next-20230703 #1 [ 714.141816] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 714.142931] Call Trace: [ 714.143283] [ 714.143602] dump_stack_lvl+0xc1/0xf0 [ 714.144149] should_fail_ex+0x4b4/0x5b0 [ 714.144714] ? alloc_empty_file+0x76/0x1e0 [ 714.145295] should_failslab+0x9/0x20 [ 714.145821] kmem_cache_alloc+0x62/0x370 [ 714.146379] alloc_empty_file+0x76/0x1e0 [ 714.146946] alloc_file+0x5e/0x800 [ 714.147457] alloc_file_pseudo+0x16e/0x260 [ 714.148038] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 714.148700] ? lockdep_annotate_inode_mutex_key+0x4b/0x200 [ 714.149462] ? do_raw_spin_unlock+0x53/0x220 [ 714.150093] __shmem_file_setup+0x202/0x300 [ 714.150699] __do_sys_memfd_create+0x32b/0x940 [ 714.151322] ? ksys_write+0x19e/0x250 [ 714.151852] ? __pfx___do_sys_memfd_create+0x10/0x10 [ 714.152581] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 714.153333] do_syscall_64+0x3f/0x90 [ 714.153882] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 714.154634] RIP: 0033:0x7fa31f754b19 [ 714.155161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 714.157653] RSP: 002b:00007fa31ccc9f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 714.158704] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fa31f754b19 [ 714.159679] RDX: 0000000000001400 RSI: 0000000000000000 RDI: 00007fa31f7ae0fb [ 714.160653] RBP: 0000000000000002 R08: 0000000000000a00 R09: ffffffffffffffff [ 714.161613] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000 [ 714.162570] R13: 0000000020000100 R14: 0000000000001400 R15: 0000000020000080 [ 714.163562] 05:37:06 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) [ 714.177847] loop4: detected capacity change from 0 to 40 [ 714.207533] FAT-fs (loop4): bogus number of reserved sectors [ 714.208335] FAT-fs (loop4): Can't find a valid FAT filesystem 05:37:18 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 05:37:18 executing program 5: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) 05:37:18 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup(r2) r4 = open_tree(r3, &(0x7f0000000180)='./file0\x00', 0x801) ioctl$NS_GET_PARENT(r4, 0xb702, 0x0) ioctl$sock_bt_hci(r3, 0x400448cc, &(0x7f0000000240)) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[@ANYBLOB="880000000101010200000000000000000c00000314008fb749f901006e657462696f732d6e7300000c00164000000c243f8bf8d6140018800800014000000008080001400000000040000e8014de367b00018008000100ac1e010108000200ac1414aa0c00028005000100880000001400018008000100e000000208000200000000000600034000010000"], 0x88}, 0x1, 0x0, 0x0, 0x24004890}, 0x40000051) clock_gettime(0x0, &(0x7f0000000840)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/199, 0xc7}, {&(0x7f00000002c0)=""/18, 0x12}, {&(0x7f0000000300)=""/119, 0x77}], 0x3, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{&(0x7f00000004c0), 0x6e, &(0x7f0000000740)=[{&(0x7f0000000540)=""/163, 0xa3}, {&(0x7f0000000600)}, {&(0x7f0000000640)=""/229, 0xe5}], 0x3, &(0x7f0000000780)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}], 0x2, 0x1d89dcd4cb836a5a, &(0x7f0000000880)={r5, r6+10000000}) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x430200, 0x0) dup(r8) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:37:18 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:37:18 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x80108907, 0x0) 05:37:18 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) (fail_nth: 11) 05:37:18 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) 05:37:18 executing program 7: r0 = memfd_secret(0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x100000e, 0x2010, r0, 0x8000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000040), 0x0, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/9p', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000300)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x77359400}, 0x1, 0x1}, 0x87e8) r5 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa, 0x13, r3, 0x10000000) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x6000, @fd_index=0x5, 0xfffffffffffffff9, &(0x7f0000000040)=""/2, 0x2, 0x6, 0x1}, 0x33) syz_io_uring_submit(r2, r5, 0x0, 0x5) [ 726.125565] loop6: detected capacity change from 0 to 10 [ 726.132442] loop1: detected capacity change from 0 to 40 [ 726.133577] loop2: detected capacity change from 0 to 40 [ 726.150303] loop4: detected capacity change from 0 to 40 [ 726.153762] FAT-fs (loop4): invalid media value (0x00) [ 726.154139] FAT-fs (loop4): Can't find a valid FAT filesystem [ 726.161237] loop5: detected capacity change from 0 to 40 05:37:18 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup(r2) ioctl$sock_bt_hci(r3, 0x400448cc, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) 05:37:18 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) 05:37:18 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x801c581f, 0x0) 05:37:18 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) (fail_nth: 12) 05:37:18 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) [ 726.304598] syz-executor.1: attempt to access beyond end of device [ 726.304598] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 726.306516] Buffer I/O error on dev loop1, logical block 10, lost async page write 05:37:19 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz0', "250de7ae009942f1f3e6b5693e7abb4b725f240b924680b1fd8da49a29c3babe784f641033a86820508f066aabeef5a85e98b46c6de8d7914a12df8b291f353c1538dd41aafbb4ac5e300e96c69a25a5271a463d65dcad36cf6b18734a1e00c5c87a60d051476dd78a846c7cea7d82460bbded0c17a6c2933adc9b6156b1d6bb22a035728f973b5be980b765271508f2b27c387612c9461e83e087971ca0f809b2876c6a6b80b2095d0b281cf3449bb9882cb598b2a8f23c40f9af04855b0c7c8479f5180200c5d783248956d37f0bd66fe1dc79813a7fcc074f0ebfebf19fa5ce68008746d52a4b4e6d1e685cf785ff530497aa65efc444f1"}, 0xfd) 05:37:19 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0xc0045878, 0x0) [ 726.343616] loop4: detected capacity change from 0 to 40 [ 726.354377] FAULT_INJECTION: forcing a failure. [ 726.354377] name failslab, interval 1, probability 0, space 0, times 0 [ 726.355902] CPU: 1 PID: 6043 Comm: syz-executor.6 Not tainted 6.4.0-next-20230703 #1 [ 726.356252] FAT-fs (loop4): invalid media value (0x00) [ 726.356955] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 726.356973] Call Trace: [ 726.357358] FAT-fs (loop4): Can't find a valid FAT filesystem [ 726.358394] [ 726.358406] dump_stack_lvl+0xc1/0xf0 [ 726.360198] should_fail_ex+0x4b4/0x5b0 [ 726.360772] ? security_file_alloc+0x38/0x170 [ 726.361398] should_failslab+0x9/0x20 [ 726.361925] kmem_cache_alloc+0x62/0x370 [ 726.362512] security_file_alloc+0x38/0x170 [ 726.363120] ? kmem_cache_alloc+0x313/0x370 [ 726.363730] init_file+0x99/0x250 [ 726.364231] alloc_empty_file+0x94/0x1e0 [ 726.364810] alloc_file+0x5e/0x800 [ 726.365336] alloc_file_pseudo+0x16e/0x260 [ 726.365924] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 726.366583] ? lockdep_annotate_inode_mutex_key+0x4b/0x200 [ 726.367364] ? do_raw_spin_unlock+0x53/0x220 [ 726.368003] __shmem_file_setup+0x202/0x300 [ 726.368613] __do_sys_memfd_create+0x32b/0x940 [ 726.369243] ? __pfx___do_sys_memfd_create+0x10/0x10 [ 726.369935] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 726.370659] do_syscall_64+0x3f/0x90 [ 726.371191] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 726.371911] RIP: 0033:0x7fa31f754b19 [ 726.372443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 726.374738] RSP: 002b:00007fa31ccc9f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 726.375750] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fa31f754b19 [ 726.376677] RDX: 0000000000001400 RSI: 0000000000000000 RDI: 00007fa31f7ae0fb [ 726.377604] RBP: 0000000000000002 R08: 0000000000000a00 R09: ffffffffffffffff [ 726.378520] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000 [ 726.379459] R13: 0000000020000100 R14: 0000000000001400 R15: 0000000020000080 [ 726.380432] 05:37:19 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) [ 726.417086] loop1: detected capacity change from 0 to 40 05:37:19 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0xc0045878, 0x0) [ 726.480632] syz-executor.1: attempt to access beyond end of device [ 726.480632] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 726.481688] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 726.556669] loop5: detected capacity change from 0 to 40 [ 726.602535] syz-executor.2: attempt to access beyond end of device [ 726.602535] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 726.603533] Buffer I/O error on dev loop2, logical block 10, lost async page write 05:37:36 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x110, r0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x200282, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r2) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:37:36 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:37:36 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) 05:37:36 executing program 1: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 05:37:36 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0xc0189436, 0x0) 05:37:36 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) 05:37:36 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) (fail_nth: 13) 05:37:36 executing program 0: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r0, 0x20, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x7f}}, ["", "", ""]}, 0x24}}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r0, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x891}, 0x0) r1 = memfd_secret(0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r1, 0x0) ftruncate(r1, 0x3) syz_io_uring_submit(r2, 0x0, 0x0, 0x0) [ 743.884965] loop2: detected capacity change from 0 to 40 [ 743.897219] loop4: detected capacity change from 0 to 40 [ 743.902579] loop6: detected capacity change from 0 to 10 [ 743.905771] FAT-fs (loop4): invalid media value (0x00) [ 743.906214] FAT-fs (loop4): Can't find a valid FAT filesystem [ 743.928480] loop1: detected capacity change from 0 to 40 [ 743.929374] loop5: detected capacity change from 0 to 40 [ 743.989903] loop4: detected capacity change from 0 to 40 [ 743.996775] FAT-fs (loop4): invalid media value (0x00) [ 743.997172] FAT-fs (loop4): Can't find a valid FAT filesystem 05:37:36 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) r2 = getpgid(0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r4, 0x0, &(0x7f0000000040), 0x0, 0x4) r5 = io_uring_setup(0x7c50, &(0x7f0000000140)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0x14, 0x0, r6) syz_io_uring_submit(r4, 0x0, &(0x7f0000000340)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000300)='./file0\x00', 0x800, 0x4000, 0x1, {0x0, r6}}, 0x1) r7 = gettid() r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = dup(r8) ioctl$sock_bt_hci(r9, 0x400448cc, &(0x7f0000000240)) clone3(&(0x7f0000000180)={0x200000200, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x3b}, &(0x7f00000000c0)=""/29, 0x1d, &(0x7f0000000100)=""/39, &(0x7f0000000140)=[0x0, r2, r7], 0x3, {r9}}, 0x58) 05:37:36 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) (fail_nth: 14) 05:37:36 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) 05:37:36 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0xc020660b, 0x0) 05:37:36 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:37:36 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_set_ext_scan_enable={{0x2042, 0x6}, {0x4, 0x9, 0x0, 0x7fff}}}, 0xa) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup(r2) ioctl$sock_bt_hci(r3, 0x400448cc, &(0x7f0000000240)) write$bt_hci(r3, &(0x7f0000000040)={0x1, @user_confirm_reply={{0x42c, 0x6}, {@none}}}, 0xa) [ 744.194989] syz-executor.1: attempt to access beyond end of device [ 744.194989] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 744.196028] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 744.351058] syz-executor.2: attempt to access beyond end of device [ 744.351058] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 744.352039] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 745.286815] I/O error, dev loop4, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 745.288407] Buffer I/O error on dev loop4, logical block 1, async page read [ 745.300825] systemd-udevd: attempt to access beyond end of device [ 745.300825] loop4: rw=0, sector=2, nr_sectors = 1 limit=0 [ 745.302666] Buffer I/O error on dev loop4, logical block 2, async page read [ 745.319647] systemd-udevd: attempt to access beyond end of device [ 745.319647] loop4: rw=0, sector=3, nr_sectors = 1 limit=0 [ 745.321265] Buffer I/O error on dev loop4, logical block 3, async page read [ 745.324314] systemd-udevd: attempt to access beyond end of device [ 745.324314] loop4: rw=0, sector=4, nr_sectors = 1 limit=0 [ 745.324686] FAULT_INJECTION: forcing a failure. [ 745.324686] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 745.325907] Buffer I/O error on dev loop4, logical block 4, async page read [ 745.327437] CPU: 1 PID: 6108 Comm: syz-executor.6 Not tainted 6.4.0-next-20230703 #1 [ 745.327471] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 745.327487] Call Trace: [ 745.327495] [ 745.327505] dump_stack_lvl+0xc1/0xf0 [ 745.331406] should_fail_ex+0x4b4/0x5b0 [ 745.331923] __should_fail_alloc_page+0xe0/0x110 [ 745.332559] prepare_alloc_pages+0x178/0x500 [ 745.333159] __alloc_pages+0x149/0x480 [ 745.333688] ? __pfx___alloc_pages+0x10/0x10 [ 745.334257] ? __pfx___lock_acquire+0x10/0x10 [ 745.334849] ? mark_lock.part.0+0xef/0x2f50 [ 745.335408] ? lock_acquire+0x19a/0x4c0 [ 745.335935] ? __pfx_mark_lock.part.0+0x10/0x10 [ 745.336005] systemd-udevd: attempt to access beyond end of device [ 745.336005] loop4: rw=0, sector=5, nr_sectors = 1 limit=0 [ 745.336518] ? avc_has_perm_noaudit+0x10b/0x3a0 [ 745.337986] Buffer I/O error on dev loop4, logical block 5, async page read [ 745.338501] vma_alloc_folio+0xe2/0x480 [ 745.339885] shmem_alloc_folio+0x11c/0x1f0 [ 745.340444] ? __pfx_shmem_alloc_folio+0x10/0x10 [ 745.341063] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 745.341849] ? percpu_counter_add_batch+0xc8/0x180 [ 745.342489] ? __vm_enough_memory+0x188/0x3f0 [ 745.343078] shmem_get_folio_gfp.constprop.0+0x794/0x17d0 [ 745.343813] ? __pfx_shmem_get_folio_gfp.constprop.0+0x10/0x10 [ 745.344595] shmem_write_begin+0x148/0x360 [ 745.345173] ? __pfx_shmem_write_begin+0x10/0x10 [ 745.345796] ? ktime_get_coarse_real_ts64+0x100/0x190 [ 745.346164] systemd-udevd: attempt to access beyond end of device [ 745.346164] loop4: rw=0, sector=6, nr_sectors = 1 limit=0 [ 745.346479] generic_perform_write+0x26f/0x5e0 [ 745.347930] Buffer I/O error on dev loop4, logical block 6, async page read [ 745.348453] ? __pfx_generic_perform_write+0x10/0x10 [ 745.349982] ? __pfx_file_update_time+0x10/0x10 [ 745.350600] ? __pfx_generic_write_checks+0x10/0x10 [ 745.351264] __generic_file_write_iter+0x160/0x1a0 [ 745.351905] generic_file_write_iter+0xe7/0x350 [ 745.352520] vfs_write+0x97d/0xda0 [ 745.353013] ? __pfx_vfs_write+0x10/0x10 [ 745.353582] __x64_sys_pwrite64+0x1f6/0x250 [ 745.353811] systemd-udevd: attempt to access beyond end of device [ 745.353811] loop4: rw=0, sector=7, nr_sectors = 1 limit=0 [ 745.354134] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 745.355583] Buffer I/O error on dev loop4, logical block 7, async page read [ 745.356134] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 745.357721] do_syscall_64+0x3f/0x90 [ 745.358235] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 745.358886] RIP: 0033:0x7fa31f707ab7 [ 745.359362] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 745.361390] RSP: 002b:00007fa31ccc9f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 745.362324] RAX: ffffffffffffffda RBX: 00007fa31f79e970 RCX: 00007fa31f707ab7 [ 745.363138] RDX: 0000000000000017 RSI: 0000000020010000 RDI: 0000000000000004 [ 745.363944] RBP: 0000000000000002 R08: 0000000000000000 R09: ffffffffffffffff [ 745.364755] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 745.365558] R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000 [ 745.366382] [ 745.454223] loop6: detected capacity change from 0 to 10 [ 745.456959] FAT-fs (loop6): bogus number of reserved sectors [ 745.457766] FAT-fs (loop6): Can't find a valid FAT filesystem [ 761.315552] loop5: detected capacity change from 0 to 40 05:37:54 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) 05:37:54 executing program 7: r0 = memfd_secret(0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) epoll_create1(0x80000) ftruncate(r0, 0x60c) 05:37:54 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:37:54 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:37:54 executing program 1: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 05:37:54 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_setup(0x6577, &(0x7f0000000000)={0x0, 0x415f, 0x2, 0x1, 0x13d, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/9p', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000300)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x77359400}, 0x1, 0x1}, 0x87e8) r5 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa, 0x13, r3, 0x10000000) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x6000, @fd_index=0x5, 0xfffffffffffffff9, &(0x7f0000000040)=""/2, 0x2, 0x6, 0x1}, 0x33) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = dup(r6) ioctl$sock_bt_hci(r7, 0x400448cc, &(0x7f0000000240)) ioctl$TIOCMGET(r7, 0x5415, &(0x7f0000000100)) syz_io_uring_submit(r1, r2, 0x0, 0x80000000) 05:37:54 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) 05:37:54 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x60, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xf665}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x7088f8dd1f27732c) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) [ 761.338649] loop4: detected capacity change from 0 to 40 [ 761.341490] loop1: detected capacity change from 0 to 40 [ 761.350532] FAT-fs (loop4): invalid media value (0x00) [ 761.351377] FAT-fs (loop4): Can't find a valid FAT filesystem [ 761.358183] loop2: detected capacity change from 0 to 40 [ 761.358248] loop6: detected capacity change from 0 to 10 05:37:54 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FIOCLEX(r2, 0x5451) r3 = open(&(0x7f0000000000)='./file0\x00', 0x2000, 0x143) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup(r4) ioctl$sock_bt_hci(r5, 0x400448cc, &(0x7f0000000240)) fchown(r5, 0x0, 0x0) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x1, 0x2}, 0x6) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) 05:37:54 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) 05:37:54 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) [ 761.474294] syz-executor.1: attempt to access beyond end of device [ 761.474294] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 761.475431] Buffer I/O error on dev loop1, logical block 10, lost async page write 05:37:54 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={0xffffffffffffffff, 0x100, 0x61e700, 0x9}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x8, 0x0, 0x4, 0x1, 0x0, 0x8001, 0x920, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x6, 0x45}, 0x40000, 0x100000000, 0xfffffffb, 0x4, 0x1f, 0x10000, 0x3, 0x0, 0x9, 0x0, 0x3}, 0xffffffffffffffff, 0xf, r1, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup(r2) ioctl$sock_bt_hci(r3, 0x400448cc, 0x0) [ 761.552396] loop4: detected capacity change from 0 to 40 [ 761.556108] loop5: detected capacity change from 0 to 40 05:37:54 executing program 7: r0 = memfd_secret(0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r1) ioctl$sock_bt_hci(r0, 0x800448d0, &(0x7f0000000240)) memfd_secret(0x80000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup(r2) ioctl$sock_bt_hci(r3, 0x400448cc, &(0x7f0000000240)) r4 = syz_io_uring_complete(0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4}, './file0/file0\x00'}) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cc, &(0x7f0000000240)) r6 = io_uring_setup(0x7c50, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1}) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x14, 0x0, r7) syz_io_uring_submit(r5, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/74, 0x4a}], 0x1, &(0x7f0000000180)=""/58, 0x3a}, 0x0, 0x141, 0x0, {0x3, r7}}, 0x9) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r5, 0x0, 0x0, 0x0) 05:37:54 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:37:54 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x3) [ 761.576164] FAT-fs (loop4): invalid media value (0x00) [ 761.576905] FAT-fs (loop4): Can't find a valid FAT filesystem 05:37:54 executing program 1: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) [ 761.596408] loop6: detected capacity change from 0 to 10 [ 761.643008] loop1: detected capacity change from 0 to 40 05:37:54 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x3, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) [ 761.756058] loop6: detected capacity change from 0 to 10 [ 761.862390] syz-executor.1: attempt to access beyond end of device [ 761.862390] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 761.863449] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 776.206781] loop1: detected capacity change from 0 to 40 05:38:08 executing program 0: r0 = memfd_secret(0x80000) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:38:08 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 05:38:08 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:38:08 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000040)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r2) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x10200, 0x80) r4 = dup(r3) ioctl$sock_bt_hci(r4, 0x400448dc, &(0x7f0000000140)="43ec72168b5631a87d284a1f2beed4df4b1c04c476773b870ea5f5565f10ce4250e7fc0dc8e3f9d4a545cec37edcb3bb5e6c984a3ed5c829682f056066e4aa20bf16408f6ba1367a3a8ba3901c29cdbf3178442baf3a12a46a74baac09bd58b0755a4a3cdbd2be148491ce643870e39a24100683b3cd3b0f40fe79b73982e6602e92dac29c554fddc4351e7e57b9f65f43639d9e68ce4b9638cec52e4071b69919c96d29981c4f64293422d2af198a2ca25c") sendfile(r2, r4, &(0x7f0000000000)=0x99, 0x2) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000100)={0x100, 0x1, 0x8}) 05:38:08 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) 05:38:08 