00000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x14ee00) 21:44:09 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) mount_setattr(r0, &(0x7f0000000240)='./file1\x00', 0x100, &(0x7f0000000280)={0x34, 0xf465a57d99953c0c, 0x120000}, 0x20) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[], 0x24f) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r2, 0x0) r3 = mq_open(&(0x7f00000000c0)='^+T\x00', 0x1, 0x100, &(0x7f0000000180)={0x2153, 0x8001, 0x7f, 0x80}) accept4$unix(r2, &(0x7f00000002c0), &(0x7f0000000340)=0x6e, 0x80800) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3, {0x401}}, './file2\x00'}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r4, &(0x7f0000000200)='E', 0x140000) [ 1560.052690] loop2: detected capacity change from 0 to 39 [ 1560.053912] loop5: detected capacity change from 0 to 39 [ 1560.060783] syz-executor.2: attempt to access beyond end of device [ 1560.060783] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1560.061635] Buffer I/O error on dev loop2, logical block 31, lost async page write [ 1560.067001] syz-executor.5: attempt to access beyond end of device [ 1560.067001] loop5: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1560.067837] Buffer I/O error on dev loop5, logical block 31, lost async page write [ 1560.071422] syz-executor.2: attempt to access beyond end of device [ 1560.071422] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1560.072335] Buffer I/O error on dev loop2, logical block 31, lost async page write [ 1560.078252] loop6: detected capacity change from 0 to 39 [ 1560.121323] loop7: detected capacity change from 0 to 39 21:44:09 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x14000e) 21:44:09 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) [ 1560.132018] loop3: detected capacity change from 0 to 39 [ 1560.133216] loop4: detected capacity change from 0 to 39 [ 1560.168549] loop2: detected capacity change from 0 to 39 [ 1560.184332] syz-executor.2: attempt to access beyond end of device [ 1560.184332] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1560.185356] Buffer I/O error on dev loop2, logical block 31, lost async page write [ 1560.207205] loop5: detected capacity change from 0 to 39 21:44:09 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x14000f) [ 1560.251614] syz-executor.7: attempt to access beyond end of device [ 1560.251614] loop7: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 1560.253371] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 1560.345738] loop2: detected capacity change from 0 to 39 [ 1560.378180] syz-executor.2: attempt to access beyond end of device [ 1560.378180] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1560.379188] Buffer I/O error on dev loop2, logical block 31, lost async page write 21:44:21 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x4401000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:44:21 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r3, r2, 0x0, 0xfffffdef) 21:44:21 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendfile(r1, r0, 0x0, 0x3ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r2, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x154, r5, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}, @NL80211_ATTR_REG_RULES={0x11c, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x864}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7f}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xffff}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xffffff7f}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x405}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffffa}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x74}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xacf}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x401}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffff7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4d7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x10001}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x80000001}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x154}, 0x1, 0x0, 0x0, 0x800}, 0x1) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r5, 0x5, 0x0, 0x0, {{}, {@void, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xf, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0xfffffffffffffffe, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x3c}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004f540)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0xff, "3e3b3204ece552"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000180)=ANY=[@ANYRES64=r7, @ANYBLOB="01000000000000003f4300000000000000800000000000006300000000000000000000000000120006000000000000000400000000000000ffffff7f02000000080000000000000000000000000000000800"/112]) write(r3, &(0x7f0000000200)='E', 0x140000) 21:44:21 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) 21:44:21 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0xfdfdffff, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="55901e48393d12bbb246b3409e2806c50805982a95ba33e37c1db7a27b65c681b091898df49d24e3c824b8eafdffffffffffffbf86775c3a9f5786bffe1311db1a3fbedb589e7c16e527ac089bcc9d8a70d028f7f7ea3498684c0b7cf5527ce2c7f304d94c3415070d6a184d40573bfed2a2b2ae741c4f0ae1d7269f1adea5fb6831d94720c9d7850dfac898f7b15ae0167f595003ab5af6d87d8c10377e574e127802349b9e853c44128373c413ae2bc905867cd6942e4cc55ebd33f43b5902d7455afd67b60f4967320a1075a4d4570de625c9f02338da9a0bfd4e32b8810e82351e4612409fd4c2444fad3b34c8404bac692b9bc4e1e45704d6fd88e3f29965daa9106008", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:44:21 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r5, 0x0, 0x24f) sendfile(r5, r4, 0x0, 0xfffffdef) 21:44:21 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140010) 21:44:21 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x14ef00) [ 1572.095780] loop7: detected capacity change from 0 to 39 [ 1572.099401] loop5: detected capacity change from 0 to 39 [ 1572.104783] loop2: detected capacity change from 0 to 39 [ 1572.106720] loop3: detected capacity change from 0 to 39 [ 1572.117243] loop4: detected capacity change from 0 to 39 [ 1572.126175] loop6: detected capacity change from 0 to 39 [ 1572.164660] syz-executor.2: attempt to access beyond end of device [ 1572.164660] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 21:44:21 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) [ 1572.166375] Buffer I/O error on dev loop2, logical block 31, lost async page write [ 1572.176151] syz-executor.7: attempt to access beyond end of device [ 1572.176151] loop7: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 1572.177785] Buffer I/O error on dev loop7, logical block 10, lost async page write 21:44:21 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x14effd) 21:44:21 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0xfeffffff, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="55901e48393d12bbb246b3409e2806c50805982a95ba33e37c1db7a27b65c681b091898df49d24e3c824b8eafdffffffffffffbf86775c3a9f5786bffe1311db1a3fbedb589e7c16e527ac089bcc9d8a70d028f7f7ea3498684c0b7cf5527ce2c7f304d94c3415070d6a184d40573bfed2a2b2ae741c4f0ae1d7269f1adea5fb6831d94720c9d7850dfac898f7b15ae0167f595003ab5af6d87d8c10377e574e127802349b9e853c44128373c413ae2bc905867cd6942e4cc55ebd33f43b5902d7455afd67b60f4967320a1075a4d4570de625c9f02338da9a0bfd4e32b8810e82351e4612409fd4c2444fad3b34c8404bac692b9bc4e1e45704d6fd88e3f29965daa9106008", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) [ 1572.208448] loop5: detected capacity change from 0 to 39 21:44:21 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x7c02000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1572.282200] loop3: detected capacity change from 0 to 39 21:44:22 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140011) [ 1572.346304] loop4: detected capacity change from 0 to 39 21:44:22 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[], 0x24f) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0x10000) r3 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder-control\x00', 0x802, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000180), 0x2200c, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, 0xee00}}, {@privport}, {@debug={'debug', 0x3d, 0x5}}], [{@dont_appraise}]}}) syz_open_dev$ptys(0xc, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xf, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x44}}, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000000, 0x214e1ab0d8cb9f19, r4, 0xd1a30000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x8, 0x0) write(r6, &(0x7f0000000200)='E', 0x140000) [ 1572.356888] loop2: detected capacity change from 0 to 39 [ 1572.388871] syz-executor.2: attempt to access beyond end of device [ 1572.388871] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1572.389700] Buffer I/O error on dev loop2, logical block 31, lost async page write [ 1572.395025] syz-executor.4: attempt to access beyond end of device [ 1572.395025] loop4: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1572.395948] Buffer I/O error on dev loop4, logical block 31, lost async page write 21:44:22 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r5, 0x0, 0x24f) sendfile(r5, r4, 0x0, 0xfffffdef) 21:44:22 executing program 5: chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) 21:44:22 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0xfffffdfd, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="55901e48393d12bbb246b3409e2806c50805982a95ba33e37c1db7a27b65c681b091898df49d24e3c824b8eafdffffffffffffbf86775c3a9f5786bffe1311db1a3fbedb589e7c16e527ac089bcc9d8a70d028f7f7ea3498684c0b7cf5527ce2c7f304d94c3415070d6a184d40573bfed2a2b2ae741c4f0ae1d7269f1adea5fb6831d94720c9d7850dfac898f7b15ae0167f595003ab5af6d87d8c10377e574e127802349b9e853c44128373c413ae2bc905867cd6942e4cc55ebd33f43b5902d7455afd67b60f4967320a1075a4d4570de625c9f02338da9a0bfd4e32b8810e82351e4612409fd4c2444fad3b34c8404bac692b9bc4e1e45704d6fd88e3f29965daa9106008", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) [ 1572.459431] loop7: detected capacity change from 0 to 39 [ 1572.551247] syz-executor.7: attempt to access beyond end of device [ 1572.551247] loop7: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 1572.553078] Buffer I/O error on dev loop7, logical block 10, lost async page write 21:44:35 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x14f000) 21:44:35 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r5, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(0xffffffffffffffff, r4, 0x0, 0xfffffdef) 21:44:35 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0xdf6}, 0x1c) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xda21f3c104e41ec, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[], 0x24f) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) 21:44:35 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x9e00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:44:35 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0xffffff0f, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="55901e48393d12bbb246b3409e2806c50805982a95ba33e37c1db7a27b65c681b091898df49d24e3c824b8eafdffffffffffffbf86775c3a9f5786bffe1311db1a3fbedb589e7c16e527ac089bcc9d8a70d028f7f7ea3498684c0b7cf5527ce2c7f304d94c3415070d6a184d40573bfed2a2b2ae741c4f0ae1d7269f1adea5fb6831d94720c9d7850dfac898f7b15ae0167f595003ab5af6d87d8c10377e574e127802349b9e853c44128373c413ae2bc905867cd6942e4cc55ebd33f43b5902d7455afd67b60f4967320a1075a4d4570de625c9f02338da9a0bfd4e32b8810e82351e4612409fd4c2444fad3b34c8404bac692b9bc4e1e45704d6fd88e3f29965daa9106008", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:44:35 executing program 5: chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) 21:44:35 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r3, r2, 0x0, 0xfffffdef) 21:44:35 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140019) [ 1586.256826] loop6: detected capacity change from 0 to 39 [ 1586.258855] loop3: detected capacity change from 0 to 39 [ 1586.259854] loop7: detected capacity change from 0 to 39 [ 1586.262570] loop2: detected capacity change from 0 to 39 [ 1586.305060] syz-executor.2: attempt to access beyond end of device [ 1586.305060] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1586.306642] Buffer I/O error on dev loop2, logical block 31, lost async page write [ 1586.320352] syz-executor.7: attempt to access beyond end of device [ 1586.320352] loop7: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 1586.322018] Buffer I/O error on dev loop7, logical block 10, lost async