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) 05:38:08 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) write$P9_RCREATE(r0, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x2, 0x4, 0x3}, 0x9}}, 0x18) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r2 = dup2(r0, r0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0xffff) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000012c0)={0x0, 0x0}) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400)={r7}, 0xc) sendmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000011c0)=[{&(0x7f00000000c0)="1e95855f96e69089360508790eaec5ac0ba2dfc1c48e593b6ceff2e7d025b0859aedc5209dd9f780244a79f572b01fb98d49909ec6ccf228b0042dc609c9eeb5e7e14fba902efbdb558ccdec3df13a18715ae3f9698d4be54da4e711f96dffa6059e3a9c668aa76d801b3f5627cd55515a81fd0ff6f3c3b3766ad2f0f5610f993f377f9bb69a4453a72feb0ae2dbb616852e74e420e2ae814609223f0719dbdaeb7816fe8ee535ca0876349b0346f9cf41560889edcb606610ee0bff359d7ae9709a781cba5bd9b981b4b9a3d614ea097d5a3d458f1fe1bdd5320f59d2aae46e30d04dfeeec37c00000000000000", 0xee}, {&(0x7f00000001c0)="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", 0x1000}], 0x2, &(0x7f0000001400)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000000010000000200000019f9db727d42ee87185d416e46ab93b981b08c939cc54d17e09730bfe932638550", @ANYRES32=r5, @ANYRES32, @ANYRES32=r6, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRESDEC, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="008a1805550f3e4718b04d1a5411752f00000013e3a6e1d7dba82dc834c7fadc48a81745a70bfcb36bbb4a3860fbfcd3dbf5430e154151876b882db97a939db56b440c4c02f0c8ed28e298dc1368df0836cc1c1c65e2633937feb820b058533b1abd7b12e4afb8642b5a233e49a131e8ee48da1d6e11fdaf6d708da1bc509c7fe930fb58df108b71eb9bb8fd836222ed8b5fc338eb6f7785bfb2a062e28552cf9a7783"], 0xb0, 0x20040840}, 0xc805) 05:38:08 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) [ 776.234079] loop6: detected capacity change from 0 to 10 [ 776.259632] loop5: detected capacity change from 0 to 40 05:38:08 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x5, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) [ 776.284111] loop2: detected capacity change from 0 to 40 [ 776.293648] loop4: detected capacity change from 0 to 40 [ 776.300399] syz-executor.1: attempt to access beyond end of device [ 776.300399] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 776.306649] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 776.311821] FAT-fs (loop4): bogus number of FAT sectors [ 776.312649] FAT-fs (loop4): Can't find a valid FAT filesystem 05:38:09 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) [ 776.347336] loop6: detected capacity change from 0 to 10 [ 776.376284] loop5: detected capacity change from 0 to 40 05:38:09 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 05:38:09 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:38:09 executing program 7: r0 = memfd_secret(0x80000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x4, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000080)=[r0, r2], 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r4, 0x0, &(0x7f0000000040), 0x0, 0x4) syz_io_uring_submit(r4, 0x0, 0x0, 0x0) r5 = openat(r0, &(0x7f00000000c0)='./file1\x00', 0x406201, 0x88) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x6, 0x98, 0x80, 0x0, 0x9d, 0x52, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_config_ext={0x856, 0x8}, 0x410, 0x101, 0xff, 0x0, 0x8, 0x0, 0x7ff, 0x0, 0xda01, 0x0, 0x6}, 0x0, 0xe, r5, 0x3) 05:38:09 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x6, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:38:09 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xf, 0xffffffffffffffff, 0x3) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup(r2) ioctl$sock_bt_hci(r3, 0x400448cc, &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=r0, @ANYBLOB="03000000000000002e2f66696c653000"]) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r5, {0x7f, 0x400}}, './file0\x00'}) perf_event_open(&(0x7f0000000100)={0x4, 0x13, 0x40, 0x8, 0x3f, 0x1, 0x0, 0xa780, 0x14000, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x79f, 0x4, @perf_config_ext={0x1, 0x8}, 0x1148, 0x1ff, 0x6, 0xb, 0x9, 0xfffffff8, 0x1, 0x0, 0x400, 0x0, 0x3}, 0x0, 0x5, 0xffffffffffffffff, 0x8) r6 = dup(r1) ioctl$sock_bt_hci(r6, 0x400448cc, 0x0) 05:38:09 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) [ 776.479648] loop6: detected capacity change from 0 to 10 05:38:09 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) [ 776.548689] loop5: detected capacity change from 0 to 40 [ 776.557072] loop4: detected capacity change from 0 to 40 [ 776.569960] FAT-fs (loop4): bogus number of FAT sectors [ 776.570782] FAT-fs (loop4): Can't find a valid FAT filesystem 05:38:24 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:38:24 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 05:38:24 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x7, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:38:24 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) 05:38:24 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup(r2) ioctl$sock_bt_hci(r3, 0x400448cc, &(0x7f0000000240)) r4 = syz_open_dev$hidraw(&(0x7f0000001880), 0x27d480000000000, 0x101680) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r5) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r6) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000018c0)=0x0) clock_gettime(0x0, &(0x7f0000002580)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f00000024c0)=[{{&(0x7f0000001900), 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000001980)=""/180, 0xb4}, {&(0x7f0000001a40)=""/84, 0x54}, {&(0x7f0000001ac0)=""/171, 0xab}, {&(0x7f0000001b80)=""/236, 0xec}, {&(0x7f0000001c80)=""/220, 0xdc}, {&(0x7f0000001d80)=""/50, 0x32}], 0x6, &(0x7f0000001e40)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x160}}, {{&(0x7f0000001fc0)=@abs, 0x6e, &(0x7f00000020c0)=[{&(0x7f0000002040)=""/86, 0x56}], 0x1, &(0x7f0000002100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000002140), 0x6e, &(0x7f0000002400)=[{&(0x7f00000021c0)=""/53, 0x35}, {&(0x7f0000002200)=""/108, 0x6c}, {&(0x7f0000002280)=""/85, 0x55}, {&(0x7f0000002300)=""/127, 0x7f}, {&(0x7f0000002380)=""/19, 0x13}, {&(0x7f00000023c0)=""/63, 0x3f}], 0x6, &(0x7f0000002480)}}], 0x3, 0x40000000, &(0x7f00000025c0)={r8, r9+10000000}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002680)={&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001700)=[{&(0x7f00000000c0)="d7750eb1cc2bfc7967e43e02b4cc313aa5bc4877ce2a01b9f0792b39009dce31771ccfd34f3eedf604cb878a7586ddfc50d2b0b034d19645d6deddf7b68727ff89", 0x41}, {&(0x7f0000000140)="eab2b27e7e9a8656f29df31acb1adec2d89e5f0b96d7ed9cd0045dfa32a9b11a1179157f99c95ffce018fb82048cde739691425ac2d3444c6ebc4ee9708e3bd6ec0c91ee7cfe00b861a63af7520724b373caedecdc9a7e2f74250f53f74fb9405910c50322730ab977febf19f6dbb9fa3ed90d6edbb019232f1a62ea18ac0f3010a028eabbfbdb537277603d279f0d13843abe0b605195cbb447e57660acb1cfc73e49efce355ec41d3b22efecd0dcdabc9facc774bfe5565484966b1eaedacfc8ce5807d3d0ad3c4e109af822a03bae4d", 0xd1}, {&(0x7f0000000240)="c8ecc6ee5c08f8e536a8b61cb7ca563a17837ce8d863a3fdbcc4e1686324b077d253978599f02bcbdfc6c9643ddcde75c7397cdd48411378f9be53aa457db71c43c21cc532023b1f308f126f3a3d5f643f562b83a38e11f4ea93819e438319add43656f1ed0d481e97dabc626a213a6af8d7f5fc4fdc29bd4406438848ef1302f8726fd2422b1f36abdc3625ce8015d5ba", 0x91}, {&(0x7f0000000300)="7a0bf1649767e4bdcda8cfadc4607a997b220e86e7d00b43", 0x18}, {&(0x7f0000000340)="9609a3d838e5a13b84600f8b93990cece43f03e87142fdfb81cbd30b9df9cbf61ec7f2fe3856ed58b2ab50c6fb9215cef99a4837b4592515203a79f2417ecf06217abe33259063b1206244b88ba2a8a63930ab09af9a5f2686151096ac1a8c04fc2efc1d5aab350620ca3dbaff19e8a072d812087465577ba5a177324996556a8f5dbff3e07d077c3c4131bd75fe68a228774b9ff98a9a82eaed086f20d642f61f0182c4d191633de0dc7907e1993bf74fdd6a902b2071c08810ba66d0dd30791e785cc1cc77cb0998f0488bf03300671048d5cfab8477dcb232c1d82d3bfb6e", 0xe0}, {&(0x7f0000000440)="c9616f3546ea51899f0fc42e8bacada7b6131dd705230d4982f537e3276877245c5ab176a41212c544a1d536e3a26a4df047f4338aab139be5779f2afa68e23fbc4a177cf54d89f0877f67e6b8d3b84522735e65414f0165901f0b5819f06ca502afb3183f0bfcf473311a8c3de2d194e26240f34dcacc7174c92bca926135", 0x7f}, {&(0x7f00000004c0)="27fb9c4e2523241ae6d898644ec3c8d2a291ab67cc7b0c823d63d76ea836d625b0884768767e52eee8431cde4e4316486513739aeb1b008644567076f82487ee0a2592a58a29b6bdfd0ed4bf0bc77021d98a4973899395bfabf0760fd25a53688fc46f7d4cf222caf58ea74b7210e15abca396e95ebaacc8cc1176", 0x7b}, {&(0x7f0000000540)="b217ed97efd570866c1dabf318b154b944fb64ab55777a63f8d94d2392cb02d82b59a22ecbf0b68fe8c5795190fc9fcd154a67f9953bedcf28aec30fa0db7a604a3f231df0cfb256242e66b22df3db5112fe7637b3a029c01556ff7dbc72ecfc5e9c7e4fc9d8b7e6235ec8db05de50e63e7ed1c19f26dc073767bafa234785aaccc7047c78add958040ed518aed1651e7c4179227c682131c11de6ddf75f574cfb1ec0fb4357b792779f970c5c72b7dfeb2f4bc5a882e169bfd0beef64969d8268a7ac1734", 0xc5}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000001640)="e5bc1c1d376ab788f093e3beda4923325604b6648f7800f67cc340276133cae6a3bccb848566ba827c34f7156df6b9dde4f558c398e29000c584c3ef1797ea27caa892782b0100fa68649ebf1d611eafc1e77d70e1ef3c673198070da51af083fd2fec6ff5ce0d5f8df106fda987175c2637bcd7b89024d5797ea97db43ef5ac70c7ae57803bc7cd091ee93692064749e3177df36c13b769873903981fc0c303f9da0b8b", 0xa4}], 0xa, &(0x7f0000002600)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r3, r0, r4, r0, r0, r5, r0, r6, r0]}}, @cred={{0x1c, 0x1, 0x2, {r7, r10, 0xee00}}}], 0x78, 0x40}, 0x4040) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r12 = dup(r11) ioctl$sock_bt_hci(r12, 0x400448cc, &(0x7f0000000240)) fcntl$dupfd(r0, 0x406, r12) 05:38:24 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) 05:38:24 executing program 7: r0 = memfd_secret(0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x100010, 0xffffffffffffffff, 0x10000000) r1 = syz_io_uring_setup(0xed9, &(0x7f0000000000)={0x0, 0xa28, 0x20, 0x2, 0x3de}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x0, &(0x7f0000000040), 0x0, 0x4) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/9p', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = dup(r6) ioctl$sock_bt_hci(r7, 0x400448cc, &(0x7f0000000240)) poll(&(0x7f0000000180)=[{}, {r4, 0x1101}, {r4, 0x80}, {r1, 0x9001}, {r7, 0x2095}], 0x5, 0x7) syz_io_uring_submit(r5, 0x0, &(0x7f0000000300)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x77359400}, 0x1, 0x1}, 0x87e8) r8 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa, 0x13, r4, 0x10000000) syz_io_uring_submit(r5, r8, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x6000, @fd_index=0x5, 0xfffffffffffffff9, &(0x7f0000000040)=""/2, 0x2, 0x6, 0x1}, 0x33) syz_io_uring_submit(r3, r8, 0x0, 0x0) 05:38:24 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x400000000000000, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) [ 792.156272] loop5: detected capacity change from 0 to 40 [ 792.166490] loop1: detected capacity change from 0 to 40 [ 792.181571] loop6: detected capacity change from 0 to 10 [ 792.195078] loop2: detected capacity change from 0 to 40 05:38:24 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) [ 792.221779] audit: type=1400 audit(1688449104.939:13): avc: denied { tracepoint } for pid=6226 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 792.239499] loop4: detected capacity change from 0 to 40 [ 792.260969] FAT-fs (loop4): bogus number of FAT sectors [ 792.261913] FAT-fs (loop4): Can't find a valid FAT filesystem [ 792.270005] loop5: detected capacity change from 0 to 40 [ 792.306798] syz-executor.1: attempt to access beyond end of device [ 792.306798] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 792.308628] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 792.331000] syz-executor.2: attempt to access beyond end of device [ 792.331000] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 792.332175] Buffer I/O error on dev loop2, logical block 10, lost async page write 05:38:25 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) 05:38:25 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() wait4(r1, &(0x7f0000000240), 0x8, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)=0x0) r3 = fork() wait4(r3, &(0x7f0000000240), 0x8, 0x0) tgkill(r3, r3, 0x6) ptrace(0x11, r3) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x40, 0x80, 0x5, 0xfe, 0x0, 0xfff, 0x1, 0xb, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x5, 0x1}, 0x790d, 0x7ff, 0x5, 0x0, 0x4, 0x1000, 0x8, 0x0, 0x5, 0x0, 0x200}, r2, 0x7, r0, 0x0) tgkill(r1, r1, 0x6) r4 = syz_open_dev$vcsn(&(0x7f0000000100), 0x3f, 0x10400) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x1f, 0x4, 0x4, 0x8, 0x0, 0x30000000000, 0x4000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd6, 0x7}, 0x100, 0x3, 0x51, 0x8, 0x0, 0x2, 0x5, 0x0, 0xfff, 0x0, 0x4}, r1, 0x10, r4, 0x2) ptrace(0x8, r1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = dup(r5) ioctl$sock_bt_hci(r6, 0x400448cc, 0x0) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x3f, 0x7e, 0x5, 0x0, 0x9, 0x31840, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000200), 0x2509e804fe025601}, 0x100, 0x971, 0x7fffffff, 0x6, 0xabf, 0x7f, 0xffe0, 0x0, 0xcc, 0x0, 0xd558}, r1, 0x9, r0, 0x8) 05:38:25 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000100), 0xfff, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000080}, 0x84) 05:38:25 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x8, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:38:25 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000000)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"d29cd1a2a9bf4c94cb2866a7344a3931", 0x0, r2, {0x40, 0x8226}, {0xe85, 0x8}, 0x2, [0x3, 0x0, 0x2, 0x4ca, 0x1, 0xfffffffffffffffc, 0x0, 0x1, 0x3, 0x7, 0xfffffffeffffffff, 0x80000000, 0x9, 0x4, 0x0, 0x100000000]}) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:38:25 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, 0x0) [ 792.405358] loop6: detected capacity change from 0 to 10 05:38:25 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) [ 792.438528] loop1: detected capacity change from 0 to 40 [ 792.468337] loop4: detected capacity change from 0 to 40 [ 793.018134] syz-executor.1: attempt to access beyond end of device [ 793.018134] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 793.019122] Buffer I/O error on dev loop1, logical block 10, lost async page write 05:38:38 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000008, 0x13, r0, 0x0) ftruncate(r0, 0x3) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r0, 0x1) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:38:38 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) 05:38:38 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x9, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:38:38 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 05:38:38 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000000)=0x1) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x1254e0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4, 0xc0, 0x40, 0xff, 0x0, 0x46, 0xa, 0x17, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x8, 0x2}, 0x40, 0xb4, 0x2, 0x9, 0x80, 0x3, 0xfff7, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x5, r2, 0x1) r3 = dup(r1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r4) recvfrom(r4, &(0x7f0000000180)=""/105, 0x69, 0x0, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e22, @empty}, 0x0, 0x1, 0x2, 0x3}}, 0x80) ioctl$sock_bt_hci(r3, 0x400448cc, 0x0) 05:38:38 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, 0x0) 05:38:38 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:38:38 executing program 7: r0 = memfd_secret(0x0) r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x10000, 0x1) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) fdatasync(r0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) ftruncate(r0, 0x3) syz_io_uring_submit(r2, 0x0, 0x0, 0x0) [ 805.441699] loop1: detected capacity change from 0 to 40 [ 805.446956] loop6: detected capacity change from 0 to 10 [ 805.449335] loop5: detected capacity change from 0 to 40 [ 805.454272] loop4: detected capacity change from 0 to 40 [ 805.467608] loop2: detected capacity change from 0 to 40 05:38:38 executing program 0: r0 = memfd_secret(0x0) ftruncate(r0, 0x8) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) syz_io_uring_setup(0x3836, &(0x7f0000000000)={0x0, 0xa85a, 0x10, 0x0, 0xdf, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_READ_FIXED={0x4, 0x5, 0x4007, @fd_index=0x4, 0x40, 0x80, 0x8, 0xa}, 0x7) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:38:38 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x18100) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/file0\x00'}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x13, r4, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r5, 0x0, &(0x7f0000000040), 0x0, 0x4) syz_io_uring_complete(r5) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_setup(0x704b, &(0x7f00000000c0)={0x0, 0x86c9, 0x20, 0x2, 0x26c, 0x0, r3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:38:38 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, 0x0) 05:38:38 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xa, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:38:38 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) [ 805.907297] loop5: detected capacity change from 0 to 40 [ 805.942964] loop4: detected capacity change from 0 to 40 05:38:38 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r2) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:38:38 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000010c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000001300)={0x1f, 0x1, 0x3}, 0x6) r3 = dup(r2) ioctl$sock_bt_hci(r3, 0x400448cc, &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cc, &(0x7f0000000240)) r5 = io_uring_setup(0x7c50, &(0x7f0000000140)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0x14, 0x0, r6) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r6) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f00000000c0)={{r4}, 0x0, 0x0, @inherit={0x50, &(0x7f0000000040)={0x0, 0x1, 0x6, 0x4, {0x22, 0x0, 0x10000, 0x5, 0xff}, [0x2]}}, @name="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"}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r7) ftruncate(r7, 0x23) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:38:38 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup(r2) ioctl$sock_bt_hci(r3, 0x400448cc, &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) [ 806.239117] loop6: detected capacity change from 0 to 10 [ 806.304205] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 05:38:38 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xb, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:38:39 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) [ 806.351499] loop6: detected capacity change from 0 to 10 [ 806.391097] loop1: detected capacity change from 0 to 40 [ 806.656102] syz-executor.1: attempt to access beyond end of device [ 806.656102] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 806.664962] Buffer I/O error on dev loop1, logical block 10, lost async page write 05:38:50 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000001f40)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="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"]) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r4, 0xc0a85352, &(0x7f00000000c0)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r4, 0xc0a85322, &(0x7f00000015c0)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000000180)={0x7f7, 0x10000, 0xfffffffb, 0x3, 0x1, 0x200}) r5 = mq_open(&(0x7f0000000000)='@\x00', 0xc1, 0xb2, &(0x7f0000000040)={0xa554, 0x7, 0x7ffd, 0x8}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000500)={{}, r6, 0x12, @unused=[0x1, 0x1, 0x7ff, 0x6], @subvolid=0x80000000}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000200)={{r4}, r6, 0x18, @unused=[0x3ff, 0xcd0, 0x0, 0x4], @name="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"}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000f40)={{r3}, r6, 0x10, @inherit={0x50, &(0x7f00000002c0)={0x0, 0x1, 0x8, 0x7fff, {0x2, 0x8, 0x36d, 0x651, 0x9}, [0x5]}}, @subvolid=0x20}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000100)={{}, r6, 0x2, @unused=[0x4, 0xe2f, 0x820, 0x4], @devid}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000280)={"23be3481c9a48b7942a2d3c4305a9f8a", 0x0, r6, {0x3, 0x20}, {0x5, 0xffff18ab}, 0x4, [0x6, 0x3, 0x8, 0x9, 0x9, 0x81, 0xfffffffffffffffe, 0xcd, 0x2, 0x9, 0xffff, 0x6, 0x3ff000000000000, 0x7, 0x4, 0x9]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000000c0)={{}, r6, 0xa, @unused=[0x6, 0x5c99, 0x7, 0xfffffffffffffff7], @devid}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000000)={"24dfe3498d9f9a05094633948b496d37", 0x0, 0x0, {0xfa91, 0x80000001}, {0x40, 0x8}, 0x401, [0x70bc5b74, 0x1200, 0xffffffffffffdb5a, 0xfffffffffffff913, 0x8001, 0x8, 0x4, 0x2, 0x6, 0xeb12, 0x7fffffff, 0x2, 0xfffffffffffffff8, 0x5377, 0x80000001, 0x3]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"7eb2a397d8ce2d91267fd99b8cb04ef4", r6, r7, {0x43c1, 0x7}, {0x0, 0x3ff}, 0x2, [0xfffffffffffffff9, 0x0, 0x3, 0x101, 0xfffffffffffffbac, 0x2, 0x7dc, 0x4, 0x0, 0x667, 0x8, 0x9e, 0x5, 0x7d81, 0x6, 0x1]}) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:38:50 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x0, &(0x7f0000000040), 0x0, 0x4) syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x4004, @fd=r0, 0x6, &(0x7f0000000000)=""/40, 0x28, 0x8}, 0x80000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:38:50 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) 05:38:50 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xd, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:38:50 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:38:50 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:38:50 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 05:38:50 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0xb000, 0x4) r1 = dup(r0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x3, 0xa2f8ab315a120a25, 0x4}) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) [ 818.268384] loop6: detected capacity change from 0 to 10 [ 818.270184] loop5: detected capacity