page write 21:44:36 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0xa400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:44:36 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x14f110) 21:44:36 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r5, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(0xffffffffffffffff, r4, 0x0, 0xfffffdef) 21:44:36 executing program 5: chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) 21:44:36 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0xfffffff5, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:44:36 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140048) 21:44:36 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0xb600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:44:36 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) [ 1586.589429] loop3: detected capacity change from 0 to 39 [ 1586.622863] loop7: detected capacity change from 0 to 39 [ 1586.647116] loop2: detected capacity change from 0 to 39 [ 1586.662527] loop5: detected capacity change from 0 to 39 [ 1586.717332] syz-executor.7: attempt to access beyond end of device [ 1586.717332] loop7: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 1586.718891] Buffer I/O error on dev loop7, logical block 10, lost async page write 21:44:36 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0xfffffff6, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) [ 1586.742244] syz-executor.2: attempt to access beyond end of device [ 1586.742244] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1586.743783] Buffer I/O error on dev loop2, logical block 31, lost async page write 21:44:36 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x14f60f) [ 1586.907713] loop3: detected capacity change from 0 to 39 21:44:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x14fdef) 21:44:48 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0xce00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:44:48 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) 21:44:48 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x14004c) 21:44:48 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r3, r2, 0x0, 0xfffffdef) 21:44:48 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r5, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(0xffffffffffffffff, r4, 0x0, 0xfffffdef) 21:44:48 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0xfffffffe, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:44:48 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x400000, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) openat(r0, &(0x7f00000000c0)='./file1\x00', 0x108000, 0x44) write(r2, &(0x7f0000000200)='E', 0x140000) memfd_secret(0x80000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000600)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000340)={{}, 0x0, 0x10, @inherit={0x60, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000300000000000078551f000101720000000000f8ffffffffffffff000000000000070003000000000000005b00000000000000ffffffff0000000000100000000000000400000000000000030000000000001236"]}, @devid=r3}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000001340)={r3, 0x3, 0x0, [0x9, 0x53a, 0x8, 0x9], [0x80000000, 0x60000, 0x406, 0x3, 0x3ff, 0x8, 0x0, 0x1b, 0x5, 0x8, 0xad4, 0x9, 0x2, 0x1, 0x0, 0x54, 0x5, 0x3, 0x2, 0x7, 0x9, 0x2, 0x100, 0xa0000000000000, 0x9, 0x400, 0xfd, 0x8984, 0x1, 0x1, 0x2, 0x3, 0x4000000000, 0x8001, 0x7, 0x200, 0x1, 0x9, 0x0, 0x0, 0x2, 0x8001, 0x8, 0x3ff, 0xd2c, 0xffffffffffffffff, 0x4, 0x7, 0x1fe000, 0x1b, 0x81, 0x100000001, 0x0, 0x401, 0x20, 0x20, 0x0, 0x80000001, 0xfff, 0x4, 0x80, 0x81, 0x391855e4, 0x7, 0x1, 0x1f, 0xc, 0x1, 0x1, 0x4cc, 0x7fffffff, 0x1, 0x7, 0x200, 0xc1f, 0x9c69, 0x889, 0xffffffffffffffff, 0x6, 0x8000, 0x9, 0x3, 0x36ce, 0x8, 0x6, 0x3, 0x0, 0x7fffffff, 0x5, 0x100000001, 0x3, 0x5c1, 0x7, 0x40, 0x59, 0x1, 0x2, 0x7aa, 0xffffffffffffffff, 0x200, 0x5, 0x1, 0x7, 0x80, 0xfffffffffffffffd, 0xfffffffffffff801, 0x1f, 0x38, 0x0, 0xfffffffffffffffe, 0x7, 0x100, 0x3, 0x5, 0x25c, 0x0, 0x52, 0x1, 0x9, 0x7fff, 0x8001]}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000600)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000340)={{}, 0x0, 0x10, @inherit={0x60, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000300000000000078551f000101720000000000f8ffffffffffffff000000000000070003000000000000005b00000000000000ffffffff0000000000100000000000000400000000000000030000000000001236"]}, @devid=r4}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000240)={r4, 0x7, 0x0, [0x40, 0x0, 0xfff, 0x8, 0x4], [0x1, 0x101, 0x5, 0x2, 0x2d5b, 0x8, 0x0, 0xfffffffffffffffa, 0x3ff, 0xff, 0xe84, 0x612ad3a7, 0x1, 0x40, 0x9, 0x3, 0x494ee685, 0x6, 0x297, 0xef, 0x100, 0x9, 0x6, 0x4, 0x1, 0x9, 0x3, 0xe1, 0x9, 0x0, 0x1000, 0x5ed, 0xc487, 0x7, 0xd5a, 0x8, 0x8, 0x6, 0x7fffffff, 0x3fe, 0x8, 0x8, 0x0, 0x8e, 0xffffffffffffffcc, 0x100000000, 0x4eeb, 0x2, 0x9, 0x0, 0x9, 0xfd6e, 0x5, 0xf1, 0x1, 0x10000, 0x0, 0x9, 0x4, 0x10001, 0x4f, 0x2, 0x5, 0x7f, 0x8, 0xd2e7, 0x9, 0x3ff, 0x1, 0x8, 0x80000001, 0x8, 0x31, 0x7f, 0x0, 0x2, 0x7, 0xfffffffffffffffc, 0x9, 0x2, 0x9, 0x8, 0x1, 0x101, 0x401, 0xce, 0x7, 0x42a, 0x8001, 0x0, 0x2, 0x68, 0x7, 0x101, 0x9340, 0x5, 0x9, 0xffffffff80000001, 0x9, 0x0, 0x5, 0x0, 0x8001, 0x9a, 0x5, 0x100000001, 0x6, 0x5, 0x3ff, 0x0, 0x49c9, 0x2, 0xfff, 0x80, 0x53ea, 0x3f, 0x5, 0x1f, 0xaa, 0x3ff, 0x4]}) 21:44:48 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0xce03000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1599.167257] loop6: detected capacity change from 0 to 39 [ 1599.199419] loop4: detected capacity change from 0 to 39 [ 1599.219104] loop5: detected capacity change from 0 to 39 [ 1599.220774] loop3: detected capacity change from 0 to 39 [ 1599.233404] loop2: detected capacity change from 0 to 39 [ 1599.235404] loop7: detected capacity change from 0 to 39 [ 1599.290840] syz-executor.2: attempt to access beyond end of device [ 1599.290840] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1599.292641] Buffer I/O error on dev loop2, logical block 31, lost async page write 21:44:49 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0xffffffff, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:44:49 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0xe003000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1599.382038] syz-executor.7: attempt to access beyond end of device [ 1599.382038] loop7: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 1599.382938] Buffer I/O error on dev loop7, logical block 10, lost async page write 21:44:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x14feff) 21:44:49 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140068) 21:44:49 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) 21:44:49 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:44:49 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r4, 0xffffffffffffffff, 0x0, 0xfffffdef) [ 1599.498896] loop3: detected capacity change from 0 to 39 21:44:49 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f00000000c0)='./file1\x00') chdir(&(0x7f0000000140)='./file0\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xf, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x44}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xd2}}, './file0\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000440)=ANY=[], 0x24f) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r4, &(0x7f0000000200)='E', 0x140000) [ 1599.503729] loop2: detected capacity change from 0 to 39 [ 1599.538561] loop5: detected capacity change from 0 to 39 21:44:49 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0xe203000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1599.569445] syz-executor.2: attempt to access beyond end of device [ 1599.569445] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1599.571148] Buffer I/O error on dev loop2, logical block 31, lost async page write [ 1599.592728] loop7: detected capacity change from 0 to 39 [ 1599.612752] loop4: detected capacity change from 0 to 39 [ 1599.707096] syz-executor.7: attempt to access beyond end of device [ 1599.707096] loop7: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 1599.708725] Buffer I/O error on dev loop7, logical block 10, lost async page write 21:44:49 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0xe402000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:45:01 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="55901e48393d12bbb246b3409e2806c50805982a95ba33e37c1db7a27b65c681b091898df49d24e3c824b8eafdffffffffffffbf86775c3a9f5786bffe1311db1a3fbedb589e7c16e527ac089bcc9d8a70d028f7f7ea3498684c0b7cf5527ce2c7f304d94c3415070d6a184d40573bfed2a2b2ae741c4f0ae1d7269f1adea5fb6831d94720c9d7850dfac898f7b15ae0167f595003ab5af6d87d8c10377e574e127802349b9e853c44128373c413ae2bc905867cd6942e4cc55ebd33f43b5902d7455afd67b60f4967320a1075a4d4570de625c9f02338da9a0bfd4e32b8810e82351e4612409fd4c2444fad3b34c8404bac692b9bc4e1e45704d6fd88e3f29965daa9106008", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:45:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x14ff0d) 21:45:01 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r3, r2, 0x0, 0xfffffdef) 21:45:01 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) creat(&(0x7f00000000c0)='./file1\x00', 0x14e) write(r2, &(0x7f0000000200)='E', 0x140000) 21:45:01 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) 21:45:01 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x14006c) 21:45:01 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r4, 0xffffffffffffffff, 0x0, 0xfffffdef) 21:45:01 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0xec01000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1611.635911] loop7: detected capacity change from 0 to 39 [ 1611.651809] loop5: detected capacity change from 0 to 39 [ 1611.656362] loop4: detected capacity change from 0 to 39 [ 1611.673680] loop2: detected capacity change from 0 to 39 21:45:01 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0xec02000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1611.676836] loop3: detected capacity change from 0 to 39 [ 1611.694529] syz-executor.4: attempt to access beyond end of device [ 1611.694529] loop4: rw=2049, sector=40, nr_sectors = 8 limit=39 [ 1611.699032] syz-executor.7: attempt to access beyond end of device [ 1611.699032] loop7: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 1611.699855] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 1611.717330] syz-executor.4: attempt to access beyond end of device [ 1611.717330] loop4: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 1611.717599] syz-executor.2: attempt to access beyond end of device [ 1611.717599] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1611.719141] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 1611.719917] Buffer I/O error on dev loop2, logical block 31, lost async page write [ 1611.755655] syz-executor.4: attempt to access beyond end of device [ 1611.755655] loop4: rw=2049, sector=56, nr_sectors = 8 limit=39 [ 1611.766476] loop5: detected capacity change from 0 to 39 21:45:01 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) 21:45:01 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r4, 0xffffffffffffffff, 0x0, 0xfffffdef) 21:45:01 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) [ 1611.824973] loop5: detected capacity change from 0 to 39 [ 1611.876508] loop7: detected capacity change from 0 to 39 21:45:01 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140074) 21:45:01 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) [ 1611.970584] syz-executor.7: attempt to access beyond end of device [ 1611.970584] loop7: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 1611.972569] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 1612.001451] loop2: detected capacity change from 0 to 39 [ 1612.043258] syz-executor.2: attempt to access beyond end of device [ 1612.043258] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1612.045307] Buffer I/O error on dev loop2, logical block 31, lost async page write 21:45:14 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x2, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="55901e48393d12bbb246b3409e2806c50805982a95ba33e37c1db7a27b65c681b091898df49d24e3c824b8eafdffffffffffffbf86775c3a9f5786bffe1311db1a3fbedb589e7c16e527ac089bcc9d8a70d028f7f7ea3498684c0b7cf5527ce2c7f304d94c3415070d6a184d40573bfed2a2b2ae741c4f0ae1d7269f1adea5fb6831d94720c9d7850dfac898f7b15ae0167f595003ab5af6d87d8c10377e574e127802349b9e853c44128373c413ae2bc905867cd6942e4cc55ebd33f43b5902d7455afd67b60f4967320a1075a4d4570de625c9f02338da9a0bfd4e32b8810e82351e4612409fd4c2444fad3b34c8404bac692b9bc4e1e45704d6fd88e3f29965daa9106008", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:45:14 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0xfa03000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:45:14 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x14fffe) 21:45:14 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) 21:45:14 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) setxattr$security_ima(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0xfffffffffffffffc, 0x0, 0x3) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) r3 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000180)) write(r3, &(0x7f0000000280)="14a3a76567ca6bd32eb081f741876e6a3be3b4af149666755b3cd44cf6cbef4d7dfc74195a4a4b14d08d46ccf32640784da3b9f43ee613092ccdc6ea55c7ea14827dda040d8852864083c21576b0bb54741085068afc9e0026c616cb447cc5daf1a564409e76032e9cc4c728b6352a555d860b2378f4b83cc3becfa4852ec1eab03dd50af6766075d6d66db3a751a4ec86b0cbac72c418160fc7455b5d28a4ae42cdab36a43ba6bda98bb1395390e92b911e7e3b781e84ed0901e121b4cc28d20ec5a6655a002b78c1c69f1c6977a3d71e29a7c5c5e43a8cc01b2d06", 0xdc) write(r2, &(0x7f0000000200)='E', 0x140000) 21:45:14 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r5, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r5, r4, 0x0, 0x0) 21:45:14 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x14007a) 21:45:14 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r3, r2, 0x0, 0xfffffdef) [ 1625.260853] loop4: detected capacity change from 0 to 39 [ 1625.275648] loop2: detected capacity change from 0 to 39 [ 1625.290341] syz-executor.2: attempt to access beyond end of device [ 1625.290341] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1625.291181] Buffer I/O error on dev loop2, logical block 31, lost async page write [ 1625.317833] loop3: detected capacity change from 0 to 39 [ 1625.318775] loop7: detected capacity change from 0 to 39 21:45:15 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x6, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:45:15 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x1400d0) 21:45:15 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1625.398072] syz-executor.7: attempt to access beyond end of device [ 1625.398072] loop7: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 1625.398900] Buffer I/O error on dev loop7, logical block 10, lost async page write 21:45:15 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) getpeername(r0, &(0x7f0000000180)=@ieee802154={0x24, @long}, &(0x7f00000000c0)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) [ 1625.420751] loop2: detected capacity change from 0 to 39 21:45:15 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) [ 1625.446679] syz-executor.2: attempt to access beyond end of device [ 1625.446679] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1625.447574] Buffer I/O error on dev loop2, logical block 31, lost async page write [ 1625.455329] loop4: detected capacity change from 0 to 39 21:45:15 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) pipe(&(0x7f0000000000)={0xffffffffffffffff}) fcntl$setstatus(r2, 0x4, 0x42800) openat(r2, &(0x7f0000000080)='./file0/../file0\x00', 0x800, 0x8a) 21:45:15 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x7, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:45:15 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r5, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r5, r4, 0x0, 0x0) [ 1625.566892] loop3: detected capacity change from 0 to 39 [ 1625.598152] loop7: detected capacity change from 0 to 39 [ 1625.658642] syz-executor.7: attempt to access beyond end of device [ 1625.658642] loop7: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 1625.660331] Buffer I/O error on dev loop7, logical block 10, lost async page write 21:45:27 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:45:27 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r3, r2, 0x0, 0xfffffdef) 21:45:27 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x1400f0) 21:45:27 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r5, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r5, r4, 0x0, 0x0) 21:45:27 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:v4l_device_t:s0\x00', 0x22, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r2, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) 21:45:27 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x9, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:45:27 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {r0}}, './file1/file0\x00'}) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xf, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x44}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x000\x00'/22]) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xf, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r5, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r4, 0x300, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x35}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1f}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xd6d8}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x20001000}, 0x4) setxattr$incfs_id(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000180)={'0000000000000000000000000000000', 0x32}, 0x20, 0x3) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r7, &(0x7f0000000200)='E', 0x140000) 21:45:27 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) [ 1638.157581] loop3: detected capacity change from 0 to 39 [ 1638.161545] syz-executor.5: attempt to access beyond end of device [ 1638.161545] loop5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1638.163519] FAT-fs (loop5): unable to read boot sector [ 1638.174044] loop2: detected capacity change from 0 to 39 [ 1638.180661] loop4: detected capacity change from 0 to 39 [ 1638.193286] syz-executor.2: attempt to access beyond end of device [ 1638.193286] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1638.194146] Buffer I/O error on dev loop2, logical block 31, lost async page write [ 1638.195128] loop7: detected capacity change from 0 to 39 21:45:27 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) 21:45:27 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0xd, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:45:27 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:45:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) [ 1638.286222] syz-executor.5: attempt to access beyond end of device [ 1638.286222] loop5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1638.290007] FAT-fs (loop5): unable to read boot sector 21:45:28 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140131) [ 1638.294376] syz-executor.7: attempt to access beyond end of device [ 1638.294376] loop7: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 1638.295253] Buffer I/O error on dev loop7, logical block 10, lost async page write 21:45:28 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) 21:45:28 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) stat(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000180)) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x80, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) [ 1638.388155] syz-executor.5: attempt to access beyond end of device [ 1638.388155] loop5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1638.388995] FAT-fs (loop5): unable to read boot sector [ 1638.391408] loop3: detected capacity change from 0 to 39 [ 1638.392592] loop2: detected capacity change from 0 to 39 [ 1638.414869] loop4: detected capacity change from 0 to 39 [ 1638.444247] syz-executor.2: attempt to access beyond end of device [ 1638.444247] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1638.446059] Buffer I/O error on dev loop2, logical block 31, lost async page write 21:45:28 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) 21:45:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') stat(&(0x7f0000000080)='./file1\x00', &(0x7f0000000180)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) [ 1638.547200] loop3: detected capacity change from 0 to 39 [ 1638.548677] syz-executor.5: attempt to access beyond end of device [ 1638.548677] loop5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1638.552860] FAT-fs (loop5): unable to read boot sector 21:45:40 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0xe, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:45:40 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x1003000, &(0x7f0000000280)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) recvfrom$unix(r0, &(0x7f0000000180)=""/67, 0x43, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) utime(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000240)={0xd4, 0x2}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x4000010, r1, 0x20000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) 21:45:40 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:45:40 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r3, r2, 0x0, 0xfffffdef) 21:45:40 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000300)="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", 0x111) 21:45:40 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:v4l_device_t:s0\x00', 0x22, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r2, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) 21:45:40 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140300) 21:45:40 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) [ 1650.536602] loop2: detected capacity change from 0 to 39 [ 1650.537625] syz-executor.5: attempt to access beyond end of device [ 1650.537625] loop5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1650.539801] syz-executor.6: attempt to access beyond end of device [ 1650.539801] loop6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1650.542570] FAT-fs (loop5): unable to read boot sector [ 1650.543249] FAT-fs (loop6): unable to read boot sector [ 1650.552575] syz-executor.2: attempt to access beyond end of device [ 1650.552575] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1650.553527] Buffer I/O error on dev loop2, logical block 31, lost async page write [ 1650.569638] loop4: detected capacity change from 0 to 39 [ 1650.588812] loop3: detected capacity change from 0 to 39 [ 1650.592139] loop7: detected capacity change from 0 to 39 [ 1650.596865] loop4: detected capacity change from 0 to 39 21:45:40 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) 21:45:40 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) open(&(0x7f00000001c0)='./file1\x00', 0x800, 0x22) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mount$cgroup2(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180), 0x1000801, &(0x7f0000000500)=ANY=[@ANYBLOB='freezer,nsdelegate,net_cls,memory_recursiveprot,memory_localevents,fsuuid=;1030f3f-620f-de24-06c1-59639be6,smackfsdef=vfat\x00,smackfsdef=,,obj_type=vfat\x00,mask=^MAY_EXEC,fowner<', @ANYRESDEC=0xee01, @ANYBLOB=',fsname=vfat\x00,uid=', @ANYRESDEC, @ANYBLOB="2c004f201e1f9cc7ddfdcee863c3a5fc20a66e311d6539ab239162f1d8b134c740c4a9a4432505858fe53492370f2980eaa65e6b95e4728e250c1a4fd563314d371c44e121fc86d6db200a50ceef9ac5dc8ad562a4549fd5d4239a9710f4a7a45e290801c2b32866c7f50b1ef2da87ad1917a5cad086e68594fbe810c1b9efeed7972fb22fe3251b157acacdee3bba14d54fc9baec1201970bba229cda296371f6be9ed80deed3c6696c99eef1bd71e0779eaacd27d163db3bd276582d"]) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) [ 1650.751442] syz-executor.5: attempt to access beyond end of device [ 1650.751442] loop5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1650.757975] FAT-fs (loop5): unable to read boot sector 21:45:40 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140500) 21:45:40 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:45:40 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1650.811530] loop4: detected capacity change from 0 to 39 21:45:40 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:v4l_device_t:s0\x00', 0x22, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r2, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) [ 1650.834915] cgroup2: Unknown parameter 'freezer' [ 1650.842390] loop2: detected capacity change from 0 to 39 [ 1650.862124] cgroup2: Unknown parameter 'freezer' [ 1650.872185] loop7: detected capacity change from 0 to 39 [ 1650.872364] syz-executor.2: attempt to access beyond end of device [ 1650.872364] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1650.874075] Buffer I/O error on dev loop2, logical block 