change from 0 to 40 [ 818.299824] loop2: detected capacity change from 0 to 40 [ 818.302551] loop4: detected capacity change from 0 to 40 [ 818.318560] loop1: detected capacity change from 0 to 40 05:38:51 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xe, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:38:51 executing program 0: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) 05:38:51 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) 05:38:51 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup(r2) ioctl$sock_bt_hci(r3, 0x400448cc, &(0x7f0000000240)) ftruncate(r3, 0x3f) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:38:51 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) write$bt_hci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0103080ac9005d08070804007fffa0419ab9684f90d79b5878967c1827322e009a76e41c3142c51cea319725884f4813b878fa33beab9bbc2b798e2009ddf5c6a065c5a78eb52bd868e47754b6f40f01e2cb248e65d1f53d1ccd8febe4575f8fb5e30898e2d7ef723a3939319d15a468d609b5d89b87c8d0983cb4a92f0408ab5323bb451ad35f837030f7c999dc951bcb7dae8a3e140c7d357a0b12d44e1f199782555f08032eefc1dde14b295a584d7e65e4e1602eeea65fa13625ed1da8277e6969691472b2da17c17bd2be008334af9e7b998f4346abeb5d624c9fc8ece593c601d5832b16e64f9502db4323"], 0xe) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)={0x0, 0xfb, 0x4a, 0x0, 0x40, "dfa312000f3e1ee6bc709b55cc44221d", "473626479beaa0cc09238f3b1ceac177b3ce632af159e541a999d9d8151c861953f8b49c24b274bb79dec8bea7f08c2e72df6b01c6"}, 0x4a, 0x1) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) 05:38:51 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x114, &(0x7f0000000000)=0x1, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:38:51 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x3) [ 818.470053] loop6: detected capacity change from 0 to 10 [ 818.475875] loop5: detected capacity change from 0 to 40 05:38:51 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xf, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) [ 818.550954] loop6: detected capacity change from 0 to 10 [ 818.887622] syz-executor.1: attempt to access beyond end of device [ 818.887622] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 818.889951] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 832.960209] loop4: detected capacity change from 0 to 10 05:39:05 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) 05:39:05 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000640)={{{@in, @in6=@dev}}, {{@in6=@private2}, 0x0, @in6=@remote}}, &(0x7f0000000740)=0xe8) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8916, &(0x7f0000000380)={@empty, 0x0, r4}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x1) write$binfmt_aout(r6, &(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYBLOB, @ANYRES32, @ANYRES64, @ANYRESHEX], 0x24f) lsetxattr$trusted_overlay_origin(&(0x7f0000000380)='./file0\x00', &(0x7f00000004c0), &(0x7f0000000500), 0x2, 0x2) io_submit(0x0, 0x1, &(0x7f0000000100)=[0x0]) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000540)={'#! ', './file0', [{0x20, 'vfat\x00'}, {0x20, '/dev/urandom\x00'}, {0x20, 'trusted.overlay.origin\x00'}]}, 0x37) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r6, r5, 0x0, 0xfffffdef) 05:39:05 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:39:05 executing program 4: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xd, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:39:05 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:39:05 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:39:05 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 05:39:05 executing program 7: r0 = memfd_secret(0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x3000003, 0x15, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) fallocate(r0, 0x17, 0x6, 0x101) [ 832.982983] loop6: detected capacity change from 0 to 10 [ 832.989247] loop1: detected capacity change from 0 to 40 [ 833.019979] loop2: detected capacity change from 0 to 40 [ 833.022968] loop3: detected capacity change from 0 to 40 05:39:05 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup(r2) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup(r4) ioctl$sock_bt_hci(r5, 0x400448cc, &(0x7f0000000240)) sendmsg$NL80211_CMD_DEL_MPATH(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x78}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008001}, 0x4048010) ioctl$sock_bt_hci(r3, 0x400448cc, &(0x7f0000000240)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_complete(r1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000380)={@empty, 0x0, r8}) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @private2, 0x40, 0xd4f, 0x2, 0x0, 0x8, 0x20010, r8}) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:39:05 executing program 4: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xd, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:39:05 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x11, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:39:05 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ftruncate(r2, 0x5) connect$netlink(0xffffffffffffffff, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc, 0x400000}, 0xc) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:39:05 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) [ 833.203171] loop4: detected capacity change from 0 to 10 [ 833.209340] loop6: detected capacity change from 0 to 10 [ 833.376566] syz-executor.3: attempt to access beyond end of device [ 833.376566] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 833.377692] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 833.514457] syz-executor.1: attempt to access beyond end of device [ 833.514457] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 833.516207] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 835.671903] syz-executor.3: attempt to access beyond end of device [ 835.671903] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 835.672779] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 835.673360] syz-executor.3: attempt to access beyond end of device [ 835.673360] loop3: rw=2049, sector=44, nr_sectors = 4 limit=40 [ 835.701039] syz-executor.3 (6387) used greatest stack depth: 23552 bytes left 05:39:18 executing program 0: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f00000000c0)) ftruncate(0xffffffffffffffff, 0x3) syz_io_uring_submit(r0, 0x0, 0x0, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x4004, @fd, 0x7, &(0x7f0000000000)=""/124, 0x7c, 0x13, 0x1, {0x0, r1}}, 0x3e00) 05:39:18 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x18, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:39:18 executing program 3: perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xb}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) r2 = openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040), 0x2, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000100)=0x1) 05:39:18 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:39:18 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x50, r0, 0x0) 05:39:18 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) 05:39:18 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 05:39:18 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) [ 846.278312] loop6: detected capacity change from 0 to 10 [ 846.279774] loop1: detected capacity change from 0 to 40 [ 846.281446] loop2: detected capacity change from 0 to 40 [ 846.284312] loop4: detected capacity change from 0 to 40 05:39:19 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2f, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:39:19 executing program 7: r0 = memfd_secret(0x80000) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:39:19 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) [ 846.397969] loop6: detected capacity change from 0 to 10 05:39:19 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:39:19 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x5, 0xf0, 0xd0, 0x1, 0x0, 0x1, 0x63046, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x10001, 0x1}, 0x4, 0x0, 0xfffffc36, 0x0, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9}, 0xffffffffffffffff, 0x2, r1, 0x4) 05:39:19 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x48, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) [ 846.473332] syz-executor.4: attempt to access beyond end of device [ 846.473332] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 846.474565] Buffer I/O error on dev loop4, logical block 10, lost async page write 05:39:19 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) [ 846.509112] loop6: detected capacity change from 0 to 10 05:39:19 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup(r2) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup(r4) ioctl$sock_bt_hci(r5, 0x400448cc, &(0x7f0000000240)) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) write$P9_RGETLOCK(r5, &(0x7f0000000040)={0x28, 0x37, 0x1, {0x0, 0x1af, 0x101, r6, 0xa, '%+N:#::{@,'}}, 0x28) ioctl$sock_bt_hci(r3, 0x400448cc, &(0x7f0000000240)) dup3(r3, r0, 0x80000) [ 846.527550] syz-executor.5: attempt to access beyond end of device [ 846.527550] loop5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 846.534818] FAT-fs (loop5): unable to read boot sector [ 846.548433] loop1: detected capacity change from 0 to 40 [ 846.933519] syz-executor.1: attempt to access beyond end of device [ 846.933519] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 846.935488] Buffer I/O error on dev loop1, logical block 10, lost async page write 05:39:33 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4c, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:39:33 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:39:33 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 05:39:33 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0xc0045878, 0x0) 05:39:33 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup(r3) ioctl$sock_bt_hci(r4, 0x400448cc, &(0x7f0000000240)) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000080)) r5 = dup(r2) ioctl$sock_bt_hci(r5, 0x400448cc, &(0x7f0000000240)) write$cgroup_pid(r5, &(0x7f0000000040), 0x12) r6 = memfd_create(&(0x7f0000000000)='\x00', 0x1) ioctl$EXT4_IOC_SWAP_BOOT(r6, 0x6611) 05:39:33 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) 05:39:33 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000100)={0x0, 0x652d, 0x4, 0x0, 0x142, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) syz_io_uring_submit(r2, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0xa, 0x1ff, 0x0, 0x10000, 0x0, 0x1}, 0xff) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x8, 0x0, &(0x7f0000000000)="2aa5b06ead209099918aabba7c23118845e5cf57bc0b7642b66de0f97a8777005c81b4a8fd06862e3a050a0295edfc886d58c160f3d42f72a87a0dbfcb3fef9143d01a7f141aa8af2cbcf87a7548bf3ac3c1b11082b43e5b4232753e72d33c459b08311363bdf16cebb72d9838bb84d738311028a8ae6044796eb83a0ae5bf5e96934b3c81d55c80d873f919f8464e8f1ee0721712bd580eddfa97c6114dce55", 0x0, 0x0, 0x1, {0x2}}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 05:39:33 executing program 3: rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00') r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="730000000000000086bbbbf042932eb7"], 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2120}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, &(0x7f00000001c0)={0x1, @read_tx_power={{0xc2d, 0x3}, {0xc9, 0x4}}}, 0x7) write$bt_hci(r1, &(0x7f0000000000)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x32, 0x8c}}}, 0x6) r2 = dup(r1) ioctl$sock_bt_hci(r2, 0x400448cc, 0x0) [ 860.593023] loop6: detected capacity change from 0 to 10 05:39:33 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4e, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) [ 860.639369] loop1: detected capacity change from 0 to 40 [ 860.655302] loop2: detected capacity change from 0 to 40 [ 860.675965] syz-executor.5: attempt to access beyond end of device [ 860.675965] loop5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 860.677069] loop6: detected capacity change from 0 to 10 [ 860.690957] FAT-fs (loop5): unable to read boot sector 05:39:33 executing program 0: r0 = memfd_secret(0x0) sysfs$2(0x2, 0xd11, 0x0) sysfs$2(0x2, 0x0, &(0x7f0000000240)=""/227) r1 = syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$2(0x2, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sysfs$2(0x2, 0x3, &(0x7f0000000100)=""/243) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, &(0x7f0000000040)=ANY=[@ANYRESDEC=r1]) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r4 = dup2(r3, r3) sysfs$2(0x2, 0x0, &(0x7f0000000400)=""/189) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x82307201, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r5, 0x0, 0x0, 0x0) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000000)={0x9, 0x6, 0x0, 0x8001, 0x101, 0x8}) 05:39:33 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x68, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:39:33 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) readv(r0, &(0x7f00000013c0)=[{&(0x7f0000000280)=""/108, 0x6c}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/129, 0x81}], 0x3) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup(r2) ioctl$sock_bt_hci(r3, 0x400448cc, &(0x7f0000000240)) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x184, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf7, 0xa9, @random="3352bf0405ad77f88e85d2087b48e0ef2f3c69abca6a01cacd7d32e4672ad1612a0b2924c22b6dcfbce8c42331da3919bc99111ce0c973ec25b74b4e88c863685fbc9f7f466aaf61970fb073cdfe20f915b6d4ea15302d9651a49651331178b9197009e9659d2b80679a90985a6f1c701bc3c6805a7f77a5413a182a9b8d3eb4dc1f64d2eda3a57b49ace9bae5447c53b56a6d237d82287b436fd01241bd30aec1e6a62ec8c2d173ad256187421698a3323ec2981d2c1fc85b2fb275f1a34f3ed7536db720aa300c6033c7bf3039767d6df723dfed5e642830325c5672e274826fd939ce633eb4f62fffb3ff260255b9a78d32"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x3}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x7ff}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x7}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xdbf}]}, 0x184}, 0x1, 0x0, 0x0, 0x24000000}, 0x20048000) 05:39:33 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 05:39:33 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) 05:39:33 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) [ 860.894991] loop4: detected capacity change from 0 to 40 05:39:33 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x6c, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) [ 860.946629] syz-executor.5: attempt to access beyond end of device [ 860.946629] loop5: rw=0, sector=0, nr_sectors = 1 limit=0 05:39:33 executing program 7: r0 = memfd_secret(0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3, 0x100010, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x5610c0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup(r2) ioctl$sock_bt_hci(r3, 0x400448cc, &(0x7f0000000240)) ioctl$FITHAW(r3, 0xc0045878) write$bt_hci(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="01520cf10026a5d219ed0c9841228afe3c21c4fccb2498b1108d5159f28c9b14fb2d05704348aba0caf2100cc7057c8717694d840bd4b3bc2a0789a4ecc15526fab6a83f464bf9976e3eca81dca30bdede7bedb9a593dd92c90357bea8cafe2e909b6101b83af43c6fdd381afd1f257a042927affdbc7de28a849a61d1e612aac1c7b778e844cab8c3ef2a886a9261091d0b373de40d77f55fa48fa27abe65b4dfa3a2eb01ae44cbbca24c554bb1ce449fa26007393eff280000bb1ca1e89872617f102b4068207737590f2c782d1ccc7e1b9d2fc18ff767de8b1f59d677d2569d7cb1ff8e0d3a40d49b52426d10da2e69b4e57c98"], 0xf5) ftruncate(r1, 0x2) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x10, 0x4010, r0, 0x0) syz_io_uring_submit(r4, 0x0, 0x0, 0xffffffff) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448ca, &(0x7f0000000140)="4e7c4d8ef95c3beb67e5d51d2699b11fb4b9a36e52561bcbb1037640524b60ad72efb2406f2ec2d0905343f3c95213c911ab5f2050c18bbd274e0a2cc6b8f59e0c10c9769f65ca14ea57f3afc592667f0cec969b043581f9440237c317eb4a1d9199469fbe4637804fb4a2c388e1de5b7f4b32c859c948fd5c21128021f3ee9d45329dbe699d9d067393d7a1b7575f2104d63385775d05a773ac8b7ef2e51c69e05e30d7bdd9") [ 860.954838] FAT-fs (loop5): unable to read boot sector [ 861.241386] syz-executor.4: attempt to access beyond end of device [ 861.241386] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 861.243176] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 861.379478] syz-executor.1: attempt to access beyond end of device [ 861.379478] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 861.381437] Buffer I/O error on dev loop1, logical block 10, lost async page write 05:39:47 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x74, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) [ 874.670189] loop2: detected capacity change from 0 to 40 05:39:47 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[]) 05:39:47 executing program 7: r0 = memfd_secret(0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000002, 0x20010, r0, 0x8000000) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:39:47 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup(r1) ioctl$sock_bt_hci(r2, 0x400448cc, 0x0) read(r0, &(0x7f0000000000)=""/73, 0x49) 05:39:47 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:39:47 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 05:39:47 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000000)=@nfc={0x27, 0x1, 0x2, 0x4}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)="52cf43eeeba1a0e0e1ffc2b17449655cf8158bcc3a18eb9d375db25d58b532007520f486e30aff91e77f6d333b97e400f8816f2f45054bd42174e80724831febd42fbbbca27d291a4d76241dafe226a54c1bf5cf88915a228fb5", 0x5a}], 0x1, &(0x7f0000000140)}, 0x404c804) 05:39:47 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) [ 874.696058] loop6: detected capacity change from 0 to 10 [ 874.696356] loop4: detected capacity change from 0 to 40 [ 874.700144] syz-executor.5: attempt to access beyond end of device [ 874.700144] loop5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 874.703283] FAT-fs (loop5): unable to read boot sector [ 874.720793] loop1: detected capacity change from 0 to 40 [ 874.724536] audit: type=1400 audit(1688449187.443:14): avc: denied { read } for pid=6515 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 05:39:47 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[]) 05:39:47 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x0, 0x2}, 0x6) [ 874.846412] syz-executor.5: attempt to access beyond end of device [ 874.846412] loop5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 874.849492] FAT-fs (loop5): unable to read boot sector 05:39:47 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x78, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:39:47 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup(r2) ioctl$sock_bt_hci(r3, 0x400448cc, &(0x7f0000000240)) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000000)={r3}) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup(r4) ioctl$sock_bt_hci(r5, 0x400448cc, &(0x7f0000000240)) r6 = fork() fcntl$lock(r5, 0x24, &(0x7f0000000040)={0x1, 0x2, 0x0, 0x7, r6}) [ 874.890447] syz-executor.4: attempt to access beyond end of device [ 874.890447] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 874.892218] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 874.893609] loop6: detected capacity change from 0 to 10 05:39:47 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[]) 05:39:47 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) [ 874.954828] syz-executor.5: attempt to access beyond end of device [ 874.954828] loop5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 874.958456] FAT-fs (loop5): unable to read boot sector 05:39:47 executing program 7: r0 = memfd_secret(0x80000) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'nat\x00', 0x0, [0x5, 0xffff, 0x6, 0x1, 0x200]}, &(0x7f0000000080)=0x54) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) [ 875.202699] loop4: detected capacity change from 0 to 40 [ 875.208965] syz-executor.1: attempt to access beyond end of device [ 875.208965] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 875.210374] Buffer I/O error on dev loop1, logical block 10, lost async page write 05:40:00 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:40:00 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) 05:40:00 executing program 0: sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x47620d8bf49aa8a5, 0x70bd2d, 0x25dfdbfc, {}, [""]}, 0x1c}}, 0x4000000) r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x80) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup(r3) ioctl$sock_bt_hci(r4, 0x400448cc, &(0x7f0000000240)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r5) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/9p', 0x0, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, 0x0, 0x0, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f0000000300)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x77359400}, 0x1, 0x1}, 0x87e8) r8 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa, 0x13, r6, 0x10000000) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x6000, @fd_index=0x5, 0xfffffffffffffff9, &(0x7f0000000040)=""/2, 0x2, 0x6, 0x1}, 0x33) syz_io_uring_submit(r1, r8, &(0x7f00000000c0)=@IORING_OP_NOP={0x0, 0x5}, 0x40) 05:40:00 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup(r2) ioctl$sock_bt_hci(r3, 0x400448cc, &(0x7f0000000240)) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x8010, r3, 0xb8ab000) 05:40:00 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x7a, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:40:00 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup(r1) ioctl$sock_bt_hci(r2, 0x400448cc, 0x0) close_range(r0, r0, 0x0) r3 = accept(r2, &(0x7f0000000000)=@caif=@dgm, &(0x7f0000000100)=0x80) tee(r3, r0, 0x80000001, 0xb) 05:40:00 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) 05:40:00 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000300)=0x7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) [ 887.550322] loop2: detected capacity change from 0 to 40 [ 887.574801] loop5: detected capacity change from 0 to 40 [ 887.599971] FAT-fs (loop5): bogus number of reserved sectors [ 887.600369] FAT-fs (loop5): Can't find a valid FAT filesystem [ 887.603820] loop6: detected capacity change from 0 to 10 [ 