31, lost async page write 21:45:40 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendmmsg$sock(r0, &(0x7f0000003880)=[{{&(0x7f0000000340)=@phonet={0x23, 0x2, 0x40, 0x1}, 0x80, &(0x7f0000001680)=[{&(0x7f00000003c0)="3cecc72a401a6161053a7aa228961f83327f7dc592c5ce270195a083874d84ef07823112a0c47def10d6323a7ee0d82504a751548f2cbf18ec1e488c4009fe6c1ef63f17e4cfadb84829f121bd14bfc419f3d6c9b84814d8c353d04e20e005f58d78e5d2cf8bb7b34c66a3be6d5e83ef8bdb513ee7abe9a590ec9dfabdc03121211dbca1fefea3d1562a083587b4de21ac4201998cda3ffeaf13ce218a54451a6d3034ff7a8296e18e610c1a9099225cc48f7ffaf15b0c40073f3d7a4d4e8cf2a6", 0xc1}, {&(0x7f00000004c0)="4731577239cd7a398753feaffc4a288fd9ffa50ca83baa5c2b6c40011c9b1f8abbf6561b65af17db2dae14f448ea06fac686d5f27bba0f4c3aaaa9cd0fc3982a602185194e676e61e86d64534a9090cefc69", 0x52}, {&(0x7f0000000540)="2367b8164762f103554a7ee2df468f90cad209e666edbe260e7d04c754cc9836cff0227111b8496d4f057859947fc8eab28437b1787cf6f5b8226dcf4099da6507892689711fc71b6a9f091b8bcbf385b468f7613b3e7d911ab3c335dfff3a2f36ba73175d833b56c9221a4d4494e3567885a7be433dfe7d9a34c0b49650519723c8e29a0fa3184430d8b75f62b6160f3f186efccdfbf9d57d00bd5cdcf2896f1cb3d404bd4734ea7fa7700dba6790296ff117784684297db58738cf", 0xbc}, {&(0x7f0000000600)="22aec482d1328613a6120df8cafb6828b71f7ec47fadc546aaccf3c990b4ee0a251d3be460d4c1664e3796579b3c8cb0f3470e7acaaf74", 0x37}, {&(0x7f0000000640)}, {&(0x7f0000000680)="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", 0x1000}], 0x6, &(0x7f0000001700)=[@txtime={{0x18, 0x1, 0x3d, 0x4}}], 0x18}}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001740)="12ac90151928c07b0818adc448ac95e2e7e0dd4084d71e26cffe8588af0ca264480bab73be1e84ec43cb6875c01d731fd9a615a1529842ed19ab8568b0d49173b2828772c1b20f71eef43655188bc12fecf340b29794eaa847c158c754194ad6", 0x60}, {&(0x7f00000017c0)="adcb1a809fb33f254c18912a111959c8cf257e8db5a79bb29d0e0fa0fffdc21789da70b6235c550a74f502555d61693862b646637eb7f338950aadae8ad2afcf8832dbdb1ca8300bfec2cade839e855c44e9f88801fe82e759e264b7269e9ed5d9e27c17f351e090324585d18035a3d4cd78eeff4fb9", 0x76}, {&(0x7f0000001840)="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", 0xfe}, {&(0x7f0000001940)="37e2e43cb2c7856d2f9d295338f909c1a609d8079a9d99e0c0db75afb475409e2b246f77a48f7c9ea535454a42b59f887507c50aacc8ceb1519eb2cc80d8a1242553dce1bed456bebee9754b426d732e99e412f880a9219329f45bb35b0bd3b6063f737ae25789394a913212beb1198b7109ad3fa521cfe1c336eb29f36758d454ff6ee1c4c5616b7f08980f", 0x8c}, {&(0x7f0000001a00)="422dd0f8944f6d545ec0ff163f74ff482a5a05ae810f7f96d570ff38bc49d0149d599606d30f63c7489cff0bbe20c9e1aa78d3ced3e80e2ed9bcdea927c75c900c91b0b3c6fa6939e46e8003ea45dbd8fc7bdc9c4cb8c8a6828c4a1cdc46243ca4f9a491bc852d43d611320754a667a5db4dfed1a7a4014869e0daabc814f49b5be295434e75147dccd1ad541d8cce03b66f30dc88d622d075bbdd84a5bab3370b7caec2f5d4e8797526a634", 0xac}, {&(0x7f0000001ac0)="9804409ba664df86ab4ac945f0925cb21e26f5a58880b68c4c45bd0ea23c1d403dca77a36fc823f74093029a439b22626c298ebbeb06abb8041f792aba76d05fd46ed42d794b5313d19837ecf9745caea8ac9ad6aacac2974d553c67339e0c7206a932b01dbe244b23f13c4b4ea95e8cf2a05d461f4869f1266b02fe501f87a5a35a740a41bb1b5e212abf60c02ce1f4c78106ad077d1a2acebb6a", 0x9b}, {&(0x7f0000001b80)="8a5df47e1c4521e096810b132baf6f7b8363937962f140a8246fb5ba777c2b7630c60bb3d1269e5331358754c824cd68867d4d05f69e5f6e14cbaeb524126bb24095c41b22b54ffbf0c5985588fa9a68a06fff09012171f7633e2e7bdd57fe5ccacd82cb82df6c", 0x67}, {&(0x7f0000001c00)="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", 0x1000}], 0x8}}, {{&(0x7f0000002c80)=@rc={0x1f, @any, 0x7f}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002d00)="22746d6b8959be114677d37ae891d2a120df4630bed98282de7d143353cbaa69c8e053ea496410df6cb5f69d9266e009128a53c199dd212b0e2a5155bceb2d2fb62617", 0x43}, {&(0x7f0000002d80)="1ce1b9a73d06365c65f06e82076c7f947e999a7fad5b1cbb603f44f7ff22c55ababdf714a3301293ae612e83", 0x2c}], 0x2}}, {{&(0x7f0000002e00)=@caif=@dgm={0x25, 0x3, 0x3f}, 0x80, &(0x7f0000003080)=[{&(0x7f0000002e80)="45d4d360dc0d2d321178d138ff1b167d7ad06c0a0398432f887d034f26d55366cd21d68184a86cdb083aad6d3349d38a21b156fc419cdc96603a2184307a9c0f912f4003a7916988eb8fba0bab7905a8f06b7eb80b50e2dd785d2a54c7173a13e634f9e130cf7a5712be51b5b15ac4364591e3120cbd183ed09bde0814116c998efe3aba70c94f9d173807b8fc8e7b5ad9a1912d74f2ac383e6f5eccd677503de2c660a40991f1a0bc801614e76df86caec368845f52f32a678f108e27d7604fc0748943505192e98c79f8b37b", 0xcd}, {&(0x7f0000002f80)}, {&(0x7f0000002fc0)="6b80a2fd3a09ed53fd1e2a8bb755270ad431f7f16309dc875943b8ca7692dcfd9251563c3331b792db84582cb7427cd7db5d761d001420b3792253f3ac6238fa8601ef384c49dcb1969f8b844483355e3552ee91474790bf4148eb98bafefa48a4c66f0a183a5c583aaac4402927cf717f0ad94b0b00d6ce61ce61e9caa4f2d7704027ccba7f0c77e716eca33aefcf7e06455361323ba3da487bcbb154d840b69266b92e7cab5adfa1ed192461684ab13ef6adc128712814f17e", 0xba}], 0x3, &(0x7f00000030c0)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x9c}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x537}}], 0xa8}}, {{&(0x7f0000003180)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0202}}}, 0x80, &(0x7f0000003440)=[{&(0x7f0000003200)="4a3ad04f18c541e2acc2c9a3895f272dafed651f040dd54357b28ee56933cfdc29cc9a2edc040d3934a51f0884c39bccd1bddb448d1cdb56ff91f330e3bc1d3d4441e59c1e354ee250a629311a614b2fca47ca262c80108d1bdf388c374c9e3cb75eb8031e1f03de1db50c916ea9f2878b87bf640e465378f50eebd5d903b97a69dfe63d312edb93b7b96c092adde80ba6836d0a9a2e2e9e7852b47e6e59dd33504476032d6a1e0a5cd9829e8883e9af3ff3011dce327e75afc13b3ad39537b658c812ebc1a34512bf46f3dbd344226392ac446c1b228c923d41eb2e8e27c15efd797ba4825b435c06c5753482bca2af45d965f9", 0xf4}, {&(0x7f0000003300)="6fba9de33198e5a670aa4298", 0xc}, {&(0x7f0000003340)="f9782170329d761291d6d2534ee1bbb153401d673392f327765f3567e9f49a5fe677d485268091a1723e3af5a3127e1ae6d499d8aeb1f9257f1ce3e5a5493cf9cb9fbe84f146230d24ad4dd269bcfc6ef6c26c93f77bc304eec4277dc37e3d5e914a48865fda8a71558b90b57ce38fd5752ae8f2e60382d1b2cf0fe5cb772f85d82f75885f42120d35700c45643f6ae870576b9217e3272af109bf1fa6c1fe47906699ff54a3b7baa2b9e4e7e4028872ed5369912b7030d0ca7a6f813becb5893079be5488ab45eccf930f", 0xcb}], 0x3, &(0x7f0000003480)=[@mark={{0x14, 0x1, 0x24, 0xffff}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x3}}], 0x60}}, {{&(0x7f0000003500)=@generic={0x29, "48bc4a13db0d0bc895b4f8468a8d5431ab00e94c264d049d601490014f4c2fb13adb34432a6066df5e9f83baebc3d261dc1dae9284b98cd168c169e42f60e49c478be8f4e1b72505aae3bcf7dd1d67a038b9dba287fbf63b45ac7e0c029f9b3afc243729c59ee2c5065e026fe71d2281823e50a385353781daea329db18d"}, 0x80, &(0x7f00000037c0)=[{&(0x7f0000003580)="e8fdd66cc80e594e7e582ae359e79c0faacf08fa6bc61e9e838cea2958940adbd8c068b843ff2f4a7ab2f1e18275b8cbc1fe94c33245725abc508945d2410ed4ac45d18c8bf056f75a179ceb02218b500b0975229a1a235756022ee54a3208012687aa2961afff663973f5d0a405077f82cef0497baa0feaeb7d9efe15d4848440d21d2cf06bd77bf7124ce7bdd266c7a7ec5dab934b7f6437398baa23642a7599", 0xa1}, {&(0x7f0000003640)="d73297cbe9c96238f15580edf38a1d3b3a2481021667302fed8469b0ebd470e81af82920675eaa0566f78be8eeba56eca8c24d9301d1421613b2452996406b2d8e20ec1d284e9bb61406f69c5999f73b59d79835d4c335ffdd33d67f6e0ab8c82aa8514a67049b813727728a756e2357fe6a81988874fb3c6274cd70a9837db9f390463a82693133", 0x88}, {&(0x7f0000003700)="a99a5db1aedb5023dc984d1baedef06b7a3755f60f87363336813a13088331d3591d33a5ac16fd45e1870f94807ad897b639fdf079a56cccf2663bcda514cf0b3776afe7ec3b6fe470727ed7353a8d765fea14e5d470a69c18a90a235ffd5c65", 0x60}, {&(0x7f0000003780)="26c1e3ab0e9160def64e7030c0ba313918cedc6416f9d3b9757860ac95a333ed960dcec3022ada7b3c3964dc21957133dbeb6119687a340ae2d685d34be819", 0x3f}], 0x4, &(0x7f0000003800)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0xffffff66}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}], 0x60}}], 0x6, 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003a00)=ANY=[@ANYBLOB="440000006d757e4cf1f03a39c6b900d79af85b5220989597dbfae1690328978a30ec123579c8e937c8c210676c2d932902e2267975a5dc9c751c4f70f8a479b9fe9f0e533d22046c308a8a896f383f77b53a5393c4b56f9d301c410fff6d8c77ea7268d1e80ed7db9496d2bc56f49f", @ANYRES16=r3, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="28000f0080000000ffffffffffff0802110000000802110000000000000000000000000064000000"], 0x44}}, 0x0) r4 = fspick(r0, &(0x7f0000000080)='./file1\x00', 0x1) sendfile(r2, r4, 0x0, 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r5, &(0x7f0000000200), 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="01000000", @ANYRES16=r3, @ANYBLOB="00082bbd7000fddbdf255500000008000100040000000c0099000900000042000000"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) 21:45:40 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) [ 1650.941632] loop3: detected capacity change from 0 to 39 21:45:40 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x2, 0x0, 0x0}, &(0x7f0000000400)="55901e48393d12bbb246b3409e2806c50805982a95ba33e37c1db7a27b65c681b091898df49d24e3c824b8eafdffffffffffffbf86775c3a9f5786bffe1311db1a3fbedb589e7c16e527ac089bcc9d8a70d028f7f7ea3498684c0b7cf5527ce2c7f304d94c3415070d6a184d40573bfed2a2b2ae741c4f0ae1d7269f1adea5fb6831d94720c9d7850dfac898f7b15ae0167f595003ab5af6d87d8c10377e574e127802349b9e853c44128373c413ae2bc905867cd6942e4cc55ebd33f43b5902d7455afd67b60f4967320a1075a4d4570de625c9f02338da9a0bfd4e32b8810e82351e4612409fd4c2444fad3b34c8404bac692b9bc4e1e45704d6fd88e3f29965daa9106008", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:45:40 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140600) [ 1650.984585] loop5: detected capacity change from 0 to 39 21:45:40 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1651.004374] loop2: detected capacity change from 0 to 39 [ 1651.007997] FAT-fs (loop5): bogus number of reserved sectors [ 1651.008806] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1651.094669] syz-executor.2: attempt to access beyond end of device [ 1651.094669] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1651.096456] Buffer I/O error on dev loop2, logical block 31, lost async page write 21:45:52 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) openat(r0, &(0x7f0000000080)='./file1\x00', 0x2000, 0x89) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) creat(&(0x7f0000000180)='./file1\x00', 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) 21:45:52 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x6, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:45:52 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) 21:45:52 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:45:52 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140700) 21:45:52 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:v4l_device_t:s0\x00', 0x22, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r2, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) 21:45:52 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r3, r2, 0x0, 0xfffffdef) 21:45:52 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) pipe(&(0x7f0000000000)={0xffffffffffffffff}) fcntl$setstatus(r1, 0x4, 0x42800) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000180)='./file1\x00', r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) [ 1662.690674] loop2: detected capacity change from 0 to 39 [ 1662.712266] loop4: detected capacity change from 0 to 39 [ 1662.712505] loop3: detected capacity change from 0 to 39 [ 1662.713090] syz-executor.2: attempt to access beyond end of device [ 1662.713090] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1662.714246] Buffer I/O error on dev loop2, logical block 31, lost async page write [ 1662.719447] loop5: detected capacity change from 0 to 39 [ 1662.724305] loop7: detected capacity change from 0 to 39 [ 1662.731077] FAT-fs (loop5): bogus number of reserved sectors [ 1662.731850] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1662.733601] syz-executor.6: attempt to access beyond end of device [ 1662.733601] loop6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1662.741869] FAT-fs (loop6): unable to read boot sector 21:45:52 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1662.779087] syz-executor.3: attempt to access beyond end of device [ 1662.779087] loop3: rw=2049, sector=40, nr_sectors = 8 limit=39 21:45:52 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140810) 21:45:52 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x7, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:45:52 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) unlink(&(0x7f00000001c0)='./file0\x00') rename(&(0x7f00000000c0)='./file1/file0\x00', &(0x7f0000000180)='./file0/file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) r2 = openat(r0, &(0x7f0000000040)='./file1\x00', 0xc6842, 0x0) write(r2, &(0x7f0000000240)="0b558be943cf2fbe89c94248d814c51efae488329b379635f6c7a9051ba5a3de1736db22447cb682a291e632ce3e22e5d1a1b12589cf81ade36fe600"/74, 0x4a) 21:45:52 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) 21:45:52 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:v4l_device_t:s0\x00', 0x22, 0x1) write(0xffffffffffffffff, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) [ 1662.876428] loop2: detected capacity change from 0 to 39 [ 1662.910479] syz-executor.2: attempt to access beyond end of device [ 1662.910479] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1662.911436] Buffer I/O error on dev loop2, logical block 31, lost async page write 21:45:52 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1662.918830] loop4: detected capacity change from 0 to 39 [ 1662.927595] loop5: detected capacity change from 0 to 39 21:45:52 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x82400, 0x105) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000000c0)={0x0, r1, 0x100, 0x8, 0xfffffffffffffd28, 0x5bcc}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) fcntl$setstatus(r4, 0x4, 0x42800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r6, 0x5, 0x0, 0x4, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xf, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x44}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r5, {0x9}}, './file0/../file0\x00'}) [ 1662.938747] syz-executor.2: attempt to access beyond end of device [ 1662.938747] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1662.939646] Buffer I/O error on dev loop2, logical block 31, lost async page write [ 1662.944349] FAT-fs (loop5): bogus number of reserved sectors [ 1662.944914] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1662.960381] loop7: detected capacity change from 0 to 39 [ 1663.011984] loop3: detected capacity change from 0 to 39 21:45:52 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140900) 21:45:52 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x9, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) [ 1663.055200] syz-executor.3: attempt to access beyond end of device [ 1663.055200] loop3: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1663.056076] Buffer I/O error on dev loop3, logical block 31, lost async page write 21:45:52 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x1024c4f, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc40, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) [ 1663.102404] syz-executor.3: attempt to access beyond end of device [ 1663.102404] loop3: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1663.103334] Buffer I/O error on dev loop3, logical block 31, lost async page write 21:45:52 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:v4l_device_t:s0\x00', 0x22, 0x1) write(0xffffffffffffffff, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) 21:45:52 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:45:52 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) [ 1663.124747] loop2: detected capacity change from 0 to 39 [ 1663.167551] loop5: detected capacity change from 0 to 39 [ 1663.171454] syz-executor.2: attempt to access beyond end of device [ 1663.171454] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1663.172422] Buffer I/O error on dev loop2, logical block 31, lost async page write [ 1663.177339] loop4: detected capacity change from 0 to 39 [ 1663.178246] loop7: detected capacity change from 0 to 39 [ 1663.178732] FAT-fs (loop5): bogus number of reserved sectors [ 1663.179735] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1663.181915] ======================================================= [ 1663.181915] WARNING: The mand mount option has been deprecated and [ 1663.181915] and is ignored by this kernel. Remove the mand [ 1663.181915] option from the mount to silence this warning. [ 1663.181915] ======================================================= [ 1663.288196] loop4: detected capacity change from 0 to 39 21:46:07 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140a00) 21:46:07 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x51, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0xffffd000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000240), 0x200, 0x30080) openat(r2, &(0x7f0000000280)='./file0\x00', 0x440000, 0xa9) syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x80050) write(r1, &(0x7f0000000200)='E', 0x140000) 21:46:07 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r3, r2, 0x0, 0xfffffdef) 21:46:07 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) 21:46:07 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:46:07 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:v4l_device_t:s0\x00', 0x22, 0x1) write(0xffffffffffffffff, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) 21:46:07 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001440)={{{@in6=@mcast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f0000001540)=0xe8) r6 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x401, 0x4, &(0x7f00000013c0)=[{&(0x7f0000000240)="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", 0x1000, 0x9186}, {&(0x7f00000001c0)="1fcc237c8cedcf277f520aee42d4c713fda20cd61d565ee05917b5d552b3fa2cd297ac2f3d958bf5adc9663017acfe21fb0f373881f236b302e09b29782ba0cf", 0x40, 0x7ff}, {&(0x7f0000001240)="552271c3c7876d6512ed9320658402d54f6c4e6c18dc4a0a5bbfdd2c7238f80a02d14258e2079b2e69f60a276e33c01d7f89e4d33a75ef3959cc1d2b55199bc5a526cc7fd8426b155ab70feadbb456c4e5a671b7a3f5e60ef84f7cf8d3262f92eb1cc63bf0981c76e4af99dfa2f880b74ff092b6911cb30b78481e3c4a5dba55ce4dfec24e544968", 0x88, 0x800}, {&(0x7f0000001600)="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", 0x2c3, 0x8}], 0x1100001, &(0x7f0000001580)=ANY=[@ANYBLOB='nodots,dots,dots,dots,fowner>', @ANYRESDEC, @ANYBLOB=',euid>', @ANYRESDEC=r5, @ANYBLOB=',uid=', @ANYRESDEC=0xee01, @ANYBLOB="2c66736e616d653d2c7065726d69745f646901006374696f2c00"]) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r6, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r7, &(0x7f0000000200)='E', 0x140000) lsetxattr$security_capability(&(0x7f0000001940)='./file1\x00', &(0x7f0000001980), &(0x7f0000001b40)=@v3={0x3000000, [{0x8001, 0x1}, {0x4, 0x12}], r5}, 0x18, 0x1) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001a00), 0x2001, 0x0) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000001a40)={0x3f, 0x4, 0x7c, 0x5f5, 0x1}) fsetxattr(r8, &(0x7f0000001a80)=@random={'trusted.', '\x00'}, &(0x7f0000001ac0)='}.#-/\x00', 0x6, 0x1) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000001b00)=0x1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001900)={'syztnl2\x00', &(0x7f0000001300)={'gretap0\x00', r4, 0x20, 0x7, 0x9, 0xfdc9, {{0x28, 0x4, 0x1, 0x3, 0xa0, 0x65, 0x0, 0x68, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@rr={0x7, 0xf, 0xc1, [@private=0xa010100, @rand_addr=0x64010101, @multicast1]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x13, 0xf4, [@remote, @broadcast, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x35}]}, @end, @rr={0x7, 0x27, 0xa3, [@multicast1, @private=0xa010102, @multicast2, @rand_addr=0x64010101, @rand_addr=0x64010101, @multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x28}, @loopback]}, @generic={0x44, 0x12, "89119741090479136faf7fa55f0ed1f4"}, @end, @lsrr={0x83, 0x17, 0x99, [@broadcast, @rand_addr=0x64010102, @broadcast, @loopback, @local]}, @timestamp_addr={0x44, 0x14, 0x81, 0x1, 0xf, [{@local, 0x3}, {@multicast2, 0x565}]}]}}}}}) 21:46:07 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0xd, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) [ 1678.038682] loop2: detected capacity change from 0 to 39 [ 1678.058576] loop3: detected capacity change from 0 to 39 [ 1678.061593] loop4: detected capacity change from 0 to 39 [ 1678.065403] syz-executor.2: attempt to access beyond end of device [ 1678.065403] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1678.067074] Buffer I/O error on dev loop2, logical block 31, lost async page write [ 1678.076612] loop5: detected capacity change from 0 to 39 [ 1678.078535] syz-executor.6: attempt to access beyond end of device [ 1678.078535] loop6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1678.078562] FAT-fs (loop6): unable to read boot sector [ 1678.084358] syz-executor.4: attempt to access beyond end of device [ 1678.084358] loop4: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1678.084381] Buffer I/O error on dev loop4, logical block 31, lost async page write [ 1678.085720] loop7: detected capacity change from 0 to 39 [ 1678.088081] FAT-fs (loop5): bogus number of reserved sectors [ 1678.088107] FAT-fs (loop5): Can't find a valid FAT filesystem 21:46:07 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1678.142690] syz-executor.4: attempt to access beyond end of device [ 1678.142690] loop4: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1678.143581] Buffer I/O error on dev loop4, logical block 31, lost async page write [ 1678.147019] syz-executor.3: attempt to access beyond end of device [ 1678.147019] loop3: rw=0, sector=40, nr_sectors = 4 limit=39 21:46:21 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140b00) 21:46:21 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) 21:46:21 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0xe, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:46:21 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r2, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) 21:46:21 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x0, 0x10) write(r2, &(0x7f0000000200)='E', 0x140000) setxattr$security_ima(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=@md5={0x1, "913d376af9a5e70b40e15702547bbab1"}, 0x11, 0x2) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)) lsetxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1/../file0\x00', &(0x7f00000003c0), &(0x7f0000000400)={0x0, 0xfb, 0x101, 0x4, 0xce, "1f7f959b273a8b4347f911931dfc4810", "dac6bb917da0de1858f6f4be987e426bfabd649ea57840bf5ce80d6f7c4c2713b7df226e1e4c9a00a829ed3264c187d7b2759578360fdd21c3808cae28a7abb914558d94e29f4df55073dfae6dd7c5a5d2b328220998fc7792e073618c6c82c84916bd7ba6907a55bb7286b7d700c84009b2f5bf0fe1e7f7ec937b4b52165df8c95d07727a81c78aa1de376012a339359240a1604c7a4432851598816908787791c8e4919927c02eea682373973dc2c5cc6ace9ef245fad001bc3a01769725aa77f5ef3a816415a2e03773fe2856091255959ddbcbe8115ddb9f35bf5eafcaae431c198380f23f024a85a1bb"}, 0x101, 0x2) 21:46:21 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x38) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) mount$cgroup(0x0, &(0x7f0000000b80)='./file2\x00', &(0x7f0000000bc0), 0x2000, &(0x7f0000000c00)={[{@clone_children}, {@none}, {@subsystem='net_prio'}, {@xattr}, {@clone_children}, {@none}, {@release_agent={'release_agent', 0x3d, './file1/file0'}}, {@noprefix}, {@clone_children}], [{@hash}, {@appraise}, {@fowner_lt={'fowner<', 0xee01}}, {@seclabel}]}) statx(r1, &(0x7f0000000980)='./file0\x00', 0x6000, 0x100, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000180)='./file0/file0\x00', 0x9d27, 0xa, &(0x7f0000000880)=[{&(0x7f00000001c0)="0182f02f0aa578574c907dac5a4e3c3ebbe59097", 0x14, 0xf54d}, {&(0x7f0000000240)="48b625b6942d080d89ecff32678cd356dba333f8b541d1fbbe4ce050896665f5fc23ac1e836a8d9fd8b875c785c93f1fdaca004c03b89a3abf4a09bcc49fddf2da010c8f2f5802fcb442f734f1d21b6ff1b42e7203bdc29deeb4925a78c3", 0x5e, 0x80000001}, {&(0x7f00000002c0)="3a588880a11921b3ee4a3b63b1d3d28997217ec9a8630327d0066a6240c93845342c2e0a9c24eb71e81d9acf26ee45e675ef270b7120f558dc63d53bb59f260d47e8daf1445a14dda32aeb0670b981f23a7147be3de4ccf1d71cd1f1ce097692b0b485c9f1e319fd254338b7b4a97315ee3f324b7c0d3b5d9dbdb85df65ec97b855dcffbbc2c244898a6f02ee013e3cbeef6a654a688438fdf04", 0x9a, 0x3f}, {&(0x7f0000000380)="f5e4fe0d9b49bd96afe9226c1b20efc8cc805d7415cd976abc97dd42690df46992a33c96b929515fc9039ec241c69f58dee281605d6c3a84d73b3941a7b9ef217a86ad686f1b940e675b002354142aa8235bbaab8106347cdfd40f72639c1bbc86666f675d026f597deb60c9174c310dd6a3bc3dd394c991547ba138f8b16bbc43a9697d172dbc32a0dae51453d0d7655893fea72775b8a30031122bd752e0a7785e083145d4515b3e3bf1b5e3570abf1044f31d755bc8bcdfd91736d0c93e7bd2f27012d989897c4136a444ae2064ebbdff18", 0xd3, 0x1}, {&(0x7f0000000480)="14c142fb5868ec9764c4c83f0c60005e2b718319974e1b5e2886a93d953ecab9a6b23b73d0cb88c4d8437bc91560b9a239952a2e401d3aab51c162b4e7c7d7bedc399e2dd50e3d044f7f17b2f8763c79db", 0x51, 0x67}, {&(0x7f0000000500)='x', 0x1, 0x2000}, {&(0x7f0000000540)="1230d68b3dd09c9c271f146edaa9be9b25f31765d633c6b7d1bac5fb890931de0029da8ae78e025daa67749415e16e21e8fb0c0fccd55d5a261b770056ed69f005a7d45b6cfc5dad5fcade57333b72b8fb757908494770f22ec9c2cf33e8110813cf994a661a171829e61503eed5c9c6067201f1210f9a45eecbf016b58cf03be08a612a66a70cbf962b6eb3aca1cdf148082435f598e3dff3", 0x99, 0x6}, {&(0x7f0000000600)="4f6f87e1eb89bd262c9bd60a96fa37312363da0d8dbda02c144815a08539b86cf488937673052ad3299bae833b98edadba8f086d90c91b989b062ec318cb46dfb3090f1dc44fe7a6ed9f7b8031f128dd60218a4b40ac1dd56b556d9b4357087f28160146e2ca991fbd58b463dcd931303f67d65ececdafa12c590a0d4c2807076f1bd81573727c834d81a3e867a42a20a7cda938fffd5c9ac866fe51d77fee638b7b9e48a585feafb9ef1f16c397b30948e48956bbc968973136051898daf562da76fb2770b86205019525c2f387fd3bb1362a54f5e7204b9408bb", 0xdb, 0x81}, {&(0x7f0000000700)="597f12099e6cb750e0ccd82148b62d1e67393bd651eba610eba55239ae8cb18db30dc5a01294c7a31fc2ba4f40a702858912fe75c92ccde9356e4d17d99cc2e23fd291f288528307556891c32c04cc8793e861f2900875c6ba0b622b288c8179806a53a514dc3dd207c7ecabca710927", 0x70, 0x7}, {&(0x7f0000000780)="8f4274ec80464cb8ef1009eb2a366cb4990dc7709fce44752acd8b082e5e87125a16174c01fcc82baea24a97c501e5fb44a377574825a9c62ad6d527644a253f802206d2ff2ee5d2f9b717af551105e0dad3f9d90aa8a539204a1e53288309e72c59fd30c63a1f6fc72758668fb646a4dfc157761a56f1dbd25a367034bfc690aecb2466fe658cc112e2f845cab3099cd106e4745adf8e9ca545b7da3824166c0d3d4abcdec81d129a1ac4e69aa02f42da4b5e5d4eae2794fbd524fff469d463fa8b31cbcd1fdaf168a0a02a275cdf2fbcbefe34538ada8de4f2d91880bd7869389346a3714d8e2e332ea0a8f81efebb", 0xf0, 0x4}], 0x200800, &(0x7f0000000ac0)={[{@huge_never}, {@gid={'gid', 0x3d, r2}}, {@huge_always}, {@huge_always}], [{@obj_user={'obj_user', 0x3d, 'vfat\x00'}}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) pipe(&(0x7f0000000000)={0xffffffffffffffff}) fcntl$setstatus(r4, 0x4, 0x42800) chdir(&(0x7f0000000cc0)='./file0/file0\x00') openat(r4, &(0x7f0000000b40)='.