887.627338] loop4: detected capacity change from 0 to 40 [ 887.636401] syz-executor.2: attempt to access beyond end of device [ 887.636401] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 887.637338] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 887.642174] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6574 comm=syz-executor.0 [ 887.644313] loop1: detected capacity change from 0 to 40 05:40:00 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fork() wait4(r1, &(0x7f0000000240), 0x8, 0x0) tgkill(r1, r1, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup(r2) ioctl$sock_bt_hci(r3, 0x400448cc, &(0x7f0000000100)="31370876f734086e6f31c32f78dc1cbffa178bf64d89cd91bfc64c35bec7131328b349eb94e0164e4a0fa5a002852bb32d9357a1596340950d010893b4bcf99a0d702e89") perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0xa6, 0x1, 0x6, 0x37, 0x0, 0x1, 0x12018, 0xb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x40, 0x80000001}, 0x4, 0x2f, 0xf932, 0x1, 0x400, 0x10001, 0xed3, 0x0, 0x0, 0x0, 0x9}, r1, 0x4, r3, 0x2) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x8d0201, 0xc4) bind$bt_hci(r4, &(0x7f0000000200)={0x1f, 0xffffffffffffffff}, 0x6) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r5) bind$bt_hci(r5, &(0x7f0000000180)={0x1f, 0xffffffffffffffff}, 0x6) r6 = dup(r0) ioctl$sock_bt_hci(r6, 0x400448cc, 0x0) 05:40:00 executing program 7: r0 = memfd_secret(0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r1) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f0000000000)={{r0}, "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"}) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r2, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup(r3) ioctl$sock_bt_hci(r4, 0x400448cc, &(0x7f0000000240)) ftruncate(r4, 0x0) 05:40:00 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x7c, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:40:00 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) [ 887.740934] loop5: detected capacity change from 0 to 40 [ 887.747139] loop6: detected capacity change from 0 to 10 05:40:00 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) (fail_nth: 1) [ 887.754571] FAT-fs (loop5): bogus number of reserved sectors [ 887.755077] FAT-fs (loop5): Can't find a valid FAT filesystem 05:40:00 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:40:00 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r2) write(r2, &(0x7f0000000000)="9d42387de66d5b8a4127cbe7171a846f274a58d04950a574f0b22a381357a349261a7548b9962035899cde3da0ae967e9c551d607e9a22bc3c66561e3b9511d50fe9f6fbad0f4c1103b03acaa165850edda103a69b359912ce56d9e54edae14743a444e4bff186583dbaa63e67300bad459403fd93aa705fec8a01cc1971a56b59912227094cacf8542d38780f3c393646ff2ec8f06ec8b928815d69002bc6838631d4825c80a19991834dd891c9c754fb81ce8041195e833d", 0xb9) ftruncate(r2, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:40:00 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) 05:40:00 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x7d, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) [ 887.896129] FAULT_INJECTION: forcing a failure. [ 887.896129] name failslab, interval 1, probability 0, space 0, times 0 [ 887.897783] CPU: 1 PID: 6597 Comm: syz-executor.4 Not tainted 6.4.0-next-20230703 #1 [ 887.898844] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 887.899924] Call Trace: [ 887.900284] [ 887.900605] dump_stack_lvl+0xc1/0xf0 [ 887.901156] should_fail_ex+0x4b4/0x5b0 [ 887.901715] ? __do_sys_memfd_create+0x12d/0x940 [ 887.902365] should_failslab+0x9/0x20 [ 887.902920] __kmem_cache_alloc_node+0x66/0x320 [ 887.903569] ? __do_sys_memfd_create+0x12d/0x940 [ 887.904223] ? __do_sys_memfd_create+0x12d/0x940 [ 887.904874] __kmalloc+0x4a/0x160 [ 887.905367] __do_sys_memfd_create+0x12d/0x940 [ 887.905997] ? ksys_write+0x19e/0x250 [ 887.906532] ? __pfx___do_sys_memfd_create+0x10/0x10 [ 887.907230] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 887.907959] do_syscall_64+0x3f/0x90 [ 887.908496] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 887.909211] RIP: 0033:0x7fd764d75b19 [ 887.909723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 887.912087] RSP: 002b:00007fd7622eaf48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 887.913058] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fd764d75b19 [ 887.913970] RDX: 0000000000005080 RSI: 0000000000000000 RDI: 00007fd764dcf0fb [ 887.914889] RBP: 0000000000000002 R08: 0000000000002840 R09: ffffffffffffffff [ 887.915795] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000 [ 887.916702] R13: 0000000020000100 R14: 0000000000005080 R15: 0000000020000140 [ 887.917639] [ 887.939482] loop2: detected capacity change from 0 to 40 05:40:00 executing program 7: r0 = memfd_secret(0x80000) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x1000) ioctl$FICLONE(r2, 0x40049409, r0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24, 0x1, @mcast1, 0x80000000}, 0x1c) 05:40:00 executing program 0: memfd_secret(0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r0) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '):]'}, {0x20, '!'}, {0x20, '\xd7\xbf'}, {0x20, '\''}, {}]}, 0x17) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup(r1) ioctl$sock_bt_hci(r2, 0x400448cc, &(0x7f0000000240)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r3) mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ftruncate(r3, 0x3f) syz_io_uring_submit(0x0, 0x0, 0x0, 0x2) 05:40:00 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) 05:40:00 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4, 0x1}}, './file0\x00'}) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_I_TEI={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r0}]}, 0x34}}, 0x8c5) [ 887.974982] loop5: detected capacity change from 0 to 40 [ 887.995431] FAT-fs (loop5): bogus number of reserved sectors [ 887.995902] FAT-fs (loop5): Can't find a valid FAT filesystem [ 888.013544] loop6: detected capacity change from 0 to 10 05:40:00 executing program 7: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000000)=""/92) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x6000) r1 = memfd_secret(0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r1, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r1, 0x3) syz_io_uring_submit(r2, 0x0, 0x0, 0x0) 05:40:00 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) [ 888.365238] syz-executor.2: attempt to access beyond end of device [ 888.365238] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 888.366947] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 888.376094] loop5: detected capacity change from 0 to 40 [ 888.381579] FAT-fs (loop5): bogus number of reserved sectors [ 888.381997] FAT-fs (loop5): Can't find a valid FAT filesystem 05:40:12 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) (fail_nth: 2) 05:40:12 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) 05:40:12 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 05:40:12 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6, 0x50, r0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r2) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup(r3) ftruncate(r3, 0xa) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x10) ioctl$sock_bt_hci(r5, 0x400448e2, &(0x7f0000000080)) write$P9_RMKNOD(r4, &(0x7f0000000000)={0x14, 0x13, 0x2, {0x8, 0x2, 0x3}}, 0x14) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) lsetxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000001c0)=ANY=[@ANYBLOB="2f6e79cd175854aa28b1188e0db0441696621f8241c0aff5d43282ad217b23f307818439d03cd70e9c019729d1c891fd8b5f87947e5820f048aa752057bafae4959a71ea5889de0c50b0e8d3c29261dcf7bac17ff88de91df6a14e105e770d388f0ba552839a23903f15eb77f1a611e1ca4ca0f8b6680f48ff0da64544a94469dd5c"], 0xb, 0x1) 05:40:12 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x7e, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:40:12 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x10001}, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000000)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup(r1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup(r3) ioctl$sock_bt_hci(r4, 0x400448cc, &(0x7f0000000240)) ioctl$LOOP_SET_FD(r2, 0x4c00, r4) ioctl$sock_bt_hci(r2, 0x400448cc, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r5) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = dup(r6) ioctl$sock_bt_hci(r7, 0x400448cc, &(0x7f0000000240)) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x1, 0x3f, 0x8, 0x1f, 0x0, 0x2, 0x40, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000040), 0x8}, 0x41201, 0xffffffffffffffc0, 0x6, 0x6, 0x5, 0x9, 0xc9d6, 0x0, 0x6, 0x0, 0x2}, 0xffffffffffffffff, 0x4, r8, 0x8) close_range(r7, r4, 0x0) 05:40:12 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r4, 0xc0a85352, &(0x7f00000000c0)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r4, 0xc0a85322, &(0x7f00000015c0)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000000180)={0x7f7, 0x10000, 0xfffffffb, 0x3, 0x1, 0x200}) r5 = mq_open(&(0x7f0000000000)='@\x00', 0xc1, 0xb2, &(0x7f0000000040)={0xa554, 0x7, 0x7ffd, 0x8}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000500)={{}, r6, 0x12, @unused=[0x1, 0x1, 0x7ff, 0x6], @subvolid=0x80000000}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000200)={{r4}, r6, 0x18, @unused=[0x3ff, 0xcd0, 0x0, 0x4], @name="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"}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000f40)={{r3}, r6, 0x10, @inherit={0x50, &(0x7f00000002c0)={0x0, 0x1, 0x8, 0x7fff, {0x2, 0x8, 0x36d, 0x651, 0x9}, [0x5]}}, @subvolid=0x20}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000100)={{}, r6, 0x2, @unused=[0x4, 0xe2f, 0x820, 0x4], @devid}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000280)={"23be3481c9a48b7942a2d3c4305a9f8a", 0x0, r6, {0x3, 0x20}, {0x5, 0xffff18ab}, 0x4, [0x6, 0x3, 0x8, 0x9, 0x9, 0x81, 0xfffffffffffffffe, 0xcd, 0x2, 0x9, 0xffff, 0x6, 0x3ff000000000000, 0x7, 0x4, 0x9]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000000c0)={{}, r6, 0xa, @unused=[0x6, 0x5c99, 0x7, 0xfffffffffffffff7], @devid}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000040)={"44dbe8c95d449d7097bda125cdfe3790", 0x0, r6, {0x401, 0x3}, {0x40, 0x8001}, 0x5, [0xffffffff80000001, 0x7ff, 0x20, 0x950, 0x7fffffff, 0x3, 0x98b9, 0x4, 0x40, 0x2, 0x3d4df6d9, 0x4, 0x10000, 0x8, 0x80000001]}) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:40:13 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) [ 900.311327] loop2: detected capacity change from 0 to 40 [ 900.315419] loop6: detected capacity change from 0 to 10 [ 900.317603] loop4: detected capacity change from 0 to 40 [ 900.341127] loop1: detected capacity change from 0 to 40 [ 900.346263] loop5: detected capacity change from 0 to 40 [ 900.362176] FAT-fs (loop5): bogus number of reserved sectors [ 900.363027] FAT-fs (loop5): Can't find a valid FAT filesystem 05:40:13 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x4, 0x1, 0x1, 0x9, 0x0, 0x8001, 0x80000, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp, 0x1000, 0x4, 0xffff, 0x3, 0x8, 0x1, 0x7f, 0x0, 0x3, 0x0, 0x7}, r1, 0xa, r0, 0xa) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup(r2) ioctl$sock_bt_hci(r3, 0x400448cc, 0x0) 05:40:13 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) (fail_nth: 3) 05:40:13 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) fchmod(r0, 0x6e) 05:40:13 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfb, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) [ 900.466612] FAULT_INJECTION: forcing a failure. [ 900.466612] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 900.468163] CPU: 1 PID: 6654 Comm: syz-executor.4 Not tainted 6.4.0-next-20230703 #1 [ 900.469167] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 900.470217] Call Trace: [ 900.470569] [ 900.470903] dump_stack_lvl+0xc1/0xf0 [ 900.471440] should_fail_ex+0x4b4/0x5b0 [ 900.471982] _copy_from_user+0x30/0xf0 [ 900.472512] __do_sys_memfd_create+0x1b0/0x940 [ 900.473122] ? ksys_write+0x19e/0x250 [ 900.473639] ? __pfx___do_sys_memfd_create+0x10/0x10 [ 900.474307] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 900.475027] do_syscall_64+0x3f/0x90 [ 900.475545] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 900.476235] RIP: 0033:0x7fd764d75b19 [ 900.476732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 900.479041] RSP: 002b:00007fd7622eaf48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 900.480097] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fd764d75b19 [ 900.481092] RDX: 0000000000005080 RSI: 0000000000000000 RDI: 00007fd764dcf0fb [ 900.482065] RBP: 0000000000000002 R08: 0000000000002840 R09: ffffffffffffffff [ 900.483054] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000 [ 900.484020] R13: 0000000020000100 R14: 0000000000005080 R15: 0000000020000140 [ 900.485024] 05:40:13 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) [ 900.692353] loop5: detected capacity change from 0 to 40 [ 900.699710] FAT-fs (loop5): bogus number of reserved sectors [ 900.700154] FAT-fs (loop5): Can't find a valid FAT filesystem [ 900.714924] loop6: detected capacity change from 0 to 10 05:40:13 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x2, 0x7, 0x27, 0x20, 0x0, 0xe, 0x2000, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x673, 0x7}, 0x10006, 0x9, 0xfffffff8, 0xb, 0x9, 0x1, 0x101, 0x0, 0x7, 0x0, 0x3ff}, 0xffffffffffffffff, 0x8, r0, 0x2) r2 = dup(r1) ioctl$sock_bt_hci(r2, 0x400448cc, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x4, 0xb2, 0x3, 0x0, 0x0, 0xfff, 0x10000, 0xf, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0xfffffffffffffff8}, 0x800, 0x4988, 0x7, 0x5, 0x0, 0x0, 0xffff, 0x0, 0x9, 0x0, 0x6}, 0x0, 0xd, 0xffffffffffffffff, 0x2) 05:40:25 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:40:25 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 05:40:25 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) (fail_nth: 4) 05:40:25 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) 05:40:25 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x200000a, 0x1010, r0, 0x0) ftruncate(r0, 0x3) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x109) r3 = dup3(r0, r0, 0x0) dup3(r0, r3, 0x80000) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000440)={0x4, 0x0, 0x8, 0x1f, 0x5}, 0xc) preadv2(r2, &(0x7f0000000340)=[{&(0x7f0000000040)=""/118, 0x76}, {&(0x7f00000000c0)=""/189, 0xbd}, {&(0x7f0000000180)=""/140, 0x8c}, {&(0x7f0000000240)=""/5, 0x5}, {&(0x7f0000000280)=""/42, 0x2a}, {&(0x7f00000002c0)=""/57, 0x39}, {&(0x7f0000000300)=""/10, 0xa}], 0x7, 0x7, 0x7, 0x16) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup(r4) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000400)={0x1, 0xa, [@empty, @multicast, @empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @local, @empty, @local, @local, @local, @remote]}) ioctl$sock_bt_hci(r5, 0x400448cc, &(0x7f0000000240)) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = dup(r6) ioctl$sock_bt_hci(r7, 0x400448cc, &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x2}}, './file1\x00'}) syz_io_uring_submit(r1, 0x0, 0x0, 0x7) 05:40:25 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x137, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:40:25 executing program 3: perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) 05:40:25 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_setup(0x40, &(0x7f0000000240)=0x0) r3 = eventfd2(0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) io_cancel(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup(r4) ioctl$sock_bt_hci(r5, 0x400448cc, &(0x7f0000000240)) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = dup(r6) ioctl$sock_bt_hci(r7, 0x400448cc, &(0x7f0000000240)) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = dup(r8) ioctl$sock_bt_hci(r9, 0x400448cc, &(0x7f0000000240)) io_submit(r2, 0x5, &(0x7f00000004c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0x8, r5, &(0x7f0000000000)="0f7fc4470a4ae554cb404840d407647bf1ce67a96c8871ffc28a7c29c0486b2752bef04a0a9ed1f14d3119", 0x2b, 0x20, 0x0, 0x1, r0}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x364, r0, &(0x7f0000000080)="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", 0xfc, 0x8000000000, 0x0, 0x2, r7}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0xfca, r0, &(0x7f00000001c0)="7db9759654f0b66c0a15e066a140e7771eac8be537ee6d5a5394b79b6b28f0b6a3d3342576c0249fe57d64cb44d2af2562d88ecdfc34fa6f8cb93d4f051c6388a6b7ce36bba41f410cac24eed119d1a78082551660586a5ee8ec325b475c98e449636dc27d2c78753ad5e9ea39fc13449102ee8d3e515a8b2d26019ae5599ff137f59bb743f380cca6794a951dda0732cd19994df236faeb2b34e26d142dfbef441351098965e5867a4539d7c1fd5137e97c519890213e8dd2cccb2882734fd1bf7cce8568b41d8a90ad990039616e30d9402ed66e597972d18106541c3f7e87604ffecdd58829", 0xe7, 0x3, 0x0, 0x3, r0}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x2, 0x7, r0, &(0x7f0000000300)="ffe29380162748486c78fd3968c13be1a82e89b74a596fb14fa6cde85d4eb7345c63b0256d666c6e2649d1b1f96dc3784f9064bc36cbbdd69ef2a9f406e770e7186fa4bcb61f23cec13317ea950109467b90643822f0ed24aba37ca17a67829eaeee5d483f25110dea641ec67a1c8dbdd56e121cece899ae11d9c2bb62489705b3309aaa0609413f2c419f5bc7d994d30e", 0x91, 0x9, 0x0, 0x0, r9}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x5, 0x0, r0, &(0x7f0000000400)="d79b9142b6df0b076a712bcd5210f29ef58fbdfe48c15e93df29c52114d75d11889b70ff078fc2d5344e78c18e1222dc7183500872220af9bd3b2278ad9660b3e5f336e94ff1f5cf51090c0508f3d70e33f58c85ffce9190f4", 0x59, 0x4, 0x0, 0x2, r0}]) socket(0x3, 0x0, 0x12ae0b24) ftruncate(r0, 0x6) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) [ 912.391265] loop1: detected capacity change from 0 to 40 [ 912.413102] loop2: detected capacity change from 0 to 40 [ 912.424867] loop6: detected capacity change from 0 to 10 [ 912.428842] FAULT_INJECTION: forcing a failure. [ 912.428842] name failslab, interval 1, probability 0, space 0, times 0 [ 912.430438] CPU: 0 PID: 6687 Comm: syz-executor.4 Not tainted 6.4.0-next-20230703 #1 [ 912.431489] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 912.432571] Call Trace: [ 912.432938] [ 912.433270] dump_stack_lvl+0xc1/0xf0 [ 912.433835] should_fail_ex+0x4b4/0x5b0 [ 912.434429] should_failslab+0x9/0x20 [ 912.435004] kmem_cache_alloc_lru+0x7a/0x680 [ 912.435644] ? find_held_lock+0x2c/0x110 [ 912.436253] ? shmem_alloc_inode+0x27/0x50 [ 912.436861] ? alloc_fd+0x2eb/0x760 [ 912.437424] ? shmem_alloc_inode+0x27/0x50 [ 912.438034] shmem_alloc_inode+0x27/0x50 [ 912.438616] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 912.439309] alloc_inode+0x63/0x240 [ 912.439857] new_inode+0x25/0x1f0 [ 912.440386] shmem_get_inode+0x183/0xe10 [ 912.440963] ? do_raw_spin_unlock+0x53/0x220 [ 912.441647] __shmem_file_setup+0x171/0x300 [ 912.442297] __do_sys_memfd_create+0x32b/0x940 [ 912.442976] ? ksys_write+0x19e/0x250 [ 912.443536] ? __pfx___do_sys_memfd_create+0x10/0x10 [ 912.444278] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 912.444847] loop5: detected capacity change from 0 to 40 [ 912.445029] do_syscall_64+0x3f/0x90 [ 912.446312] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 912.447064] RIP: 0033:0x7fd764d75b19 [ 912.447608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 912.449965] RSP: 002b:00007fd7622eaf48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 912.451053] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fd764d75b19 [ 912.452013] RDX: 0000000000005080 RSI: 0000000000000000 RDI: 00007fd764dcf0fb [ 912.452991] RBP: 0000000000000002 R08: 0000000000002840 R09: ffffffffffffffff [ 912.453991] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000 [ 912.455016] R13: 0000000020000100 R14: 0000000000005080 R15: 0000000020000140 [ 912.455996] [ 912.479813] FAT-fs (loop5): bogus number of reserved sectors [ 912.480965] FAT-fs (loop5): Can't find a valid FAT filesystem 05:40:25 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) (fail_nth: 5) 05:40:25 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x139, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:40:25 executing program 3: perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x12000, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r2) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup(r3) ioctl$sock_bt_hci(r4, 0x400448cc, &(0x7f0000000240)) tee(r4, 0xffffffffffffffff, 0x836, 0x3) ioctl$sock_bt_hci(r2, 0x400448e0, &(0x7f0000000100)="1a88e4ffd524dfbfadd200208c5c7427434b86f09575c55faa3cf34cb1007bd581e1190f71a03c75266406245c92adb8369c12d1a89aefe4504ed82c75089cc110ee8c11b5a522611770c5a53bb1e407ff3860933fa44e7917e7466e020a19004714fe01c345f8ed7d670ba8c93bc3af2cdf839071ef4b05ef5cafa55116fa1f18619fc9362a8b33349499d85447af5c2a1fe590de69db9b3498a8b4d8e99f68683c0b40682b6ea87e8da6eb78e8e8594025618cbf") ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) 05:40:25 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x6) r2 = fsmount(0xffffffffffffffff, 0x0, 0x1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f00000000c0)=ANY=[@ANYBLOB="ddffcac31a0000000000000000e407b0ae9fe0f6f6120fc50824f995cccbaa1aaf2e52e032e485dce5325738e49aec13cc322a3502372c42ac7d5424865ba8f6f9ee70ed73cbfcce726e20bbba91714b52559f89c25135990ca5ce17457d5c0a6af6b0daf76a1520f5b500"/120, @ANYRES32=r2, @ANYBLOB="01000000000000002e2f66696c653000"]) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup(r4) ioctl$sock_bt_hci(r5, 0x400448cc, &(0x7f0000000240)) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000040)=0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000d, 0x4000010, r3, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) [ 912.719617] loop6: detected capacity change from 0 to 10 [ 912.745749] loop4: detected capacity change from 0 to 40 05:40:25 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) 05:40:25 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x13a, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) [ 912.917988] loop5: detected capacity change from 0 to 40 [ 912.949886] FAT-fs (loop5): bogus number of reserved sectors [ 912.950829] FAT-fs (loop5): Can't find a valid FAT filesystem [ 912.978413] loop6: detected capacity change from 0 to 10 [ 913.088289] syz-executor.1: attempt to access beyond end of device [ 913.088289] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 913.090323] Buffer I/O error on dev