\x00', 0x400000, 0x23) 21:46:21 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:46:21 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r3, r2, 0x0, 0xfffffdef) [ 1692.127494] loop2: detected capacity change from 0 to 39 [ 1692.129344] loop5: detected capacity change from 0 to 39 [ 1692.134688] loop3: detected capacity change from 0 to 39 [ 1692.136801] loop7: detected capacity change from 0 to 39 [ 1692.138554] loop4: detected capacity change from 0 to 39 [ 1692.142868] FAT-fs (loop5): bogus number of reserved sectors [ 1692.143700] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1692.167370] syz-executor.6: attempt to access beyond end of device [ 1692.167370] loop6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1692.173368] syz-executor.2: attempt to access beyond end of device [ 1692.173368] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1692.174877] Buffer I/O error on dev loop2, logical block 31, lost async page write [ 1692.182111] FAT-fs (loop6): unable to read boot sector [ 1692.198866] syz-executor.3: attempt to access beyond end of device [ 1692.198866] loop3: rw=0, sector=40, nr_sectors = 4 limit=39 [ 1692.219775] syz-executor.4: attempt to access beyond end of device [ 1692.219775] loop4: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1692.221331] Buffer I/O error on dev loop4, logical block 31, lost async page write 21:46:21 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:46:22 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140c00) 21:46:22 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x600, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:46:22 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) 21:46:22 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) 21:46:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f00000013c0)=[{&(0x7f0000000080)="083448cd9a9b060dd7b8dba0900f754c", 0x10, 0x4}, {&(0x7f0000000180)="468aeb7cc3c9b13177521916d6912542c12dc2da2d9ef13c885a6d8c2ce189d2e2f9aa158a33c90d1660536ece70c231ee75f1cd922aa17031925c7ab11f9a19140961fa7cc8489d72a4d75157957be8df78dbbf1bfcaf0b82e466fcd5904cf461c9a4d068", 0x65, 0x7}, {&(0x7f0000000240)="58c8e999452369cae6a7c86c1ecf3f2bf3e8a28610759eddb175a0417ac95e9932de84f38dda60f27ff3bb638e476a9f47ea8a28b8cd058d340fa49dbd84b773127eeaed8fa99bb6793638adc18ff7c935d512f3695a10192e1802520a02c3aa75a0b6b11e29fdcdfa6b91c04ce9ed3650f1fea511d39cc47a424cce7914e4dce981d8854f071e22a7e61ca0f7fd244541e5aa4da274017ee69a5f1d38f9d82e7ffb5aadfb4353e4a36301cac0038903d94552bd23f11c860db1d2c62e1a27c240840108687d21e4a1ce7bc21faa7d4fb7deaaae0bb431824b3308bac828871a133062", 0xe3}, {&(0x7f0000000340)="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", 0x1000, 0xf4}, {&(0x7f0000001340)="72acba8e064f65d6045b491a10ad3e560864f7cae65f8f620b071204f3f4e8f5e1648a37565db8f33b2ff9ff451ef712158f5821179e06225f2a429dfd88ea1f9861a5f0ef36ab", 0x47, 0xaf8}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) [ 1692.373477] loop7: detected capacity change from 0 to 39 [ 1692.395711] loop3: detected capacity change from 0 to 10 [ 1692.415622] loop2: detected capacity change from 0 to 39 [ 1692.419296] FAT-fs (loop3): invalid media value (0x75) [ 1692.420009] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1692.441600] loop5: detected capacity change from 0 to 39 21:46:22 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x116, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:46:22 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000a940)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002100010000000000000000000200000040"], 0x1c}], 0x1}, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) [ 1692.465720] syz-executor.2: attempt to access beyond end of device [ 1692.465720] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1692.467478] Buffer I/O error on dev loop2, logical block 31, lost async page write [ 1692.476335] FAT-fs (loop5): bogus number of reserved sectors [ 1692.477267] FAT-fs (loop5): Can't find a valid FAT filesystem 21:46:22 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140d00) 21:46:22 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) [ 1692.577122] loop4: detected capacity change from 0 to 39 [ 1692.594828] loop7: detected capacity change from 0 to 39 21:46:22 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x700, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:46:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x400000, 0x23) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x24c) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) 21:46:22 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) [ 1692.695736] loop2: detected capacity change from 0 to 39 21:46:22 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) 21:46:22 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x144, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1692.772229] syz-executor.2: attempt to access beyond end of device [ 1692.772229] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1692.773809] Buffer I/O error on dev loop2, logical block 31, lost async page write [ 1692.810723] loop5: detected capacity change from 0 to 39 [ 1692.825259] syz-executor.2: attempt to access beyond end of device [ 1692.825259] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1692.826884] Buffer I/O error on dev loop2, logical block 31, lost async page write [ 1692.835001] FAT-fs (loop5): bogus number of reserved sectors [ 1692.835687] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1692.854625] loop3: detected capacity change from 0 to 39 [ 1692.860544] loop7: detected capacity change from 0 to 39 21:46:35 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140e00) 21:46:35 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r3, r2, 0x0, 0xfffffdef) 21:46:35 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) 21:46:35 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:46:35 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) 21:46:35 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) fcntl$setstatus(r2, 0x4, 0x42800) move_mount(r2, &(0x7f0000000080)='./file1\x00', r0, &(0x7f00000000c0)='./file0\x00', 0x41) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000180)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x8440, 0x38) write(r3, &(0x7f0000000200)='E', 0x140000) 21:46:35 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x900, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:46:35 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000440)=ANY=[], 0x24f) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) [ 1705.946208] loop5: detected capacity change from 0 to 39 [ 1705.953296] FAT-fs (loop5): bogus number of reserved sectors [ 1705.954342] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1705.956550] loop2: detected capacity change from 0 to 39 [ 1705.958381] loop4: detected capacity change from 0 to 39 [ 1705.964854] loop7: detected capacity change from 0 to 39 [ 1705.965635] loop3: detected capacity change from 0 to 39 [ 1705.972448] syz-executor.6: attempt to access beyond end of device [ 1705.972448] loop6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1705.973746] FAT-fs (loop6): unable to read boot sector [ 1706.003428] syz-executor.2: attempt to access beyond end of device [ 1706.003428] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1706.005102] Buffer I/O error on dev loop2, logical block 31, lost async page write [ 1706.008688] syz-executor.4: attempt to access beyond end of device [ 1706.008688] loop4: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1706.011470] Buffer I/O error on dev loop4, logical block 31, lost async page write 21:46:35 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:46:35 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f00000005c0)='./file0/file0\x00') chdir(&(0x7f0000000140)='./file0\x00') lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x2, 0x4, &(0x7f0000000380)=[{&(0x7f0000000180)="3bf80814542ae1baea5c7d4a9d9d5221b03111157631196ed1b5abaf831b67b18d258f57e4345673ec0992a7bc0bce2a341fdbb56da9c5e16f067d83f4120ddf9d814871726633876adc4099e622d2088b804f03e4f01ddc097127c53e01c5fb9359e706c9f1df0739bd1beb0a18b3fc8ce90995a47ddbf451433810e63c", 0x7e, 0x6}, {&(0x7f0000000240)="7509f812275d26bd0186643d2042baf4e9326584fe1f8ef9614524b20e83c3f72663f162b0b6271bbc972a5cfc2f00d91020544b213da482df513f7f2f19f0c3", 0x40, 0x2b}, {&(0x7f0000000280)="42a05133f8440c0222b53bcb9853201f5f59b1ac5f80e92b907bff79d33c1ec2", 0x20, 0x10001}, {&(0x7f00000002c0)="09c376e134504477d6985ce1d0a6a17e0de38ffd2c446a3bfc830edd60280b7cc933f235c941c0beccfde2da921e1bf1132ad5fa09725a4b8838b5ed285c3c720874342a604e8d53edbd33666c5f8afb0856f88dcd274989b58621ca1fa7406d411875be6366170b07b08ef7c9ece9c43afc53e83471b5988a7529b248cd0cc830f216ffd73422e99cd7d947dc7162a3ee68", 0x92, 0x9}], 0x1812, &(0x7f00000004c0)={[{@nr_blocks={'nr_blocks', 0x3d, [0x65, 0x38, 0x32, 0x32, 0x35, 0x2d, 0x6d, 0x38, 0x34, 0x34]}}, {@uid={'uid', 0x3d, r0}}, {@mode={'mode', 0x3d, 0x6}}], [{@dont_measure}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x61, 0x65, 0x34, 0x34, 0x66, 0x61, 0x31], 0x2d, [0x37, 0x30, 0x34, 0x30], 0x2d, [0x38, 0x66, 0x30, 0x66], 0x2d, [0x62, 0x66, 0xbe6399a2d6521723, 0x33], 0x2d, [0x0, 0x34, 0x65, 0x66, 0x35, 0x39, 0x38, 0x30]}}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x38, 0x62, 0x62, 0x64, 0x36, 0x62], 0x2d, [0x30, 0x30, 0x64, 0x63], 0x2d, [0x34, 0x32, 0x62, 0x30], 0x2d, [0x35, 0x36, 0x35, 0x35], 0x2d, [0x37, 0x5, 0x31, 0xf, 0x31, 0x32, 0x33, 0x30]}}}, {@permit_directio}, {@fsmagic={'fsmagic', 0x3d, 0x7}}]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0xc87d6000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) 21:46:35 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0xd00, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:46:35 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) [ 1706.121700] loop3: detected capacity change from 0 to 39 21:46:35 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) 21:46:35 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2801}, {&(0x7f0000000240)="3eee5eb6075a721f08607104bb43d494e30fd58114af39565d398ecf32adffc10e941837e9a055112f03f745b7a808e31a4e7aac5c1e2bba73faadcd1257d069195b54a5b62e43b96ed48c02cc9091a86bf24134a638cbf7594af2660fbc5f8e9d504ff57b27e9d870b2b312a281e503e23385249828bcb6a5b2b6e54943763e3c001a1f44d47d97832ed2003f4596a17151c8f49e861352f0bad5e074b492330cd47e12b5a2fa2655b7170b510e7193ee152260f0b0679fbe671b02ff49df5ab79cda9b28fd2366cd17a46726f50a8e117227555e55f1c387f6455b364191079699d9641f2d7c210291fd69c77dce", 0xef, 0x9}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[], 0x24f) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3000004, 0x11, r0, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) [ 1706.209776] loop5: detected capacity change from 0 to 39 [ 1706.225542] FAT-fs (loop5): bogus number of reserved sectors [ 1706.226597] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1706.230883] loop7: detected capacity change from 0 to 39 [ 1706.232570] loop4: detected capacity change from 0 to 40 [ 1706.264543] FAT-fs (loop4): invalid media value (0xbb) [ 1706.265450] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1706.348378] loop4: detected capacity change from 0 to 40 [ 1706.357232] FAT-fs (loop4): Unrecognized mount option "./file1" or missing value 21:46:48 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140f00) 21:46:48 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0xe00, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:46:48 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1cd042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) fcntl$setstatus(r3, 0x4, 0x42800) ioctl$CDROMREADCOOKED(r3, 0x5315, &(0x7f0000000240)) r4 = openat(r2, &(0x7f0000000180)='./file0\x00', 0x50002, 0x2c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xf, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x44}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(0x0, r6) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xf, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x44}}, 0x0) sendfile(r5, r4, &(0x7f00000001c0)=0x1, 0x3) 21:46:48 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='.\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x2053800, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = signalfd(r0, &(0x7f0000000180)={[0x3]}, 0x8) openat(r1, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) stat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) rename(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='./file1\x00') mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r4, &(0x7f0000000200)='E', 0x140000) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) mount$cgroup2(0x0, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300), 0x60000, &(0x7f0000000340)={[{@memory_localevents}, {@subsystem='net'}, {}, {@memory_recursiveprot}, {@memory_localevents}], [{@subj_type={'subj_type', 0x3d, 'vfat\x00'}}, {@uid_gt={'uid>', r2}}, {@appraise_type}]}) 21:46:48 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) 21:46:48 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000440)=ANY=[], 0x24f) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) 21:46:48 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:46:48 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r3, r2, 0x0, 0xfffffdef) [ 1719.119964] loop4: detected capacity change from 0 to 39 [ 1719.125876] loop5: detected capacity change from 0 to 39 [ 1719.129342] loop2: detected capacity change from 0 to 39 [ 1719.149206] syz-executor.2: attempt to access beyond end of device [ 1719.149206] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1719.150090] Buffer I/O error on dev loop2, logical block 31, lost async page write [ 1719.150632] loop3: detected capacity change from 0 to 39 [ 1719.159827] FAT-fs (loop5): bogus number of reserved sectors [ 1719.160704] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1719.168324] loop7: detected capacity change from 0 to 39 [ 1719.171883] syz-executor.6: attempt to access beyond end of device [ 1719.171883] loop6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1719.179959] FAT-fs (loop6): unable to read boot sector 21:46:48 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x2000, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) [ 1719.247193] loop3: detected capacity change from 0 to 39 21:47:01 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:47:01 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140ff6) 21:47:01 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000440)=ANY=[], 0x24f) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) 21:47:01 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) 21:47:01 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0xfdfd, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:47:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0xc08998b271ba6317, r0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000300)={0x84c, r2, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2af400}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK={0xd4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5140}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffd6}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4c}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8be}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0xb0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb92d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x38}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x100, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2c}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8c0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8ea}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x60}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}]}, @TIPC_NLA_NODE={0xcc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "70f6797f47c0a5a19731cbc9c2fa96301a789782f2319a8b2629e4cc9644d791e0834b"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "a83948d0a3b7f58d990aaa634a3a5830db68d181457c6451c86fb4fe5894a3b23cb6"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x1f, 0x3, "8ad7d7e9e032fd3ab7d400b0b0dedf78fc2c6df34bf098ec39a8ff"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK={0x100, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7aa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x495}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x248, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x73, 0x3, "ba5589d667a435c3e3dc53f1ce354fbb7feb9696558ffbf050c854d56ef238ae67b7a8eed5b67912fadcfee320ec2916beecad74cd460fdd99c04306c1c7e9884b5a4cec59683517cc4fffae7292fd80ae502e5d27479e7bee6e61259cf9f7bf90dc3cc82db90a97d7c0703fa9501d"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x40, 0x3, "11bf308f7ae29d95d6af6c1165fa0fce9b5bb876f46ed3d2fabf1db37b513ce9b83fc0584e71dee761d5cc3fdc42376caec9b6c387c0560cb012913e"}, @TIPC_NLA_NODE_ID={0x8e, 0x3, "83086e6483ffba54eb8f5ca1f593dc1db035c87e4c95242b6c8778388a843fc60ae53be3b86eab2003930c452e9870d3513661fa0ff21744cd50181c40a927b877d4fc18c91009128c7d5216bdd3e6fe4912b3404a818c10dd7d948693487f683ff91fca25efc630f8cd719544b8263762ecadc04c4ba0126c105e6145ec0f86ffa0293c39c9fea41df8"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xed, 0x3, "85d62862bce8ebe81b92eba9a7005789404c8b1886c597638fdf1949d92085eee707c4322fa72889d4476a687e77d9545ff46acd1144f01f268b757edb4b0d7132ecf59ea92e38592afd0d6976a3797ae0c9a08b77820cf956c271d16aa1f511e7a0393e7fb6e74bba61db15487ad2ff01f6a6f9d174ee5502a7df44bd321edd6a3c7f9269f7bd9ad6e00bd13df393b1f87df9989e1e6d6be716a9266d2e3701dae57206a4425aee5a4835a0ed875f28dc741a64bfb22766850e0343bddd9e75083dd09d0da23a6680b70cbf59aecd02d4be527fe6917bc71c8c2e081c7ecd72137c985a73d54c419a"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff0001}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8, @loopback, 0x9}}}}]}]}, 0x84c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) openat(r1, &(0x7f0000000c00)='./file1\x00', 0x8c202, 0x100) lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.impure\x00') r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000c40)={0x0, 0x0, r3, 0x2, 0x80000}) 21:47:01 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r3, r2, 0x0, 0xfffffdef) [ 1731.784196] loop5: detected capacity change from 0 to 39 [ 1731.793091] FAT-fs (loop5): bogus number of reserved sectors [ 1731.793482] FAT-fs (loop5): Can't find a valid FAT filesystem 21:47:01 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) renameat(r0, &(0x7f00000000c0)='./file1\x00', r0, &(0x7f0000000180)='./file1\x00') chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[], 0x24f) pwrite64(r0, &(0x7f0000000240)="b0705c915cfa3a842de7b7b142e520e5dbc5ca81a357b3469d8bf6ea16bc73073dce63f6b9287d15e712a27f04269be02477a320dcf52737e8571bda718f4dd5d3885b6182264805cb20de7f6ffa469521da6ec242a7524d58152aecf14988cca614f103ab43bf17c089e67614c67a0af9ebb8d13c25fc62371e8f07d5b1700b9677b9f04bd25371e75b029b33f6141f48d46198de8438e31e7b0e2c61df80e6e2d98ed378409be9be17d9f89b7853126bab18360e106def8cc3", 0xba, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) [ 1731.797874] loop4: detected capacity change from 0 to 39 [ 1731.846587] loop6: detected capacity change from 0 to 39 [ 1731.847563] loop3: detected capacity change from 0 to 39 [ 1731.850433] loop2: detected capacity change from 0 to 39 [ 1731.853912] loop7: detected capacity change from 0 to 39 21:47:01 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:47:01 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) [ 1731.865995] FAT-fs (loop6): bogus number of reserved sectors [ 1731.866392] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1731.906363] syz-executor.3: attempt to access beyond end of device [ 1731.906363] loop3: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1731.908142] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 1731.909445] syz-executor.2: attempt to access beyond end of device [ 1731.909445] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1731.911062] Buffer I/O error on dev loop2, logical block 31, lost async page write 21:47:01 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x9, 0x421401) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000180)) fcntl$setownex(r1, 0xf, &(0x7f00000002c0)={0x2}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x10100, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xf, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x44}}, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x50, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/binder1\x00', 0x804, 0x0) write(r4, &(0x7f0000000600)="d81f4fd1b2371e498f5550f9e302002655b0687b590024495dc0a705568f2971383ee41db02f5a482f80c4e8dbe3632a050000000000000092dea2b5da0001000000000400b42dd0af7df8bdca0838621e9248f0a507f1505dde9a278dd10e8df7b9416488e8ca5722f78b5629510e3f2705d1abc396659c79adfadf17abad9705a86da874ffee03c07f3161d7e9ba1a3a40e857fc37ec67544b6762f59a252c22d38156345730f176f52737ca00000000000000458345a7d9ccdbf16e2652d464b8b74c22a928bea47dbb83994d11ea246100000001823686cdda4514b195a6ef1da23fdbbdd978a136d1318544092c67b461e13e1c928f31ff6c5fba4850e91df167625d17926667e009fe0b5969ad12f062a0157a36be8f4b93b4c9be472d9f968e40a06e56289bb5c2b492d61f73b2e7af449eb6f3c4137f1b9616719f3869e27021fc05ac09b65ae507cf718c5fb33e10ace772d5726bc3a50ae398da209487f5bd5fad1a078cb71fee51d4fb4ca982e0c85636edc40a04a9e236cf966cb68260eabaf5d0f0d2d0f108c1daf448e77c53fae9e96716ddfda320b3a255dac10a1553cc32a0bab5ce9f01e7d6ebefc9b79ca3b4e0bdf971327a5ef9ba5d6b64a4d31a50b03ab8980038a39f81a7a6e8b661c3fb00317bdb76984b708da9cfe6260ba593d8131c07d5a5126967976991c2ee552cf8f3bd317de1df2d4b37fddd74ff322618e0c506714c7b5b0b32ca5c5530684d7b531204f7f5dd4e40a266a58e4e7548c6e37d1e16911b70d429c4d22ce11966745f7962bf8766ce7ed29170423089fd664b1ae2cdd2269384eb0a6861d1269adb4416863c6f8012871a7432a2546456", 0xfff8) 21:47:01 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0xffff, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) [ 1731.925416] loop5: detected capacity change from 0 to 39 [ 1731.938258] FAT-fs (loop5): invalid media value (0x00) [ 1731.938615] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1731.980404] loop4: detected capacity change from 0 to 39 21:47:01 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x301, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:47:01 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000440)=ANY=[], 0x24f) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) [ 1732.073598] loop7: detected capacity change from 0 to 39 [ 1732.101749] syz-executor.3: attempt to access beyond end of device [ 1732.101749] loop3: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1732.103340] Buffer I/O error on dev loop3, logical block 31, lost async page write 21:47:14 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="55901e48393d12bbb246b3409e2806c50805982a95ba33e37c1db7a27b65c681b091898df49d24e3c824b8eafdffffffffffffbf86775c3a9f5786bffe1311db1a3fbedb589e7c16e527ac089bcc9d8a70d028f7f7ea3498684c0b7cf5527ce2c7f304d94c3415070d6a184d40573bfed2a2b2ae741c4f0ae1d7269f1adea5fb6831d94720c9d7850dfac898f7b15ae0167f595003ab5af6d87d8c10377e574e127802349b9e853c44128373c413ae2bc905867cd6942e4cc55ebd33f43b5902d7455afd67b60f4967320a1075a4d4570de625c9f02338da9a0bfd4e32b8810e82351e4612409fd4c2444fad3b34c8404bac692b9bc4e1e45704d6fd88e3f29965daa9106008", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:47:14 