loop1, logical block 10, lost async page write 05:40:37 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x7fffffff) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) 05:40:37 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) (fail_nth: 6) [ 925.166577] FAULT_INJECTION: forcing a failure. [ 925.166577] name failslab, interval 1, probability 0, space 0, times 0 [ 925.167420] CPU: 0 PID: 6727 Comm: syz-executor.4 Not tainted 6.4.0-next-20230703 #1 [ 925.167955] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 925.168555] Call Trace: [ 925.168751] [ 925.168920] dump_stack_lvl+0xc1/0xf0 [ 925.169233] should_fail_ex+0x4b4/0x5b0 [ 925.169550] ? security_inode_alloc+0x38/0x160 [ 925.169902] should_failslab+0x9/0x20 [ 925.170182] kmem_cache_alloc+0x62/0x370 [ 925.170492] security_inode_alloc+0x38/0x160 [ 925.170844] inode_init_always+0xbb2/0xea0 [ 925.171200] alloc_inode+0x84/0x240 [ 925.171489] new_inode+0x25/0x1f0 [ 925.171773] shmem_get_inode+0x183/0xe10 [ 925.172060] ? do_raw_spin_unlock+0x53/0x220 [ 925.172421] __shmem_file_setup+0x171/0x300 [ 925.172766] __do_sys_memfd_create+0x32b/0x940 [ 925.173121] ? ksys_write+0x19e/0x250 [ 925.173423] ? __pfx___do_sys_memfd_create+0x10/0x10 [ 925.173819] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 925.174240] do_syscall_64+0x3f/0x90 [ 925.174532] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 925.174912] RIP: 0033:0x7fd764d75b19 [ 925.175206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 925.176539] RSP: 002b:00007fd7622eaf48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 925.177114] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fd764d75b19 [ 925.177648] RDX: 0000000000005080 RSI: 0000000000000000 RDI: 00007fd764dcf0fb [ 925.178023] loop2: detected capacity change from 0 to 40 [ 925.178182] RBP: 0000000000000002 R08: 0000000000002840 R09: ffffffffffffffff [ 925.178196] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000 [ 925.180107] R13: 0000000020000100 R14: 0000000000005080 R15: 0000000020000140 [ 925.180673] [ 925.183473] loop1: detected capacity change from 0 to 40 05:40:37 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fork() wait4(r1, &(0x7f0000000240), 0x8, 0x0) tgkill(r1, r1, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r2) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r3) dup2(r2, r3) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup(r4) ioctl$sock_bt_hci(r5, 0x400448cc, &(0x7f0000000240)) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x5, 0x7, 0x0, 0x3, 0x0, 0x20, 0x80a0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xc77d, 0x1, @perf_config_ext={0x7, 0x1fbb0}, 0x0, 0x1, 0x4, 0x3, 0x0, 0xffff7ff4, 0x100, 0x0, 0x6e9, 0x0, 0x8}, r1, 0xd, r5, 0xa) r6 = dup(r0) ioctl$sock_bt_hci(r6, 0x400448cc, 0x0) 05:40:37 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) 05:40:37 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 05:40:37 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0/file0\x00'}) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x120, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x120}, 0x1, 0x0, 0x0, 0x4044005}, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cc, &(0x7f0000000240)) r3 = accept$inet(r0, &(0x7f0000000180)={0x2, 0x0, @initdev}, &(0x7f00000001c0)=0x10) stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1021000, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@mmap}, {@privport}, {@access_any}, {@cache_none}, {@version_L}, {@access_uid={'access', 0x3d, r4}}, {@version_9p2000}, {@cache_loose}, {@cache_mmap}], [{@smackfsroot}, {@smackfsfloor={'smackfsfloor', 0x3d, '+-]'}}, {@appraise_type}, {@obj_type={'obj_type', 0x3d, '/\\%]'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}]}}) pwritev(r2, &(0x7f00000008c0)=[{&(0x7f0000000600)="a5d34c76808102e3a66694be195cd385", 0x10}, {&(0x7f0000000640)="3e85454a3f6dbc793061c146c687c36b6adb7692a207d9aa5b68bf4889214459b2e2a9366d5d8dcc4545df69ffa022b68ec3435bebd6a71af05a544bf6e781de62375ca90caf6f152f9c1d6b5cea083583bad67768f957a0ab9b3d8657d2683fee8347d0ecf0b2e22f096b5e002eab70d6df489ace714e5f8f0ae2914686c4aeb7b08003b3", 0x85}, {&(0x7f0000000700)="861d511926f33a1eb66d60", 0xb}, {&(0x7f0000000740)="8654267698b18eee840f63f91cf401f3b3cee096b18aaa5997bf75be598b5b5c73b302dbcbc2786ee3e79f806a2251a9ff4fd706ef87d75fddd610a45f100988f67cac143ee1f4f44d47a12121c617a3ef05f27f", 0x54}, {&(0x7f00000007c0)="8865cbe08d85d2066888", 0xa}, {&(0x7f0000000800)="1bdbf3322ac99ba7d34a25fb08aacaa1ba75b624eab960cd0abf482b0e72e9a618917a46bdbc1e69e665368961a74d2a614001ad22f3eb153b7d63263fe129937f595e79c25e1beb0f2e9592c98eba012e22b5f4508f509f2c92baebf7c21a6594589fba5e1fb0d4c3971e55c4925181d97b7bbccb3dcfa134315863512c937f5967ee6d4e06cefcf1257da6b30eaedbf14c9ed058de7cd505b018966c74bd05da2c251a80f18749", 0xa8}], 0x6, 0x7, 0x81) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = dup(r5) ioctl$sock_bt_hci(r6, 0x400448cc, &(0x7f0000000240)) r7 = accept4$bt_l2cap(r0, 0x0, &(0x7f0000000940), 0x81000) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)=[r7]}, 0x1) fchdir(r6) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:40:37 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x13b, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:40:37 executing program 7: r0 = memfd_secret(0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x77359400}, 0x1, 0x1}, 0x87e8) r2 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_CLOSE={0x13, 0x5}, 0x33) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r0, 0x80, &(0x7f0000000340)=@x25, 0x0, 0x0, 0x1, {0x0, r1}}, 0x100) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r4, 0x0, &(0x7f0000000040), 0x0, 0x4) syz_io_uring_submit(r4, 0x0, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/9p', 0x0, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, 0x0, 0x0, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa, 0x13, r5, 0x10000000) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x6000, @fd_index=0x5, 0xfffffffffffffff9, &(0x7f0000000040)=""/2, 0x2, 0x6, 0x1}, 0x33) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f00000000c0)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, r0, &(0x7f0000000000)={0x4000, 0x100, 0x11}, &(0x7f0000000080)='./file1\x00', 0x18, 0x0, 0x23456, {0x0, r8}}, 0x3) [ 925.232413] loop5: detected capacity change from 0 to 40 [ 925.252622] FAT-fs (loop5): bogus number of reserved sectors [ 925.253481] FAT-fs (loop5): Can't find a valid FAT filesystem [ 925.261786] loop6: detected capacity change from 0 to 10 05:40:37 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) (fail_nth: 7) 05:40:37 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cc, &(0x7f0000000240)) ioctl$TUNSETLINK(r1, 0x400454cd, 0x640ad8fd7db51188) r2 = memfd_secret(0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r2, 0x0) ftruncate(r2, 0x3) syz_io_uring_submit(r3, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) [ 925.343480] loop4: detected capacity change from 0 to 40 05:40:38 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) (fail_nth: 8) 05:40:38 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup(r2) ioctl$sock_bt_hci(r3, 0x400448cc, &(0x7f0000000240)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000180)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000001180)={{r4, 0x0, 0x3c, 0x4, 0x5, 0x506, 0x20, 0x3, 0x81, 0x80000001, 0x3, 0x9, 0x5, 0x439, 0xfffffffffffff7c4}, 0x18, [0x0, 0x0, 0x0]}) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) io_uring_setup(0x7e46, &(0x7f0000000000)={0x0, 0xe37c, 0x10, 0x3, 0x3e2, 0x0, r0}) syz_io_uring_setup(0x537b, &(0x7f0000001280)={0x0, 0x7b1d, 0x8, 0x2, 0x61}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000001240)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r6}}, 0x0) 05:40:38 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) 05:40:38 executing program 0: r0 = memfd_secret(0x80000) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3, 0x13, r0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r2) ftruncate(r2, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) [ 925.482281] loop5: detected capacity change from 0 to 40 [ 925.548035] FAT-fs (loop5): bogus number of reserved sectors [ 925.548521] FAT-fs (loop5): Can't find a valid FAT filesystem 05:40:38 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x300, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) [ 925.657437] syz-executor.2: attempt to access beyond end of device [ 925.657437] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 925.658400] Buffer I/O error on dev loop2, logical block 10, lost async page write 05:40:38 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) r3 = io_uring_setup(0x7c8c, &(0x7f0000000000)={0x0, 0x9077, 0x8, 0x2, 0x22, 0x0, r0}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r2) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x204000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) r6 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000900)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r4, 0x80, &(0x7f0000000880)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x3, 0x0, 0x1, 0x3, {0xa, 0x4e24, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20}}}, 0x0, 0x0, 0x609b42917eb9d268, {0x0, r2}}, 0x3f) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000100)=[r5, r3, r6, r0], 0x4) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) write$binfmt_aout(r6, &(0x7f0000000140)={{0x107, 0x1, 0x1f, 0x2d5, 0x344, 0x8, 0x308, 0xfa}, "354379bead2e28bc45a9ec64004720aa90b3184987cf346e25ecacf70c30bf3e4967f8374fe6b9329829d888c2fac130909bba94fbbca2e4dd56f551170074079276b1fb85bc070e23128d923e2cf66e419a5a7520a8c74b791683d6be3324b9d90ce60274b7ed226c7d92742c0158f998c296d44726f722527514ae9ffe2b5b61fcdd82b88aba78d537e910bcfcce8460baf0cc3e7147cae414aaf27df59faeaf16f333580ddb32fd5957f721cf2d1927981b4461f3a3cc2c0e4954208cf0cc841e097b16c0dcb322748c28eb8e8e973fec7a6c2efce9dde89bc716e062488298e1623859e0711143cde6938bdec8b7b1a3f5", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x713) [ 925.734552] FAULT_INJECTION: forcing a failure. [ 925.734552] name failslab, interval 1, probability 0, space 0, times 0 [ 925.735496] CPU: 0 PID: 6766 Comm: syz-executor.4 Not tainted 6.4.0-next-20230703 #1 [ 925.736070] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 925.736693] Call Trace: [ 925.736888] [ 925.737049] dump_stack_lvl+0xc1/0xf0 [ 925.737326] should_fail_ex+0x4b4/0x5b0 [ 925.737606] should_failslab+0x9/0x20 [ 925.737870] kmem_cache_alloc_lru+0x7a/0x680 [ 925.738185] ? __d_alloc+0x31/0x9c0 [ 925.738453] ? __d_alloc+0x31/0x9c0 [ 925.738707] __d_alloc+0x31/0x9c0 [ 925.738961] ? get_random_u32+0x3b2/0x670 [ 925.739261] d_alloc_pseudo+0x1d/0x70 [ 925.739534] alloc_file_pseudo+0xd2/0x260 [ 925.739830] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 925.740159] ? lockdep_annotate_inode_mutex_key+0x4b/0x200 [ 925.740545] ? shmem_get_inode+0x6be/0xe10 [ 925.740837] ? do_raw_spin_unlock+0x53/0x220 [ 925.741160] __shmem_file_setup+0x202/0x300 [ 925.741464] __do_sys_memfd_create+0x32b/0x940 [ 925.741777] ? ksys_write+0x19e/0x250 [ 925.742042] ? __pfx___do_sys_memfd_create+0x10/0x10 [ 925.742386] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 925.742745] do_syscall_64+0x3f/0x90 [ 925.743023] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 925.743376] RIP: 0033:0x7fd764d75b19 [ 925.743629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 925.744909] RSP: 002b:00007fd7622eaf48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 925.745399] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fd764d75b19 [ 925.745853] RDX: 0000000000005080 RSI: 0000000000000000 RDI: 00007fd764dcf0fb [ 925.746310] RBP: 0000000000000002 R08: 0000000000002840 R09: ffffffffffffffff [ 925.746769] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000 [ 925.747238] R13: 0000000020000100 R14: 0000000000005080 R15: 0000000020000140 [ 925.747729] [ 925.760044] syz-executor.1: attempt to access beyond end of device [ 925.760044] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 925.761574] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 925.764035] loop6: detected capacity change from 0 to 10 [ 926.036936] I/O error, dev loop5, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 926.038124] Buffer I/O error on dev loop5, logical block 1, async page read [ 926.039142] systemd-udevd: attempt to access beyond end of device [ 926.039142] loop5: rw=0, sector=2, nr_sectors = 1 limit=0 [ 926.040605] Buffer I/O error on dev loop5, logical block 2, async page read [ 926.042527] systemd-udevd: attempt to access beyond end of device [ 926.042527] loop5: rw=0, sector=3, nr_sectors = 1 limit=0 [ 926.044036] Buffer I/O error on dev loop5, logical block 3, async page read [ 926.044999] systemd-udevd: attempt to access beyond end of device [ 926.044999] loop5: rw=0, sector=4, nr_sectors = 1 limit=0 [ 926.046967] Buffer I/O error on dev loop5, logical block 4, async page read [ 926.047953] systemd-udevd: attempt to access beyond end of device [ 926.047953] loop5: rw=0, sector=5, nr_sectors = 1 limit=0 [ 926.049458] Buffer I/O error on dev loop5, logical block 5, async page read [ 926.067044] systemd-udevd: attempt to access beyond end of device [ 926.067044] loop5: rw=0, sector=6, nr_sectors = 1 limit=0 [ 926.067941] Buffer I/O error on dev loop5, logical block 6, async page read [ 926.068459] systemd-udevd: attempt to access beyond end of device [ 926.068459] loop5: rw=0, sector=7, nr_sectors = 1 limit=0 [ 926.069288] Buffer I/O error on dev loop5, logical block 7, async page read [ 938.375467] loop1: detected capacity change from 0 to 40 05:40:51 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) (fail_nth: 9) 05:40:51 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000300)=0x7fffffff) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 05:40:51 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x411, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:40:51 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) openat(0xffffffffffffffff, 0x0, 0x18000, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 05:40:51 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40818}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x29}, 0xff}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="d273b3a778f2c5a0de603583535b07bf109e609a617920a5a2ce739badafe03a33e0baf14ed7285ee113c1a5c44e5718c87e2d77eb246cb8fe29fe82dbb1225727b6c3ae6e3c420c75ab4447f3c5d25c218bc9d6be27ca9e310ceee555bf5c209f7208fd82cbda07cfee272dec2aa960301d40851f07e074c4c0f77283701a003a3ac5003bfc98c496f30b45", 0x8c}, {&(0x7f00000001c0)="fc123c17138946f134be4b9b580ead5a3835e9361a46d14f5344e017688b399dd3ad8c87c8bfd89946b0a524eaf7ed0d6095397c9df63a47dcc62ef2eb4a9fb5f6993e606bd6d2aee0b7c7353faee90f65eb8b2f429382389dc2b2ebfa4b7373f108e48767b2ea35f1ee4274fdebd01758f06b00fc3c26c869c3c456deed4fbba316d08c4e7032339c65", 0x8a}, {&(0x7f0000000280)="470aff1e6b7db9f94932dcb34d7856e2df3ddc55b4367cc9c7933f15895f08350434a7b237d16443334c751c1b018400b998e3ffe2870516e523c7f9802966fe7616ca9318aeca78d67b5b62774ddd52b2f6d868fc24e38a9a300177ccd000f089b3b1fdd83d7948c3f2ab8badc0ea43405cac928db883dfaa36e8baad368667c44a83aff70e90248d8d0890bbe7ef765a55fbe73252453a3d87122f79582da302c89d454acd72943af3c68c60bde8d6ae93e16ceec69740ab056ce12d420f800cdc3bde8d14b10d21b38d56bfbf1a1166edcd17cc00c4f1c0680d0271df604c7505bbdb93db0db0eef4ef839d42485d86", 0xf1}], 0x3, &(0x7f0000000380)=[@hopopts={{0xb8, 0x29, 0x36, {0x5c, 0x13, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @calipso={0x7, 0x30, {0x0, 0xa, 0x8f, 0x4c36, [0x99, 0x9, 0xffff, 0x80000000, 0x3]}}, @pad1, @calipso={0x7, 0x20, {0x0, 0x6, 0x40, 0x3, [0x80, 0x7, 0x0]}}, @calipso={0x7, 0x18, {0x2, 0x4, 0x0, 0xffff, [0x2, 0x8]}}, @hao={0xc9, 0x10, @private0}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}}], 0xb8}}, {{&(0x7f0000000440)={0xa, 0x4e23, 0xf326, @remote, 0x75}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000480)="2b3a9caacc4536b7769a5a3b50c805188ee11ea08519ceac29cd638b52929b1b688b4d582f6c47c9941ba7b4c6d33c43ca02d53987933697d84e1aa5283a5312e74ca15b1728bfc1260301031a0bc310bb51e38948eb8612", 0x58}], 0x1, &(0x7f0000000540)=[@hopopts={{0x20, 0x29, 0x36, {0x3c, 0x0, '\x00', [@pad1, @pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x101}}], 0x38}}], 0x2, 0x20000000) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) 05:40:51 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) r2 = signalfd4(r0, &(0x7f0000000040)={[0x1]}, 0x8, 0x800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x0, &(0x7f0000000040), 0x0, 0x4) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/9p', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, 0x0, 0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000300)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x77359400}, 0x1, 0x1}, 0x87e8) r6 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa, 0x13, r4, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x6000, @fd_index=0x5, 0xfffffffffffffff9, &(0x7f0000000040)=""/2, 0x2, 0x6, 0x1}, 0x33) syz_io_uring_submit(r3, r6, &(0x7f0000000100)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x40, 0x1, {0x3}}, 0xffffffff) ftruncate(r0, 0x2) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000080)={@remote, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x20, 0x5, 0x100, 0x3, 0x208040}) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = dup(r7) ioctl$sock_bt_hci(r8, 0x400448cc, &(0x7f0000000240)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r8, 0x8983, &(0x7f0000000000)) 05:40:51 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) r2 = syz_io_uring_setup(0x4b59, &(0x7f0000000000)={0x0, 0x65b3, 0x20, 0x3, 0x27b, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r4, 0x0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd=r2, 0x7, 0x0, 0x87a, 0x0, 0x1, {0x0, r5}}, 0x9) 05:40:51 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) [ 938.401515] loop6: detected capacity change from 0 to 10 [ 938.404707] loop4: detected capacity change from 0 to 40 [ 938.416591] loop2: detected capacity change from 0 to 40 [ 938.423162] loop5: detected capacity change from 0 to 40 [ 938.445225] FAT-fs (loop5): bogus number of reserved sectors [ 938.446244] FAT-fs (loop5): Can't find a valid FAT filesystem 05:40:51 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x491, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) [ 938.498640] loop6: detected capacity change from 0 to 10 05:40:51 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) (fail_nth: 10) 05:40:51 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x1}, 0x6) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cc, &(0x7f0000000240)) openat(r1, &(0x7f0000000000)='./file0\x00', 0x741021, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup(r2) ioctl$sock_bt_hci(r3, 0x400448cc, 0x0) 05:40:51 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x110, r0, 0x0) r2 = open_tree(r0, &(0x7f0000000000)='./file0\x00', 0x8900) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup(r3) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4, {0x1}}, './file0/file0\x00'}) stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{r4}, 0x0, 0x2, @unused=[0x10001, 0x4, 0x58, 0x2], @subvolid=0x7f}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = dup(r6) ioctl$sock_bt_hci(r7, 0x400448cc, &(0x7f0000000240)) ioctl$CDROMSTART(r7, 0x5308) setresuid(0x0, r5, 0x0) stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r8, 0x0) setresuid(r5, r8, r5) ioctl$TUNSETOWNER(r0, 0x400454cc, r5) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) [ 938.796522] FAULT_INJECTION: forcing a failure. [ 938.796522] name failslab, interval 1, probability 0, space 0, times 0 [ 938.797310] CPU: 0 PID: 6804 Comm: syz-executor.4 Not tainted 6.4.0-next-20230703 #1 [ 938.797810] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 938.798342] Call Trace: [ 938.798523] [ 938.798683] dump_stack_lvl+0xc1/0xf0 [ 938.798964] should_fail_ex+0x4b4/0x5b0 [ 938.799254] ? alloc_empty_file+0x76/0x1e0 [ 938.799546] should_failslab+0x9/0x20 [ 938.799814] kmem_cache_alloc+0x62/0x370 [ 938.800112] alloc_empty_file+0x76/0x1e0 [ 938.800399] alloc_file+0x5e/0x800 [ 938.800658] alloc_file_pseudo+0x16e/0x260 [ 938.800955] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 938.801278] ? lockdep_annotate_inode_mutex_key+0x4b/0x200 [ 938.801663] ? do_raw_spin_unlock+0x53/0x220 [ 938.801984] __shmem_file_setup+0x202/0x300 [ 938.802290] __do_sys_memfd_create+0x32b/0x940 [ 938.802601] ? ksys_write+0x19e/0x250 [ 938.802870] ? __pfx___do_sys_memfd_create+0x10/0x10 [ 938.803225] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 938.803586] do_syscall_64+0x3f/0x90 [ 938.803850] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 938.804204] RIP: 0033:0x7fd764d75b19 [ 938.804459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 938.805599] RSP: 002b:00007fd7622eaf48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 938.806089] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fd764d75b19 [ 938.806545] RDX: 0000000000005080 RSI: 0000000000000000 RDI: 00007fd764dcf0fb [ 938.807000] RBP: 0000000000000002 R08: 0000000000002840 R09: ffffffffffffffff [ 938.807484] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000 [ 938.807948] R13: 0000000020000100 R14: 0000000000005080 R15: 0000000020000140 [ 938.808434] 05:40:51 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x492, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:40:51 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) [ 938.847969] loop5: detected capacity change from 0 to 40 [ 938.851866] FAT-fs (loop5): bogus number of reserved sectors [ 938.852396] FAT-fs (loop5): Can't find a valid FAT filesystem [ 938.997037] syz-executor.1: attempt to access beyond end of device [ 938.997037] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 938.998857] Buffer I/O error on dev loop1, logical block 10, lost async page write 05:40:51 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) (fail_nth: 11) [ 939.043481] FAULT_INJECTION: forcing a failure. [ 939.043481] name failslab, interval 1, probability 0, space 0, times 0 [ 939.044592] CPU: 0 PID: 6815 Comm: syz-executor.4 Not tainted 6.4.0-next-20230703 #1 [ 939.045288] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 939.046043] Call Trace: [ 939.046286] [ 939.046494] dump_stack_lvl+0xc1/0xf0 [ 939.046871] should_fail_ex+0x4b4/0x5b0 [ 939.047272] ? alloc_empty_file+0x76/0x1e0 [ 939.047671] should_failslab+0x9/0x20 [ 939.048026] kmem_cache_alloc+0x62/0x370 [ 939.048413] alloc_empty_file+0x76/0x1e0 [ 939.048807] alloc_file+0x5e/0x800 [ 939.049149] alloc_file_pseudo+0x16e/0x260 [ 939.049553] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 939.049989] ? lockdep_annotate_inode_mutex_key+0x4b/0x200 [ 939.050518] ? do_raw_spin_unlock+0x53/0x220 [ 939.050856] __shmem_file_setup+0x202/0x300 [ 939.051275] __do_sys_memfd_create+0x32b/0x940 [ 939.051693] ? ksys_write+0x19e/0x250 [ 939.052057] ? __pfx___do_sys_memfd_create+0x10/0x10 [ 939.052539] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 939.053022] do_syscall_64+0x3f/0x90 [ 939.053389] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 939.053861] RIP: 0033:0x7fd764d75b19 [ 939.054196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 939.055804] RSP: 002b:00007fd7622eaf48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 939.056501] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fd764d75b19 [ 939.057125] RDX: 0000000000005080 RSI: 0000000000000000 RDI: 00007fd764dcf0fb [ 939.057778] RBP: 0000000000000002 R08: 0000000000002840 R09: ffffffffffffffff [ 939.058434] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000 [ 939.059098] R13: 0000000020000100 R14: 0000000000005080 R15: 0000000020000140 [ 939.059787] 05:40:51 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 05:40:51 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) (fail_nth: 12) [ 939.232911] FAULT_INJECTION: forcing a failure. [ 939.232911] name failslab, interval 1, probability 0, space 0, times 0 [ 939.233985] CPU: 0 PID: 6819 Comm: syz-executor.4 Not tainted 6.4.0-next-20230703 #1 [ 939.234670] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 939.235436] Call Trace: [ 939.235686] [ 939.235902] dump_stack_lvl+0xc1/0xf0 [ 939.236272] should_fail_ex+0x4b4/0x5b0 [ 939.236651] ? security_file_alloc+0x38/0x170 [ 939.237062] should_failslab+0x9/0x20 [ 939.237416] kmem_cache_alloc+0x62/0x370 [ 939.237806] security_file_alloc+0x38/0x170 [ 939.238212] ? kmem_cache_alloc+0x313/0x370 [ 939.238610] init_file+0x99/0x250 [ 939.238934] alloc_empty_file+0x94/0x1e0 [ 939.239340] alloc_file+0x5e/0x800 [ 939.239606] alloc_file_pseudo+0x16e/0x260 [ 939.239988] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 939.240416] ? lockdep_annotate_inode_mutex_key+0x4b/0x200 [ 939.240922] ? do_raw_spin_unlock+0x53/0x220 [ 939.241342] __shmem_file_setup+0x202/0x300 [ 939.241729] __do_sys_memfd_create+0x32b/0x940 [ 939.242141] ? ksys_write+0x19e/0x250 [ 939.242502] ? __pfx___do_sys_memfd_create+0x10/0x10 [ 939.242979] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 939.243455] do_syscall_64+0x3f/0x90 [ 939.243801] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 939.244275] RIP: 0033:0x7fd764d75b19 [ 939.244621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 939.246227] RSP: 002b:00007fd7622c9f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 939.246915] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fd764d75b19 [ 939.247579] RDX: 0000000000005080 RSI: 0000000000000000 RDI: 00007fd764dcf0fb [ 939.248217] RBP: 0000000000000002 R08: 0000000000002840 R09: ffffffffffffffff [ 939.248864] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000 [ 939.249501] R13: 0000000020000100 R14: 0000000000005080 R15: 0000000020000140 [ 939.250166] [ 939.731876] I/O error, dev loop5, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 939.732676] Buffer I/O error on dev loop5, logical block 1, async page read [ 939.766826] systemd-udevd: attempt to access beyond end of device [ 939.766826] loop5: rw=0, sector=2, nr_sectors = 1 limit=0 [ 939.767895] Buffer I/O error on dev loop5, logical block 2, async page read [ 939.775775] systemd-udevd: attempt to access beyond end of device [ 939.775775] loop5: rw=0, sector=3, nr_sectors = 1 limit=0 [ 939.776813] Buffer I/O error on dev loop5, logical block 3, async page read [ 939.777477] systemd-udevd: attempt to access beyond end of device [ 939.777477] loop5: rw=0, sector=4, nr_sectors = 1 limit=0 [ 939.778536] Buffer I/O error on dev loop5, logical block 4, async page read [ 939.790951] systemd-udevd: attempt to access beyond end of device [ 939.790951] loop5: rw=0, sector=5, nr_sectors = 1 limit=0 [ 939.792039] Buffer I/O error on dev loop5, logical block 5, async page read [ 939.794886] systemd-udevd: attempt to access beyond end of device [ 939.794886] loop5: rw=0, sector=6, nr_sectors = 1 limit=0 [ 939.795953] Buffer I/O error on dev loop5, logical block 6, async page read [ 939.798804] systemd-udevd: attempt to access beyond end of device [ 939.798804] loop5: rw=0, sector=7, nr_sectors = 1 limit=0 [ 939.799872] Buffer I/O error on dev loop5, logical block 7, async page read [ 939.837413] loop6: detected capacity change from 0 to 10 [ 939.904252] loop1: detected capacity change from 0 to 40 05:40:52 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000300)=0x7fffffff) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 05:40:52 executing program 7: r0 = memfd_secret(0x0) r1 = pidfd_getfd(r0, r0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)=0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, r2, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xdf, 0x53}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xd, 0x27}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r0}, @NL80211_ATTR_PID={0x8, 0x52, r4}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r0}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6b}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r0}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r6) syz_io_uring_submit(r5, 0x0, 0x0, 0x0) 05:40:52 executing program 0: sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002bbd7000fedbdf25070000000c000980080001000280ab170f7600000800020061b95d0600"/50], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x20010, r0, 0x8000000) r3 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x4, 0x3002, @fd=r3, 0x0, &(0x7f0000000140)="6bf7ef36b7059f6d72978313295b8d1ffcc0dac717e9e906351af3a2669950d7b1834f24a58ad3c5736f252a3f552d552d9d8035fb26ba2b47bc114a336d143a1a2b76a25a5fc92d46353ec2d6a822174c15814d7cce08d706e12504336cda6f5a61e757de046e08a7daa8b6ab14e12fa2b48db4198125179b880e1da07e1e3b5ac962f68d03bac2808b8517be3789082ca5d16780f14e25d989ef3d36f9b6dad0bb7a21c4d1b9062d2f674110339ab6f8", 0xb1, 0xc, 0x1}, 0x5) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:40:52 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x494, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:40:52 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) (fail_nth: 13) 05:40:52 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) [ 940.030634] loop2: detected capacity change from 0 to 40 [ 940.057523] loop6: detected capacity change from 0 to 10 [ 940.084128] loop5: detected capacity change from 0 to 40 [ 940.096831] loop4: detected capacity change from 0 to 40 [ 940.103101] FAT-fs (loop5): invalid media value (0x00) [ 940.103643] FAT-fs (loop5): Can't find a valid FAT filesystem [ 940.170342] syz-executor.1: attempt to access beyond end of device [ 940.170342] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 940.171702] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 940.446857] syz-executor.2: attempt to access beyond end of device [ 940.446857] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 940.448838] Buffer I/O error on dev loop2, logical block 10, lost async page write 05:41:04 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup(r2) ioctl$sock_bt_hci(r3, 0x400448cc, &(0x7f0000000240)) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ftruncate(r0, 0xeac) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:41:04 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup(r1) read(r0, &(0x7f0000000100)=""/4096, 0x1000) ioctl$sock_bt_hci(r2, 0x400448cc, 0x0) 05:41:04 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 05:41:04 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 05:41:04 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x500, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:41:04 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) 05:41:04 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) (fail_nth: 14) 05:41:04 executing program 7: r0 = fork() wait4(r0, &(0x7f0000000240), 0x8, 0x0) tgkill(r0, r0, 0x6) wait4(r0, &(0x7f0000000140), 0x1000000, &(0x7f0000000180)) capset(&(0x7f0000000000)={0x300c07b3, r0}, &(0x7f0000000040)={0x3, 0x1, 0x2698000, 0x81, 0x80000001}) r1 = memfd_secret(0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r1, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = dup(r1) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x7, 0x2, 0x3, 0x7, 0x0, 0xd1, 0x1000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0x4}, 0x400, 0x400, 0x4, 0x9, 0x7, 0x7, 0x8, 0x0, 0x80, 0x0, 0xff}, r0, 0xa, r3, 0xa) ftruncate(r1, 0x3) syz_io_uring_submit(r2, 0x0, 0x0, 0x0) [ 952.271410] FAULT_INJECTION: forcing a failure. [ 952.271410] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 952.272473] CPU: 0 PID: 6851 Comm: syz-executor.4 Not tainted 6.4.0-next-20230703 #1 [ 952.273141] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 952.273864] Call Trace: [ 952.274104] [ 952.274319] dump_stack_lvl+0xc1/0xf0 [ 952.274689] should_fail_ex+0x4b4/0x5b0 [ 952.275068] __should_fail_alloc_page+0xe0/0x110 [ 952.275522] prepare_alloc_pages+0x178/0x500 [ 952.275946] __alloc_pages+0x149/0x480 [ 952.276304] ? __pfx___alloc_pages+0x10/0x10 [ 952.276711] ? __pfx___lock_acquire+0x10/0x10 [ 952.277137] ? mark_lock.part.0+0xef/0x2f50 [ 952.277528] ? lock_acquire+0x19a/0x4c0 [ 952.277895] ? __pfx_mark_lock.part.0+0x10/0x10 [ 952.278325] ? avc_has_perm_noaudit+0x10b/0x3a0 [ 952.278664] vma_alloc_folio+0xe2/0x480 [ 952.279031] shmem_alloc_folio+0x11c/0x1f0 [ 952.279333] ? __pfx_shmem_alloc_folio+0x10/0x10 [ 952.279755] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 952.280318] ? percpu_counter_add_batch+0xc8/0x180 [ 952.280762] ? __vm_enough_memory+0x188/0x3f0 [ 952.281170] shmem_get_folio_gfp.constprop.0+0x794/0x17d0 [ 952.281700] ? __pfx_shmem_get_folio_gfp.constprop.0+0x10/0x10 [ 952.282265] shmem_write_begin+0x148/0x360 [ 952.282646] ? __pfx_shmem_write_begin+0x10/0x10 [ 952.283082] ? ktime_get_coarse_real_ts64+0x100/0x190 [ 952.283599] generic_perform_write+0x26f/0x5e0 [ 952.284036] ? __pfx_generic_perform_write+0x10/0x10 [ 952.284499] ? __pfx_file_update_time+0x10/0x10 [ 952.284911] ? __pfx_generic_write_checks+0x10/0x10 [ 952.285381] __generic_file_write_iter+0x160/0x1a0 [ 952.285836] generic_file_write_iter+0xe7/0x350 [ 952.286273] vfs_write+0x97d/0xda0 [ 952.286606] ? __pfx_vfs_write+0x10/0x10 [ 952.286926] __x64_sys_pwrite64+0x1f6/0x250 [ 952.287333] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 952.287782] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 952.288254] do_syscall_64+0x3f/0x90 [ 952.288604] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 952.289069] RIP: 0033:0x7fd764d28ab7 [ 952.289404] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 952.290971] RSP: 002b:00007fd7622eaf20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 952.291645] RAX: ffffffffffffffda RBX: 00007fd764dbf970 RCX: 00007fd764d28ab7 [ 952.292277] RDX: 0000000000000017 RSI: 0000000020010000 RDI: 0000000000000005 [ 952.292904] RBP: 0000000000000002 R08: 0000000000000000 R09: ffffffffffffffff [ 952.293526] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 952.294145] R13: 0000000000000005 R14: 0000000020000200 R15: 0000000000000000 [ 952.294807] [ 952.296028] loop5: detected capacity change from 0 to 40 [ 952.298984] FAT-fs (loop5): invalid media value (0x00) [ 952.299471] FAT-fs (loop5): Can't find a valid FAT filesystem [ 952.300471] loop4: detected capacity change from 0 to 40 [ 952.306687] loop1: detected capacity change from 0 to 40 [ 952.321825] loop6: detected capacity change from 0 to 10 [ 952.328553] loop2: detected capacity change from 0 to 40 [ 952.332320] FAT-fs (loop4): bogus number of reserved sectors [ 952.332752] FAT-fs (loop4): Can't find a valid FAT filesystem 05:41:05 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) 05:41:05 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) (fail_nth: 15) 05:41:05 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x505, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) [ 952.409372] loop5: detected capacity change from 0 to 40 05:41:05 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffff7fffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) write$bt_hci(r1, &(0x7f0000000000)={0x1, @inquiry={{0x401, 0x5}, {"b87308", 0x8, 0x9}}}, 0x9) 05:41:05 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x300000a, 0x11, r0, 0x0) [ 952.495245] syz-executor.2: attempt to access beyond end of device [ 952.495245] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 952.496858] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 952.512543] loop6: detected capacity change from 0 to 10 [ 952.513383] FAT-fs (loop5): invalid media value (0x00) [ 952.513402] FAT-fs (loop5): Can't find a valid FAT filesystem [ 952.528686] FAULT_INJECTION: forcing a failure. [ 952.528686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 952.529755] CPU: 0 PID: 6876 Comm: syz-executor.4 Not tainted 6.4.0-next-20230703 #1 [ 952.530411] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 952.531125] Call Trace: [ 952.531377] [ 952.531591] dump_stack_lvl+0xc1/0xf0 [ 952.531964] should_fail_ex+0x4b4/0x5b0 [ 952.532319] ? page_copy_sane+0xcc/0x2b0 [ 952.532700] copy_page_from_iter_atomic+0x26d/0x14e0 [ 952.533166] ? __pfx_copy_page_from_iter_atomic+0x10/0x10 [ 952.533659] ? shmem_write_begin+0x15f/0x360 [ 952.534076] ? __pfx_shmem_write_begin+0x10/0x10 [ 952.534509] ? ktime_get_coarse_real_ts64+0x100/0x190 [ 952.534984] generic_perform_write+0x2e7/0x5e0 [ 952.535321] ? __pfx_generic_perform_write+0x10/0x10 [ 952.535792] ? __pfx_file_update_time+0x10/0x10 [ 952.536221] ? __pfx_generic_write_checks+0x10/0x10 [ 952.536695] __generic_file_write_iter+0x160/0x1a0 [ 952.537033] generic_file_write_iter+0xe7/0x350 [ 952.537452] vfs_write+0x97d/0xda0 [ 952.537711] ? __pfx_vfs_write+0x10/0x10 [ 952.538127] __x64_sys_pwrite64+0x1f6/0x250 [ 952.538425] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 952.538867] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 952.539241] do_syscall_64+0x3f/0x90 [ 952.539593] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 952.539950] RIP: 0033:0x7fd764d28ab7 [ 952.540284] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 952.541414] RSP: 002b:00007fd7622eaf20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 952.542091] RAX: ffffffffffffffda RBX: 00007fd764dbf970 RCX: 00007fd764d28ab7 [ 952.542558] RDX: 0000000000000017 RSI: 0000000020010000 RDI: 0000000000000005 [ 952.543171] RBP: 0000000000000002 R08: 0000000000000000 R09: ffffffffffffffff [ 952.543809] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 952.544438] R13: 0000000000000005 R14: 0000000020000200 R15: 0000000000000000 [ 952.545107] 05:41:05 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) [ 952.591935] loop4: detected capacity change from 0 to 40 [ 952.595253] loop5: detected capacity change from 0 to 40 [ 952.602498] FAT-fs (loop5): invalid media value (0x00) [ 952.603180] FAT-fs (loop5): Can't find a valid FAT filesystem 05:41:05 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) name_to_handle_at(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="200000000800000000000fff00000d6e22f3002000000006000000ff000000050000070000460000"], &(0x7f0000000080), 0x400) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:41:05 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 05:41:05 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x506, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:41:05 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) (fail_nth: 16) 05:41:05 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) [ 952.680471] FAULT_INJECTION: forcing a failure. [ 952.680471] name failslab, interval 1, probability 0, space 0, times 0 [ 952.681596] CPU: 0 PID: 6890 Comm: syz-executor.4 Not tainted 6.4.0-next-20230703 #1 [ 952.682391] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 952.683126] Call Trace: [ 952.683379] [ 952.683593] dump_stack_lvl+0xc1/0xf0 [ 952.683952] should_fail_ex+0x4b4/0x5b0 [ 952.684322] ? getname_flags.part.0+0x50/0x4f0 [ 952.684750] should_failslab+0x9/0x20 [ 952.685095] kmem_cache_alloc+0x62/0x370 [ 952.685477] getname_flags.part.0+0x50/0x4f0 [ 952.685895] getname+0x92/0xe0 [ 952.686216] do_sys_openat2+0xec/0x1d0 [ 952.686582] ? __pfx_do_sys_openat2+0x10/0x10 [ 952.687017] __x64_sys_openat+0x143/0x200 [ 952.687312] ? __pfx___x64_sys_openat+0x10/0x10 [ 952.687750] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 952.688220] do_syscall_64+0x3f/0x90 [ 952.688572] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 952.689044] RIP: 0033:0x7fd764d28a04 [ 952.689370] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 952.690919] RSP: 002b:00007fd7622eaed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 952.691587] RAX: ffffffffffffffda RBX: 00007fd764dbf970 RCX: 00007fd764d28a04 [ 952.692220] RDX: 0000000000000002 RSI: 00007fd7622eb000 RDI: 00000000ffffff9c [ 952.692834] RBP: 00007fd7622eb000 R08: 0000000000000000 R09: ffffffffffffffff [ 952.693460] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 952.694085] R13: 0000000000000005 R14: 0000000020000230 R15: 0000000000000002 [ 952.694735] [ 952.753410] loop6: detected capacity change from 0 to 10 [ 952.796883] loop2: detected capacity change from 0 to 40 05:41:21 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 05:41:21 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 05:41:21 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x80010, r0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup(r2) ioctl$sock_bt_hci(r3, 0x400448cc, &(0x7f0000000240)) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup(r4) ioctl$sock_bt_hci(r5, 0x400448cc, &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {r2}}, './file0\x00'}) r6 = fsmount(r0, 0x1, 0x6) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:41:21 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448e7, 0x0) 05:41:21 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000040)={0xd8d2, 0x8001}) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x7) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r2) readv(r2, &(0x7f0000000380)=[{&(0x7f0000000080)=""/35, 0x23}, {&(0x7f00000000c0)=""/196, 0xc4}, {&(0x7f00000001c0)=""/83, 0x53}, {&(0x7f0000000240)=""/161, 0xa1}, {&(0x7f0000000300)=""/107, 0x6b}], 0x5) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000400)=ANY=[@ANYBLOB="0110f7ffffff0000", @ANYRES32=r2, @ANYBLOB="ff010000000000002e2f66696c653000"]) 05:41:21 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) (fail_nth: 17) 05:41:21 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) 05:41:21 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x507, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) [ 969.162516] loop6: detected capacity change from 0 to 10 [ 969.179356] loop5: detected capacity change from 0 to 40 [ 969.181900] loop2: detected capacity change from 0 to 40 [ 969.182969] loop1: detected capacity change from 0 to 40 [ 969.185404] loop4: detected capacity change from 0 to 40 [ 969.199173] FAT-fs (loop5): invalid media value (0x00) [ 969.200076] FAT-fs (loop5): Can't find a valid FAT filesystem 05:41:21 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x50a, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:41:21 executing program 3: perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) 05:41:21 executing program 7: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key$fscrypt_provisioning(&(0x7f0000000180), 0x0, &(0x7f0000000200)={0x0, 0x0, @d}, 0x18, r0) request_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='/-)+*]*]*-^{.:/#\x00', r0) r1 = memfd_secret(0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xc, 0x4010, r1, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r1, 0x3) syz_io_uring_submit(r2, 0x0, 0x0, 0x0) [ 969.287083] loop6: detected capacity change from 0 to 10 05:41:22 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) 05:41:22 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) (fail_nth: 18) 05:41:22 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x600, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:41:22 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) [ 969.398494] syz-executor.1: attempt to access beyond end of device [ 969.398494] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 969.399544] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 969.414386] loop5: detected capacity change from 0 to 40 [ 969.420984] loop6: detected capacity change from 0 to 10 05:41:22 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = fork() wait4(r2, &(0x7f0000000240), 0x8, 0x0) tgkill(r2, r2, 0x6) r3 = perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x5, 0x6, 0x6, 0x5, 0x0, 0x0, 0x48800, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdc0, 0x1, @perf_config_ext={0x401, 0x7fff}, 0x10400, 0xec, 0x6, 0x0, 0x2297, 0x9, 0x3, 0x0, 0x3ff, 0x0, 0x225}, r2, 0xc, r0, 0x5) r4 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x8000, 0x100) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = dup(r5) ioctl$sock_bt_hci(r6, 0x400448cc, &(0x7f0000000240)) r7 = gettid() stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r8, 0x0) sendmsg$netlink(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xffffffffffffffff, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [r6, r3, r3]}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, 0xee00}}}], 0x60, 0x40001}, 0x4040880) r9 = dup(r1) ioctl$sock_bt_hci(r9, 0x400448cc, 0x0) [ 969.427999] FAULT_INJECTION: forcing a failure. [ 969.427999] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 969.429945] CPU: 0 PID: 6942 Comm: syz-executor.4 Not tainted 6.4.0-next-20230703 #1 [ 969.431005] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 969.432119] Call Trace: [ 969.432496] [ 969.432830] dump_stack_lvl+0xc1/0xf0 [ 969.433401] should_fail_ex+0x4b4/0x5b0 [ 969.433984] strncpy_from_user+0x38/0x340 [ 969.434599] getname_flags.part.0+0x95/0x4f0 [ 969.435255] getname+0x92/0xe0 [ 969.435779] do_sys_openat2+0xec/0x1d0 [ 969.436357] ? __pfx_do_sys_openat2+0x10/0x10 [ 969.437050] __x64_sys_openat+0x143/0x200 [ 969.437655] ? __pfx___x64_sys_openat+0x10/0x10 [ 969.438350] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 969.439112] do_syscall_64+0x3f/0x90 [ 969.439676] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 969.440419] RIP: 0033:0x7fd764d28a04 [ 969.440944] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 969.443355] RSP: 002b:00007fd7622eaed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 969.444400] RAX: ffffffffffffffda RBX: 00007fd764dbf970 RCX: 00007fd764d28a04 [ 969.445367] RDX: 0000000000000002 RSI: 00007fd7622eb000 RDI: 00000000ffffff9c [ 969.446333] RBP: 00007fd7622eb000 R08: 0000000000000000 R09: ffffffffffffffff [ 969.447296] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 969.448279] R13: 0000000000000005 R14: 0000000020000230 R15: 0000000000000002 [ 969.449297] [ 969.458793] FAT-fs (loop5): bogus number of FAT sectors [ 969.459600] FAT-fs (loop5): Can't find a valid FAT filesystem [ 969.562281] syz-executor.2: attempt to access beyond end of device [ 969.562281] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 969.563301] Buffer I/O error on dev loop2, logical block 10, lost async page write 05:41:35 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) openat(0xffffffffffffffff, 0x0, 0x18000, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 05:41:35 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) 05:41:35 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x40010, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:41:35 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x605, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:41:35 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) (fail_nth: 19) 05:41:35 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) r2 = accept4(r1, &(0x7f0000000000)=@tipc, &(0x7f0000000100)=0x80, 0x80400) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0x2, 0x1}, 0x6) 05:41:35 executing program 0: setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x2) r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup(r2) ioctl$sock_bt_hci(r3, 0x400448cc, &(0x7f0000000240)) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup(r4) ioctl$sock_bt_hci(r5, 0x400448cc, &(0x7f0000000240)) r6 = dup(r3) ioctl$sock_bt_hci(r6, 0x400448cc, &(0x7f0000000240)) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r6, 0x80489439, &(0x7f00000000c0)) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) lseek(r2, 0x31e, 0x2) ioctl$RTC_UIE_OFF(r0, 0x7004) 05:41:35 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000300)) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) [ 982.686601] loop2: detected capacity change from 0 to 40 [ 982.703098] loop5: detected capacity change from 0 to 40 [ 982.708925] FAT-fs (loop5): bogus number of FAT sectors [ 982.709376] FAT-fs (loop5): Can't find a valid FAT filesystem [ 982.717865] loop1: detected capacity change from 0 to 40 [ 982.733086] loop6: detected capacity change from 0 to 10 [ 982.738452] FAULT_INJECTION: forcing a failure. [ 982.738452] name failslab, interval 1, probability 0, space 0, times 0 [ 982.740107] CPU: 0 PID: 6972 Comm: syz-executor.4 Not tainted 6.4.0-next-20230703 #1 [ 982.741168] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 982.742282] Call Trace: [ 982.742654] [ 982.742988] dump_stack_lvl+0xc1/0xf0 [ 982.743563] should_fail_ex+0x4b4/0x5b0 [ 982.744159] ? alloc_empty_file+0x76/0x1e0 [ 982.744771] should_failslab+0x9/0x20 [ 982.745326] kmem_cache_alloc+0x62/0x370 [ 982.745936] alloc_empty_file+0x76/0x1e0 [ 982.746549] path_openat+0xd8/0x2710 [ 982.747148] ? __pfx_path_openat+0x10/0x10 [ 982.747776] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 982.748556] do_filp_open+0x1ba/0x410 [ 982.749107] ? __pfx_do_filp_open+0x10/0x10 [ 982.749715] ? expand_files+0x446/0x8e0 [ 982.750307] ? find_held_lock+0x2c/0x110 [ 982.750916] ? alloc_fd+0x2eb/0x760 [ 982.751467] ? lock_release+0x1e3/0x680 [ 982.752063] ? do_raw_spin_lock+0x125/0x270 [ 982.752698] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 982.753398] ? _raw_spin_unlock+0x1e/0x40 [ 982.753973] ? alloc_fd+0x2eb/0x760 [ 982.754548] do_sys_openat2+0x164/0x1d0 [ 982.755125] ? __pfx_do_sys_openat2+0x10/0x10 [ 982.755840] __x64_sys_openat+0x143/0x200 [ 982.756448] ? __pfx___x64_sys_openat+0x10/0x10 [ 982.757155] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 982.757908] do_syscall_64+0x3f/0x90 [ 982.758466] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 982.759211] RIP: 0033:0x7fd764d28a04 [ 982.759757] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 982.762165] RSP: 002b:00007fd7622eaed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 982.763221] RAX: ffffffffffffffda RBX: 00007fd764dbf970 RCX: 00007fd764d28a04 [ 982.764208] RDX: 0000000000000002 RSI: 00007fd7622eb000 RDI: 00000000ffffff9c [ 982.765186] RBP: 00007fd7622eb000 R08: 0000000000000000 R09: ffffffffffffffff [ 982.766162] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 982.767150] R13: 0000000000000005 R14: 0000000020000230 R15: 0000000000000002 [ 982.768194] [ 982.770025] syz-executor.2: attempt to access beyond end of device [ 982.770025] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 05:41:35 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) [ 982.781109] Buffer I/O error on dev loop2, logical block 10, lost async page write 05:41:35 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x700, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:41:35 executing program 0: r0 = memfd_secret(0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup(r1) ioctl$sock_bt_hci(r2, 0x400448cc, &(0x7f0000000240)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000009c0)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000ac0)=r3) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000000)={r3, 0x2, r0, 0x2015f788}) ftruncate(r0, 0x3) syz_io_uring_submit(0x0, 0x0, 0x0, 0xfffffffc) r5 = signalfd4(r2, &(0x7f0000000040)={[0xffff]}, 0x8, 0x800) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={'\x00', 0xcd, 0x25, 0x6, 0x7, 0x5, r4}) 05:41:35 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x4000010, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:41:35 executing program 3: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000100)) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000140)={0xe0, 0x0, 0x2, 0x9, 0x4, [{0x8, 0x7bd5, 0x20, '\x00', 0x2101}, {0x5, 0x8, 0x4}, {0x2, 0x1, 0x9, '\x00', 0x2c5}, {0x10001, 0x800, 0x6, '\x00', 0x20c}]}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup(r2) ioctl$sock_bt_hci(r3, 0x400448cc, &(0x7f0000000240)) r4 = dup(r1) ioctl$sock_bt_hci(r4, 0x400448cc, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r4, 0x3, 0x0, 0x8}) openat$cgroup_pressure(r5, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) 05:41:35 executing program 0: r0 = memfd_secret(0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r1) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000000)={{0x0, 0x8001, 0xcfc2, 0x400000000000006, 0x104000000008, 0x2, 0x4, 0xffff, 0x48, 0xffffffff, 0x5, 0x7, 0x7, 0x800000000000007, 0x9}}) write$bt_hci(0xffffffffffffffff, &(0x7f0000002000)=ANY=[@ANYBLOB='\x00\x00\x00U\x00\x00\x00\x00\x00'], 0x9) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000001000)={r2, 0xfffffffffffffeff}) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r3, 0x0, 0x0, 0x3) [ 982.882439] syz-executor.1: attempt to access beyond end of device [ 982.882439] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 982.883412] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 982.894276] loop5: detected capacity change from 0 to 40 05:41:35 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000300)) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 05:41:35 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000000)={0x0, 0x0, 0x7, 0x0, '\x00', [{0x80, 0xec, 0x65, 0xb357, 0x3, 0x4}, {0x800, 0x6, 0x1, 0x6, 0xb02, 0x8}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ftruncate(r0, 0x80003) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) [ 982.915090] FAT-fs (loop5): bogus number of FAT sectors [ 982.915933] FAT-fs (loop5): Can't find a valid FAT filesystem [ 982.919509] loop6: detected capacity change from 0 to 10 [ 982.959474] loop2: detected capacity change from 0 to 40 [ 983.494219] syz-executor.2: attempt to access beyond end of device [ 983.494219] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 983.495886] Buffer I/O error on dev loop2, logical block 10, lost async page write 05:41:47 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000040)={0x7, 0x7200c55f, 0x2, 0x0, 0x9, 0x1}) 05:41:47 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) openat(0xffffffffffffffff, 0x0, 0x18000, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 05:41:47 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000300)) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 05:41:47 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0x6fc, 0x800) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup(r1) ioctl$sock_bt_hci(r2, 0x400448cc, 0x0) 05:41:47 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, 0x0) 05:41:47 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x705, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:41:47 executing program 7: r0 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 05:41:47 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) (fail_nth: 20) [ 994.857064] loop4: detected capacity change from 0 to 40 [ 994.857500] loop5: detected capacity change from 0 to 40 [ 994.860658] loop6: detected capacity change from 0 to 10 [ 994.911540] loop2: detected capacity change from 0 to 40 05:41:47 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000400)={0x40, [0x423a0caf, 0x1], 0x3}, 0x10) r1 = dup(r0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)) dup(r2) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000100)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2c0, 0x0) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x1}, 0x6) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xe1, 0xfe, 0x20, 0x0, 0x1, 0x80000, 0x7, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x11480, 0x1a1579c2, 0x8b0, 0x0, 0xffffffffffffffe0, 0x9, 0x1000, 0x0, 0x8, 0x0, 0x7f}, 0x0, 0x2, r1, 0xa) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 05:41:47 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x900, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:41:47 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) (fail_nth: 21) [ 994.919970] loop1: detected capacity change from 0 to 40 05:41:47 executing program 7: r0 = memfd_secret(0x80000) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x200000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r2, &(0x7f0000000080)={0x1, @le_set_scan_rsp_data={{0x2009, 0x20}, {0x7, "e8fa6f128646fbf99ceec40d7afe59331cab00ce8ee2be237d66a2f2d71d12"}}}, 0x24) r4 = dup(r3) bind$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x4, 0x3}, 0x6) r5 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1000, 0x220001) ioctl$sock_bt_hci(r5, 0x800448d3, &(0x7f0000000180)="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") io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) [ 994.973013] loop6: detected capacity change from 0 to 10 [ 994.974500] FAULT_INJECTION: forcing a failure. [ 994.974500] name failslab, interval 1, probability 0, space 0, times 0 [ 994.975394] CPU: 0 PID: 7028 Comm: syz-executor.4 Not tainted 6.4.0-next-20230703 #1 [ 994.975963] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 994.976547] Call Trace: [ 994.976742] [ 994.976916] dump_stack_lvl+0xc1/0xf0 [ 994.977217] should_fail_ex+0x4b4/0x5b0 [ 994.977523] ? security_file_alloc+0x38/0x170 [ 994.977863] should_failslab+0x9/0x20 [ 994.978151] kmem_cache_alloc+0x62/0x370 [ 994.978472] security_file_alloc+0x38/0x170 [ 994.978805] init_file+0x99/0x250 [ 994.979081] alloc_empty_file+0x94/0x1e0 [ 994.979390] path_openat+0xd8/0x2710 [ 994.979699] ? __pfx_path_openat+0x10/0x10 [ 994.980024] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 994.980424] do_filp_open+0x1ba/0x410 [ 994.980711] ? __pfx_do_filp_open+0x10/0x10 [ 994.981024] ? expand_files+0x446/0x8e0 [ 994.981329] ? find_held_lock+0x2c/0x110 [ 994.981642] ? alloc_fd+0x2eb/0x760 [ 994.981924] ? lock_release+0x1e3/0x680 [ 994.982230] ? do_raw_spin_lock+0x125/0x270 [ 994.982557] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 994.982924] ? _raw_spin_unlock+0x1e/0x40 [ 994.983226] ? alloc_fd+0x2eb/0x760 [ 994.983512] do_sys_openat2+0x164/0x1d0 [ 994.983816] ? __pfx_do_sys_openat2+0x10/0x10 [ 994.984172] __x64_sys_openat+0x143/0x200 [ 994.984485] ? __pfx___x64_sys_openat+0x10/0x10 [ 994.984839] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 994.985228] do_syscall_64+0x3f/0x90 [ 994.985512] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 994.985886] RIP: 0033:0x7fd764d28a04 [ 994.986148] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 994.987391] RSP: 002b:00007fd7622eaed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 994.987923] RAX: ffffffffffffffda RBX: 00007fd764dbf970 RCX: 00007fd764d28a04 [ 994.988410] RDX: 0000000000000002 RSI: 00007fd7622eb000 RDI: 00000000ffffff9c [ 994.988907] RBP: 00007fd7622eb000 R08: 0000000000000000 R09: ffffffffffffffff [ 994.989390] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 994.989887] R13: 0000000000000005 R14: 0000000020000230 R15: 0000000000000002 [ 994.990407] [ 995.098092] syz-executor.2: attempt to access beyond end of device [ 995.098092] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 995.099000] Buffer I/O error on dev loop2, logical block 10, lost async page write 05:42:01 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, 0x0) 05:42:01 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000000), 0x7be127a4, 0x494702) ftruncate(r2, 0x40) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:42:01 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) openat(0xffffffffffffffff, 0x0, 0x18000, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 05:42:01 executing program 7: r0 = memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="04000000000000002e2f66696c4a79400bdbbe4c41653000a243235b65a20d5da9dca8e6b1b429c0192183b43a90d94b2402331f763e4628b9f37fb8a31e3b3af6d1e68d026e5531577a03eaf547438ff9b826a76e4411dbbd6dc1f88bee09b365b2dacacd7f4329647224505a911e7e9e4d833bf242e4f40f1044d668b1f14b3b7acaf2006e9edd8f34024077d604eddf9586a210af22b6db663a527f5a13aadbf7ffffff2be1712ef8a178f7c2b338ea332bb380f5dafa90e658abd2ee14e2b0df5df9b88edcd88f6e51a0271b63befd6f09de720219b6a8185d38b93895b124b4d247c90011f0bdd2fd134436589d9dff"]) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x110110, r1, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x800, 0xffffffffffffff81, 0x78e}) syz_io_uring_submit(r2, 0x0, 0x0, 0x0) 05:42:01 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) (fail_nth: 22) 05:42:01 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000300)=0x7fffffff) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 05:42:01 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) ioctl$sock_bt_hci(r1, 0x800448f0, &(0x7f0000000000)="bcced2b414efa2d22b19bccdab67e25558bfe91467c835ebd69fd21e7ab6a36c7b514bfd58b601eab359845361a43d2fa288738366f12c321ebc416c3b7f5612da44eb9cc4c34083c7c867039e1414408f417ff4cd83dff54940e2be7421c1466b6875104a75f4a8ae0d98741d9cd4db94f182b0e57782") 05:42:01 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xa00, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) [ 1008.956471] loop2: detected capacity change from 0 to 40 [ 1008.961192] loop5: detected capacity change from 0 to 40 05:42:01 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xa, 0x13, r0, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) ftruncate(r2, 0x6) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/103) [ 1008.980759] loop6: detected capacity change from 0 to 10 [ 1008.986971] loop4: detected capacity change from 0 to 40 [ 1009.010199] loop1: detected capacity change from 0 to 40 05:42:01 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x2, 0x3, 0x3f, 0x2, 0x0, 0x0, 0x2, 0x298d86c9afd61746, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0xe04, 0x7, 0xc32f, 0x2, 0x40, 0x401, 0x0, 0x0, 0x7ff, 0x0, 0x783d}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) [ 1009.210791] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1009.237316] loop5: detected capacity change from 0 to 40 05:42:01 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, 0x0) 05:42:01 executing program 7: r0 = memfd_secret(0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x40010, r0, 0x10000000) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3000008, 0x1010, r0, 0x0) syz_io_uring_submit(r2, r1, 0x0, 0x9) [ 1009.604002] syz-executor.1: attempt to access beyond end of device [ 1009.604002] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1009.605711] Buffer I/O error on dev loop1, logical block 10, lost async page write 05:42:16 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) (fail_nth: 23) 05:42:16 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000300)=0x7fffffff) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 05:42:16 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) openat(0xffffffffffffffff, 0x0, 0x18000, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 05:42:16 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup(r2) ioctl$sock_bt_hci(r3, 0x400448cc, &(0x7f0000000240)) ftruncate(r3, 0x3ff) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:42:16 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xa05, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) [ 1023.344544] loop6: detected capacity change from 0 to 10 05:42:16 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, &(0x7f0000000000)={0xffffffff, 0x1809cfe7, 0x8001, 0x4}) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) finit_module(r2, &(0x7f0000000080)='\xe1(.\x00', 0x0) 05:42:16 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0xff, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff80000001}, 0x1004, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = memfd_create(&(0x7f0000000400)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x0) pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0) read(r2, &(0x7f0000000080)=""/25, 0x19) io_setup(0x40, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0xca, 0x8, 0x11, 0x3, 0x0, 0x8, 0xa3204, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1000, 0x4, @perf_config_ext={0x3, 0x5f9}, 0x1820, 0x100, 0xfffffff7, 0x1, 0x8000, 0x733, 0x18a, 0x0, 0x4, 0x0, 0x90}, 0xffffffffffffffff, 0x3, r0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000640), 0x6e, &(0x7f0000000000), 0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=r0, @ANYBLOB="000000001c000000000000000100000001000000a475154349f57e962e7012d302b933eaafc6c925e8fe3f5f0756e6ae80ed8e58416600d4b00771b7a31fca1779d3b6bb14a70866a6", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRESDEC, @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="30000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYBLOB="000000002800000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x118}, 0x2) r6 = dup(0xffffffffffffffff) ioctl$sock_bt_hci(r6, 0x400448cc, &(0x7f0000000240)) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r6, 0xf507, 0x0) read(r5, &(0x7f0000000980)=""/4096, 0x1000) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000200)={0x3, 0x4, 'Zam', 0x20, 0x1}) r7 = perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r7, &(0x7f0000002180)=[{&(0x7f0000000000)=""/184, 0xb8}], 0x1) io_submit(r3, 0x1, &(0x7f0000000940)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="c5", 0x1}]) read(r2, 0x0, 0x0) r8 = dup(r1) io_submit(r3, 0x0, &(0x7f0000000180)) ioctl$sock_bt_hci(r8, 0x400448cc, 0x0) 05:42:16 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) [ 1023.357660] loop5: detected capacity change from 0 to 40 [ 1023.365539] loop1: detected capacity change from 0 to 40 [ 1023.374955] loop2: detected capacity change from 0 to 40 05:42:16 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xa30, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:42:16 executing program 7: r0 = memfd_secret(0x80000) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) [ 1023.456519] loop6: detected capacity change from 0 to 10 05:42:16 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f00000012c0), 0x100000000, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001400)={&(0x7f0000001340)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x6c}}, 0x2404c080) r1 = memfd_secret(0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r1, 0x0) ftruncate(r1, 0x3) syz_io_uring_submit(r2, 0x0, 0x0, 0x0) [ 1023.463845] FAULT_INJECTION: forcing a failure. [ 1023.463845] name failslab, interval 1, probability 0, space 0, times 0 [ 1023.464641] CPU: 0 PID: 7096 Comm: syz-executor.4 Not tainted 6.4.0-next-20230703 #1 [ 1023.465193] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1023.465778] Call Trace: [ 1023.465970] [ 1023.466150] dump_stack_lvl+0xc1/0xf0 [ 1023.466453] should_fail_ex+0x4b4/0x5b0 [ 1023.466762] ? __kernfs_new_node+0xd4/0x890 [ 1023.467086] should_failslab+0x9/0x20 [ 1023.467378] kmem_cache_alloc+0x62/0x370 [ 1023.467701] __kernfs_new_node+0xd4/0x890 [ 1023.468028] ? __pfx___kernfs_new_node+0x10/0x10 [ 1023.468392] ? selinux_sb_statfs+0x1b5/0x240 [ 1023.468731] ? __pfx_selinux_sb_statfs+0x10/0x10 [ 1023.469090] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 1023.469456] ? shmem_statfs+0x1b7/0x3e0 [ 1023.469760] kernfs_create_dir_ns+0xa0/0x230 [ 1023.470112] internal_create_group+0x713/0xb00 [ 1023.470472] ? __pfx_internal_create_group+0x10/0x10 [ 1023.470874] loop_configure+0xce5/0x1910 [ 1023.471207] lo_ioctl+0x934/0x19a0 [ 1023.471485] ? kmem_cache_free+0x10d/0x4d0 [ 1023.471798] ? __x64_sys_openat+0x143/0x200 [ 1023.472133] ? do_syscall_64+0x3f/0x90 [ 1023.472434] ? __pfx_lo_ioctl+0x10/0x10 [ 1023.472721] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 1023.473127] ? __lock_acquire+0xc3f/0x6340 [ 1023.473515] ? __pfx_do_sys_openat2+0x10/0x10 [ 1023.473869] ? __pfx_lo_ioctl+0x10/0x10 [ 1023.474171] blkdev_ioctl+0x2e4/0x750 [ 1023.474464] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1023.474790] ? selinux_file_ioctl+0xba/0x270 [ 1023.475131] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1023.475464] __x64_sys_ioctl+0x1a4/0x210 [ 1023.475785] do_syscall_64+0x3f/0x90 [ 1023.476061] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1023.476466] RIP: 0033:0x7fd764d758d7 [ 1023.476740] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1023.478004] RSP: 002b:00007fd7622eaf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1023.478552] RAX: ffffffffffffffda RBX: 00007fd764dbf970 RCX: 00007fd764d758d7 [ 1023.479068] RDX: 0000000000000005 RSI: 0000000000004c00 RDI: 0000000000000006 [ 1023.479569] RBP: 0000000000000006 R08: 0000000000000000 R09: ffffffffffffffff [ 1023.480080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1023.480598] R13: 0000000000000005 R14: 0000000020000230 R15: 0000000000000002 [ 1023.481137] [ 1023.481362] loop4: detected capacity change from 0 to 40 [ 1035.114007] loop2: detected capacity change from 0 to 40 05:42:27 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 05:42:27 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xb00, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:42:27 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) openat(0xffffffffffffffff, 0x0, 0x18000, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 05:42:27 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000000)) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000240)={{r0}, "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"}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000150000000000000094237784479bea6b2583dfc128041237e76a959191c610c6b08ec8778eea1bb4f183a708be954d00842a4038af059fd552e1c0c8dae54c9e080685ec45400857696cfec86d369961d7ad1214f8db6e362c716d008da8fe71eac3d81c900e03fcfc58d59e2ea16f43e684c354ced41d3d9701a969", @ANYRES32=0xffffffffffffffff, @ANYBLOB="3c3500000000000039d3a9d82a0575ef15adb2ea47c32e2f666d6c653000"]) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x7, 0x13, r1, 0x0) ftruncate(0xffffffffffffffff, 0x3) syz_io_uring_submit(r2, 0x0, 0x0, 0x0) 05:42:27 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) (fail_nth: 24) 05:42:27 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) fstat(r0, &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:42:27 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000300)=0x7fffffff) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 05:42:27 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_ltk_neg_reply={{0x201b, 0x2}, {0xc9}}}, 0x6) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) [ 1035.140592] loop6: detected capacity change from 0 to 10 [ 1035.166463] loop4: detected capacity change from 0 to 40 [ 1035.170021] loop5: detected capacity change from 0 to 40 05:42:27 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x1, 0xf7, 0x0, 0x2, 0x0, 0xfffffffffffffe5a, 0x82131, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000000), 0x7}, 0x80, 0x6, 0x2, 0x0, 0x3, 0x80000000, 0x8001, 0x0, 0x3ff, 0x0, 0x9}, 0xffffffffffffffff, 0xc, r0, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup(r1) ioctl$sock_bt_hci(r2, 0x400448cc, 0x0) 05:42:27 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) (fail_nth: 25) 05:42:27 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xd00, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:42:27 executing program 0: r0 = memfd_secret(0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000000)={{0xf8, 0x8}, 'port1\x00', 0x8, 0x52, 0x7, 0x8, 0x3, 0x8, 0xffffffff, 0x0, 0x2, 0x28}) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:42:27 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) [ 1035.316641] loop6: detected capacity change from 0 to 10 05:42:28 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) fallocate(r1, 0x0, 0x7, 0x8) [ 1035.350471] loop1: detected capacity change from 0 to 40 [ 1035.357745] FAULT_INJECTION: forcing a failure. [ 1035.357745] name failslab, interval 1, probability 0, space 0, times 0 [ 1035.359222] CPU: 1 PID: 7138 Comm: syz-executor.4 Not tainted 6.4.0-next-20230703 #1 [ 1035.360283] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1035.361353] Call Trace: [ 1035.361699] [ 1035.362009] dump_stack_lvl+0xc1/0xf0 [ 1035.362540] should_fail_ex+0x4b4/0x5b0 [ 1035.363077] ? __kernfs_new_node+0xd4/0x890 [ 1035.363657] should_failslab+0x9/0x20 [ 1035.364170] kmem_cache_alloc+0x62/0x370 [ 1035.364734] __kernfs_new_node+0xd4/0x890 [ 1035.365308] ? __pfx___kernfs_new_node+0x10/0x10 [ 1035.365936] ? find_held_lock+0x2c/0x110 [ 1035.366497] ? kernfs_add_one+0x3d5/0x530 [ 1035.367062] ? lock_release+0x1e3/0x680 [ 1035.367606] ? __pfx_lock_release+0x10/0x10 [ 1035.368181] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1035.368922] kernfs_new_node+0x97/0x120 [ 1035.369473] __kernfs_create_file+0x55/0x350 [ 1035.370072] sysfs_add_file_mode_ns+0x21c/0x440 [ 1035.370720] ? __pfx_dev_attr_store+0x10/0x10 [ 1035.371345] internal_create_group+0x322/0xb00 [ 1035.371993] ? __pfx_internal_create_group+0x10/0x10 [ 1035.372717] loop_configure+0xce5/0x1910 [ 1035.373314] lo_ioctl+0x934/0x19a0 [ 1035.373805] ? kmem_cache_free+0x10d/0x4d0 [ 1035.374392] ? __x64_sys_openat+0x143/0x200 [ 1035.374991] ? do_syscall_64+0x3f/0x90 [ 1035.375546] ? __pfx_lo_ioctl+0x10/0x10 [ 1035.376107] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 1035.376843] ? perf_trace_lock_acquire+0xcf/0x500 [ 1035.377525] ? __lock_acquire+0xc3f/0x6340 [ 1035.378125] ? perf_trace_lock_acquire+0xcf/0x500 [ 1035.378846] ? __pfx_do_sys_openat2+0x10/0x10 [ 1035.379492] ? __pfx_lo_ioctl+0x10/0x10 [ 1035.380045] blkdev_ioctl+0x2e4/0x750 [ 1035.380594] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1035.381193] ? selinux_file_ioctl+0xba/0x270 [ 1035.381817] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1035.382423] __x64_sys_ioctl+0x1a4/0x210 [ 1035.383002] do_syscall_64+0x3f/0x90 [ 1035.383533] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1035.384249] RIP: 0033:0x7fd764d758d7 [ 1035.384777] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1035.387151] RSP: 002b:00007fd7622eaf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1035.388158] RAX: ffffffffffffffda RBX: 00007fd764dbf970 RCX: 00007fd764d758d7 [ 1035.389112] RDX: 0000000000000005 RSI: 0000000000004c00 RDI: 0000000000000006 [ 1035.390060] RBP: 0000000000000006 R08: 0000000000000000 R09: ffffffffffffffff [ 1035.391002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1035.391940] R13: 0000000000000005 R14: 0000000020000230 R15: 0000000000000002 [ 1035.392912] 05:42:28 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000)={0x9, 0x2, 0x6, 0x0, 0x2}) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup(r2) ioctl$sock_bt_hci(r3, 0x400448cc, &(0x7f0000000240)) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f0000000040)={{0x4, 0x1}, 0x1, 0xff, 0x10000, {0x1f, 0x6}, 0x6}) [ 1035.487886] loop4: detected capacity change from 0 to 40 05:42:28 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xe00, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) [ 1035.542397] loop6: detected capacity change from 0 to 10 05:42:28 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 05:42:28 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) write$binfmt_elf32(r0, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x5, 0x8, 0x1, 0x0, 0x3, 0x3, 0x3, 0x15a, 0x38, 0x1f4, 0x81, 0x7ca0, 0x20, 0x2, 0xfffe, 0xfff, 0x7f}, [{0x6, 0x6, 0x1, 0x8, 0xaf5, 0x101, 0x7, 0x6}], "99d3317138530e939a8d5b392448e1a239c92d47482810d9c9db791d9ec92976794e09ad9a", ['\x00', '\x00', '\x00']}, 0x37d) syz_io_uring_setup(0x2e89, &(0x7f0000000480)={0x0, 0xa543, 0x0, 0x3, 0x22f}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) [ 1036.206677] loop5: detected capacity change from 0 to 40 05:42:42 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) (fail_nth: 26) 05:42:42 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() wait4(r1, &(0x7f0000000240), 0x8, 0x0) tgkill(r1, r1, 0x6) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x4, 0x2, 0x0, 0x800, 0x2101, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x80, 0x5, 0x1, 0x9, 0xfffffffffffff800, 0xfffffff7, 0x2, 0x0, 0xfffffffb, 0x0, 0x6}, r1, 0x5, r0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r2) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) ioctl$sock_bt_hci(r3, 0x400448dc, 0x0) 05:42:42 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r2) getdents64(r0, &(0x7f0000000000)=""/57, 0x39) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:42:42 executing program 0: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ftruncate(r0, 0x3) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xc, 0x80010, r0, 0x8000000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/9p', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000300)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x77359400}, 0x1, 0x1}, 0x87e8) r5 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa, 0x13, r3, 0x10000000) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x6000, @fd_index=0x5, 0xfffffffffffffff9, &(0x7f0000000040)=""/2, 0x2, 0x6, 0x1}, 0x33) r6 = io_uring_setup(0x7c50, &(0x7f0000000140)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x14, 0x0, r7) syz_io_uring_submit(r2, r5, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1, 0x800, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 05:42:42 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7, 0x0, 0x0, 0x8e8, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000300)=0x7fffffff) syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 05:42:42 executing program 5: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, &(0x7f0000000000)={0xffffffff, 0x1809cfe7, 0x8001, 0x4}) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) finit_module(r2, &(0x7f0000000080)='\xe1(.\x00', 0x0) 05:42:42 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) openat(0xffffffffffffffff, 0x0, 0x18000, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 05:42:42 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xf00, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) [ 1049.514589] loop4: detected capacity change from 0 to 40 [ 1049.517958] loop1: detected capacity change from 0 to 40 [ 1049.523448] loop2: detected capacity change from 0 to 40 [ 1049.556551] ================================================================== [ 1049.557532] BUG: KASAN: use-after-free in init_module_from_file+0x630/0x6b0 [ 1049.558443] Read of size 8 at addr ffff88801f2dfe20 by task syz-executor.5/7179 [ 1049.559386] [ 1049.559619] CPU: 1 PID: 7179 Comm: syz-executor.5 Not tainted 6.4.0-next-20230703 #1 [ 1049.560615] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1049.561653] Call Trace: [ 1049.561997] [ 1049.562302] dump_stack_lvl+0x91/0xf0 [ 1049.562826] print_report+0xcc/0x620 [ 1049.563344] ? __virt_addr_valid+0x102/0x340 [ 1049.563950] ? init_module_from_file+0x630/0x6b0 [ 1049.564588] ? init_module_from_file+0x630/0x6b0 [ 1049.565224] kasan_report+0xbe/0xf0 [ 1049.565732] ? init_module_from_file+0x630/0x6b0 [ 1049.566376] init_module_from_file+0x630/0x6b0 [ 1049.566987] ? __pfx_init_module_from_file+0x10/0x10 [ 1049.567655] ? lock_acquire+0x19a/0x4c0 [ 1049.568204] ? xfd_validate_state+0x51/0x170 [ 1049.568825] __x64_sys_finit_module+0xee/0x160 [ 1049.569439] do_syscall_64+0x3f/0x90 [ 1049.573940] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1049.574841] RIP: 0033:0x7f3ee20f0b19 [ 1049.575342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1049.577699] RSP: 002b:00007f3edf666188 EFLAGS: 00000246 ORIG_RAX: 0000000000000139 [ 1049.578695] RAX: ffffffffffffffda RBX: 00007f3ee2203f60 RCX: 00007f3ee20f0b19 [ 1049.579630] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000004 [ 1049.580573] RBP: 00007f3ee214af6d R08: 0000000000000000 R09: 0000000000000000 [ 1049.581506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1049.582437] R13: 00007ffdcd3c793f R14: 00007f3edf666300 R15: 0000000000022000 [ 1049.583383] [ 1049.583703] [ 1049.583940] The buggy address belongs to the physical page: [ 1049.584680] page:000000009b1ed33c refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1f2df [ 1049.585880] flags: 0x100000000000000(node=0|zone=1) [ 1049.586534] page_type: 0xffffffff() [ 1049.587010] raw: 0100000000000000 0000000000000000 ffffea00007cb7c8 0000000000000000 [ 1049.588117] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 1049.589126] page dumped because: kasan: bad access detected [ 1049.589871] [ 1049.590109] Memory state around the buggy address: [ 1049.590759] ffff88801f2dfd00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1049.591708] ffff88801f2dfd80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1049.592658] >ffff88801f2dfe00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1049.593944] ^ [ 1049.594588] ffff88801f2dfe80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1049.595566] ffff88801f2dff00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1049.596579] ================================================================== [ 1049.597612] Disabling lock debugging due to kernel taint [ 1049.598392] general protection fault, probably for non-canonical address 0xeac826e83f43c1fd: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 1049.599933] KASAN: maybe wild-memory-access in range [0x56415741fa1e0fe8-0x56415741fa1e0fef] [ 1049.601098] CPU: 1 PID: 7179 Comm: syz-executor.5 Tainted: G B 6.4.0-next-20230703 #1 [ 1049.602386] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1049.603533] RIP: 0010:init_module_from_file+0x1c1/0x6b0 [ 1049.604285] Code: 0f 84 c4 01 00 00 e8 5e 36 12 00 4d 89 e7 49 83 ef 08 74 61 e8 50 36 12 00 4c 89 fa 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 5d 04 00 00 4d 3b 2f 0f 84 ae 00 00 00 e8 27 36 [ 1049.607335] RSP: 0018:ffff888044db7d28 EFLAGS: 00010212 [ 1049.608161] RAX: dffffc0000000000 RBX: 00000000000000d8 RCX: ffffc90004ffb000 [ 1049.609277] RDX: 0ac82ae83f43c1fd RSI: ffffffff813a30d0 RDI: ffffffff810811d0 [ 1049.610355] RBP: ffff888008ebbb80 R08: 0000000000000007 R09: 0000000000000000 [ 1049.611432] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88801f2dfe28 [ 1049.612525] R13: ffff888009bfd7d8 R14: ffffffff87b7c360 R15: 56415741fa1e0feb [ 1049.613612] FS: 00007f3edf666700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 1049.614793] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1049.615599] CR2: 0000001b2c627000 CR3: 000000000dab8000 CR4: 0000000000350ee0 [ 1049.616583] Call Trace: [ 1049.616946] [ 1049.617271] ? die_addr+0x3c/0xa0 [ 1049.617789] ? exc_general_protection+0x125/0x220 [ 1049.618496] ? asm_exc_general_protection+0x26/0x30 [ 1049.619206] ? init_module_from_file+0x1b0/0x6b0 [ 1049.619931] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1049.620699] ? init_module_from_file+0x1c1/0x6b0 [ 1049.621414] ? init_module_from_file+0x1b0/0x6b0 [ 1049.622110] ? __pfx_init_module_from_file+0x10/0x10 [ 1049.622860] ? lock_acquire+0x19a/0x4c0 [ 1049.623506] ? xfd_validate_state+0x51/0x170 [ 1049.624132] __x64_sys_finit_module+0xee/0x160 [ 1049.624798] do_syscall_64+0x3f/0x90 [ 1049.625329] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1049.626041] RIP: 0033:0x7f3ee20f0b19 [ 1049.626548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1049.629039] RSP: 002b:00007f3edf666188 EFLAGS: 00000246 ORIG_RAX: 0000000000000139 [ 1049.630118] RAX: ffffffffffffffda RBX: 00007f3ee2203f60 RCX: 00007f3ee20f0b19 [ 1049.631197] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000004 [ 1049.632163] RBP: 00007f3ee214af6d R08: 0000000000000000 R09: 0000000000000000 [ 1049.633121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1049.634051] R13: 00007ffdcd3c793f R14: 00007f3edf666300 R15: 0000000000022000 [ 1049.635000] [ 1049.635320] Modules linked in: [ 1049.637427] ---[ end trace 0000000000000000 ]--- [ 1049.638310] RIP: 0010:init_module_from_file+0x1c1/0x6b0 [ 1049.639068] Code: 0f 84 c4 01 00 00 e8 5e 36 12 00 4d 89 e7 49 83 ef 08 74 61 e8 50 36 12 00 4c 89 fa 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 5d 04 00 00 4d 3b 2f 0f 84 ae 00 00 00 e8 27 36 [ 1049.641495] RSP: 0018:ffff888044db7d28 EFLAGS: 00010212 [ 1049.642227] RAX: dffffc0000000000 RBX: 00000000000000d8 RCX: ffffc90004ffb000 [ 1049.643179] RDX: 0ac82ae83f43c1fd RSI: ffffffff813a30d0 RDI: ffffffff810811d0 [ 1049.644102] RBP: ffff888008ebbb80 R08: 0000000000000007 R09: 0000000000000000 [ 1049.645043] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88801f2dfe28 [ 1049.645954] R13: ffff888009bfd7d8 R14: ffffffff87b7c360 R15: 56415741fa1e0feb [ 1049.646876] FS: 00007f3edf666700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 1049.647901] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1049.648657] CR2: 0000001b2c627000 CR3: 000000000dab8000 CR4: 0000000000350ee0 [ 1049.649576] note: syz-executor.5[7179] exited with preempt_count 1 05:42:42 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) (fail_nth: 27) [ 1049.658631] loop6: detected capacity change from 0 to 10 05:42:42 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1020, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) [ 1049.796226] loop6: detected capacity change from 0 to 10 05:42:42 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) [ 1049.844339] loop4: detected capacity change from 0 to 40 05:42:42 executing program 6: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1030, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)) 05:42:42 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x8, 0x80, 0x7, 0x20, 0x0, 0xffff, 0x800, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x100000001, 0x2}, 0x1001, 0xffffffff, 0x6204, 0x9, 0x2, 0xc406, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x2, r1, 0xa) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000100)) 05:42:42 executing program 7: memfd_secret(0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup(r1) ioctl$sock_bt_hci(r2, 0x400448de, &(0x7f0000000340)="98ed6d7e6de17220ed22fdb2a9623cb261b2e2ca5a01cc37af47d8852e464846aba253646b60f2b319e25f3fc27eb1b24d90dbbcac1add0d25fa6d991038fe3961b0834071c3b168ee7d59147246b8e3e58395348dde8a56f6deb67e39f26d0cc7a0b05110acf9325a7c18b05b0c0cd2a6330011b487ab06c77c0beba7a67972925feba6d51eb5a14a5ca0ec5be71619eab30bb2844e7450f9cf92e32a794ce3c83f083348c1e10ec7aa76f7fba681240022b0d597bf7681c520010fc67873a823808c2371bef90679ede91bb21778406a239954165ebe1280afe52d5cf40ddfccb98c617f21a8daf87200e61d6f7565da3d") r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup(r3) ioctl$sock_bt_hci(r4, 0x400448cc, &(0x7f0000000240)) r5 = dup(r4) sendmsg$AUDIT_USER(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="8cd30000ed0900df25399bdfbb6204fd05cf6c9394e0dcd6e22eab511aba2a4874299e3af0b5e70c19992b9de058e33360f407270fbe5dcb92ff9aef7fd439c0479fab5b7294bf7f1ab2b1f9ffffff386bf97068ef8c44d5da69806a02d90e30d3d554baa4840516a58e2dce9160a27b9481da8a41e47fe796c500000000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r6) ioctl$sock_bt_hci(r6, 0x800448d4, &(0x7f0000000280)="01f54e3e31cfebe32f85d334babf3ab5b8f74f04ea7246b088c777ffe1024798c44eeb651f93d473470c10544d5e5573225378c2d47b976ac200a279db2d02d59999858aa05c67f4759433ce0272c9bd8e222316c6cf9b68d2d87b288fa7abb7b3e6e8ff9f2685677bf3a8ece94dfbedd2034deec81b4f6b7898b1dd822a7c3080984477666def2e45bc3810d0dc794ab3e73810310c7d88fdcb4d75a0da0c35b03fc992e998") pipe(&(0x7f0000000040)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 05:42:42 executing program 0: socket$inet6(0xa, 0xd, 0x0) r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000000)) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x0, &(0x7f0000000040), 0x0, 0x4) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000240)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="c1d915067f3c7127cb16ba15e6a62d6b1a6e7fda30d1918fb3e3da87f9ab6b09ea22e7379145a60b9eac421b3509a649fb70d68b015a64999826ad9051a3a53b92f4e8dcfc377bddd6cbe7406b1fea6ecfa63d0569fc7f84d98822c344c90d00a80b3c229bac69a4bc44a6a74b84a81c21042395e6510121cbf71f560f1e747a857ce90ea115b9f5e98a0108bd79541ac7f4bf851237e7aa6187487bd203e155aa5b71e9f4979452b35e6de5339f", 0xae}], 0x1, &(0x7f00000001c0)}, 0x0, 0x4010, 0x1, {0x0, r4}}, 0xd242) 05:42:42 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x2, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) [ 1049.958622] loop4: detected capacity change from 0 to 40 05:42:42 executing program 7: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ftruncate(r0, 0x3) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x8, 0x115480) move_mount(r2, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x60) [ 1050.353417] syz-executor.2 (7168) used greatest stack depth: 23192 bytes left VM DIAGNOSIS: 05:42:42 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=0000000000000000 RCX=0000000000000000 RDX=1ffffffff0f70c50 RSI=ffffffff81556597 RDI=ffffffff87b86280 RBP=0000000000000024 RSP=ffff888042bef550 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000028 R12=ffff88806ce34ce0 R13=ffff888042bef5f0 R14=ffff888042bef630 R15=ffffffff8550eea0 RIP=ffffffff815565b4 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f8c3e46b700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f34ee7f77e0 CR3=00000000094e8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff825166e5 RDI=ffffffff87f7f7a0 RBP=ffffffff87f7f760 RSP=ffff888044db76d0 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=637379735f6f6420 R12=0000000000000005 R13=ffffffff87f7f760 R14=0000000000000010 R15=ffffffff825166d0 RIP=ffffffff8251673d RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f3edf666700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2c627000 CR3=000000000dab8000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=667265700a3a34206d6172676f727020 XMM02=307b3d29303830303030303030306637 XMM03=30202c307830202c307830202c307830 XMM04=2c307830202c307830202c307830202c XMM05=7830202c307830202c307830202c3078 XMM06=202c307830202c307830202c30783020 XMM07=307830202c307830202c307830202c30 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000