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x141008) 21:47:14 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:47:14 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) write(r2, &(0x7f0000000200)='E', 0x140000) 21:47:14 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) 21:47:14 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') unlink(&(0x7f0000000180)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/49, 0x31}], 0x1, 0x9, 0x877f, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) 21:47:14 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r3, r2, 0x0, 0xfffffdef) 21:47:14 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) [ 1744.422260] loop6: detected capacity change from 0 to 39 [ 1744.422637] loop7: detected capacity change from 0 to 39 [ 1744.423284] loop3: detected capacity change from 0 to 39 [ 1744.423866] loop2: detected capacity change from 0 to 39 [ 1744.426465] loop4: detected capacity change from 0 to 39 [ 1744.434719] FAT-fs (loop6): bogus number of reserved sectors [ 1744.435240] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1744.443152] loop5: detected capacity change from 0 to 39 [ 1744.445259] syz-executor.2: attempt to access beyond end of device [ 1744.445259] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1744.446176] Buffer I/O error on dev loop2, logical block 31, lost async page write [ 1744.457618] FAT-fs (loop5): invalid media value (0x00) [ 1744.458177] FAT-fs (loop5): Can't find a valid FAT filesystem 21:47:14 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:47:14 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) 21:47:14 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x141100) 21:47:14 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) 21:47:14 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3000001, 0x401a012, r1, 0xa46fb000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) 21:47:14 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x2, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) [ 1744.689220] loop7: detected capacity change from 0 to 39 21:47:14 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1744.731627] loop2: detected capacity change from 0 to 39 [ 1744.733348] loop5: detected capacity change from 0 to 39 [ 1744.736590] loop4: detected capacity change from 0 to 39 [ 1744.754982] FAT-fs (loop5): invalid media value (0x00) [ 1744.755709] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1744.804298] syz-executor.2: attempt to access beyond end of device [ 1744.804298] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1744.806003] Buffer I/O error on dev loop2, logical block 31, lost async page write 21:47:14 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x6, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:47:14 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) 21:47:14 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0xc3) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x1000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x7, &(0x7f0000000700)=[{&(0x7f0000000240)="dd83c29bcaa7ad3c8c0ae9676a83d8c40f0673fadd40d926759d08e929688108e4e8807d7ebed2a7a4da0df5b0881d3f5b31ffab502110ecdd06c84794e5654a75243a935844077bd83c5ac7ea83f7340244233c64e2fd2f4455de61eb5648e489b8c3aa22608fc4a2a2668010c4bef595b0e820739b9d0b3fedd0651383f47c2ae7abc97f44c463e9748b3acf838642c88f3892f5514b90aa9c52e163032f1ccb7a2568a3c830ac2de50d5081f7046ff20d0cc470417670771901f922743fc8c8c6524e1c415abba824818ee11cfcbe4f58e45dcaa79a7cd6be", 0xda, 0x1}, {&(0x7f0000000340)="cb97c2f8110ad7919053835c03ce85f77fa3dff99de5a009d16a777068c76d71679b141f2a02ed85cf77360e96192fc244794f4a56f0b56c46be7c3a4c19655a0060f6535f5e4dd31173d47115d70b98a37da9ffbff6d0e1414d0e97f48908569b17667f38121cd5aa345e5ca052dc4f76bfccc0b01bae1297a68ba4055764d6db5b404a4c80baf5e7f54ce5198e8bb3", 0x90, 0x1000000000000007}, {&(0x7f0000000400)="eae210e369490399bb67033de90166d6f8c97b63f46c051511b91e89cc2cdaf49d401c25cb86c6a754b90619a9093153b0f39273e92b44fa61de6d3f56750a8085d73dbecf79973200af5549fb25569db355f87556e948dc0c03086352dc550bb58c135274d619cca8d7b0d382df48139dfc9cdfbc81df02d35b0fb64ef4d83c3e5fdcb4add5562f494619679a1b470704a00020c1cd2be997dfcef63045a9e4012b3a03d768aa0bf70d5bb1e08dc08010cc938c44eec9a301c78e81bef54aa92641a4f960757b6053026277c43df6340066f003a4908ba979c3ccf5", 0xdc, 0x10000}, {&(0x7f0000000500)="897a2c08128a736deca8b8fbfe100f7cc966", 0x12, 0x9}, {&(0x7f0000000540)="f557fed11fb46721737433d300546c2cafb7f7d8c06c87895ecbba12535efaee44ddc0110f495ab67a3a4c4d76cdd3a8b331f80706a8c2bac9eb78f56afba63875a88e557ec93210cdb325888fa0e63aac23ec584e828d6f2ce2e9cfc8e49830958b83bb0cf94b6673c4b8cd87a7163f3f7f", 0x72, 0x5}, {&(0x7f00000005c0)="1a9d4fe7d615d5f3afefddffe2eb9dab7cf8c3b27e7ea106224bb05dabb244483d550b8aa9118cbf20069923950096f4afe92deb388a00520883b91b20d427f964db6b25587a09973f75db9a15147b596f98898793c9cddc3979c501fc2efb73e0f6e25b15a9de00056ade616b6cfefd1014d7eb2044a2385300d6a49a2db83c74da615ce0642258ee7678395d29e12466cb402997df7246", 0x98, 0x8}, {&(0x7f00000007c0)="ba16f1dcd3bf4a3d0df004056fb5f58fdff9e221928b7016c4ef111f6db09b3606f0fa180d26e982ba4ad884ab0bff2791a446b83fb67c612e5d9eda3b9758bdc32334ba2214abc3248f34cfc19885272a93e526b9ca4b6f295f06e7b078fe61782ce24199b4820bdc729c6692689ca36d51", 0x72, 0x80000001}], 0x420, &(0x7f0000000a00)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x1c}}, {@jqfmt_vfsv1}, {@data_err_abort}, {@quota}, {@acl}, {@errors_continue}, {@journal_checksum}, {@quota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xa96}}], [{@smackfsroot={'smackfsroot', 0x3d, 'vfat\x00'}}, {@subj_role={'subj_role', 0x3d, '[+(^]]}!O+^-\'(]\xe2$%/'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@uid_gt}, {@context={'context', 0x3d, 'sysadm_u'}}]}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000680)={0x0, 0x3, 0x0, 0x8000}) ioctl$CDROM_GET_CAPABILITY(r1, 0x5331) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) openat(r1, &(0x7f00000006c0)='./file2\x00', 0x38840, 0xc1) sendfile(r1, r1, 0x0, 0x7) 21:47:14 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1744.975799] loop4: detected capacity change from 0 to 39 [ 1744.980500] loop7: detected capacity change from 0 to 39 21:47:28 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r3, r2, 0x0, 0xfffffdef) 21:47:28 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) 21:47:28 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x0, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f00000004c0), 0x4) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @le_add_to_resolv_list={{0x2027, 0x27}, {0x2f, @none, "3b7451a25bc540f49707cd15f6a5feac", "bb6c20fc8404da943d9671da3783b9a0"}}}, 0x2b) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000000440)=ANY=[], 0x24f) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r5, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r6, &(0x7f0000000200)='E', 0x140000) 21:47:28 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x141214) 21:47:28 executing program 7: chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) 21:47:28 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:47:28 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x7, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:47:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x40, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x800}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0xc041) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4834437713c1b98644000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="28000f0080000000ffffffffffff0802110000000802110000000000000000000000000064000000"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xf, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x44}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xf, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x44}}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000004c0)=ANY=[@ANYRES64=r1, @ANYRESOCT=0x0, @ANYRESDEC=r3, @ANYRESHEX=r4, @ANYRES32=r0, @ANYBLOB="cfc8e1e3388551c4c4b3dc6d40bb5277adcc156be79d1c98814ba6717436abcc46f6e1f5fef1578c476935cd5e4ac9ffa8", @ANYBLOB="27a51fc99ce90c08959086dca2b3c789673fd1bff51ea72cea8a4a1837e9edfb7b4657035122d7195808355aafa277feb3f46f388865307ea32f4651f2339e5e1f86a5c522d5c19cdd52e5aa1ec65709a364a37d8dd249a159cca9d42d0f7c9b4fde78386b0d4255f22fbe4551bc115ad860c177cb6a849c427a3aa8ce440b82ac1f7402476757a314fe955bfec4314e9fba668c518b"]) chdir(&(0x7f0000000140)='./file0\x00') r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000440)={&(0x7f0000000180), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, r6, 0x810, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xb3db, 0x65}}}}, [@NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x1000, 0x2, 0x4, 0x0, {0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x1, 0x800, 0x1f}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4080000}, 0x800) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r7, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r8, &(0x7f0000000200)='E', 0x140000) 21:47:28 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1759.269374] loop6: detected capacity change from 0 to 39 [ 1759.277260] loop5: detected capacity change from 0 to 39 [ 1759.278634] loop2: detected capacity change from 0 to 39 [ 1759.280033] FAT-fs (loop6): bogus number of reserved sectors [ 1759.280818] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1759.286514] FAT-fs (loop5): invalid media value (0x00) [ 1759.287033] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1759.288831] loop4: detected capacity change from 0 to 39 [ 1759.297885] syz-executor.2: attempt to access beyond end of device [ 1759.297885] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1759.298893] Buffer I/O error on dev loop2, logical block 31, lost async page write [ 1759.339281] FAT-fs (loop3): Unrecognized mount option "" or missing value 21:47:29 executing program 7: chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) 21:47:29 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) 21:47:29 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x9, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:47:29 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x141314) [ 1759.423499] loop5: detected capacity change from 0 to 39 [ 1759.432295] FAT-fs (loop5): invalid media value (0x00) [ 1759.432633] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1759.440305] FAT-fs (loop3): Unrecognized mount option "" or missing value [ 1759.496678] loop2: detected capacity change from 0 to 39 [ 1759.549121] syz-executor.2: attempt to access beyond end of device [ 1759.549121] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1759.550660] Buffer I/O error on dev loop2, logical block 31, lost async page write 21:47:41 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1601, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:47:41 executing program 7: chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) 21:47:41 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) 21:47:41 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r3, r2, 0x0, 0xfffffdef) 21:47:41 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17, 0x2}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) openat(r1, &(0x7f0000000180)='./file0\x00', 0x2080, 0x62) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0xad, 0x7, 0x1, 0x9, 0x0, 0x9, 0xa0900, 0x7, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x4000010000}, 0x80a0, 0x100000000, 0x3, 0x8, 0x5, 0x7fff, 0x21, 0x0, 0x3, 0x0, 0x2}, 0x0, 0x100000000005, r0, 0x8) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x3f, 0xf, 0x4, 0x7, 0x0, 0x7, 0x40200, 0x8, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x7, @perf_bp={&(0x7f0000000340), 0x2}, 0x1d00, 0x6, 0xffffffff, 0x5, 0x9, 0x8001, 0x80, 0x0, 0x8, 0x0, 0x6}, 0x0, 0x2, r0, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r2, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) openat(r3, &(0x7f0000000240)='./file0\x00', 0x48702, 0x54) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x105001, 0x60) socket$nl_generic(0x10, 0x3, 0x10) write(r4, &(0x7f0000000200)='E', 0x140000) syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_vs_stats_percpu\x00') 21:47:41 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x3, 0x246000) write(r2, &(0x7f0000000240)="34beef3c466149cc877061a52d284e679b69f7f206f2c0204952b736e26a73e12b017f4747769ba02e7ec84f27ffa42ac273e8223556de308a615ac256cc8dfdd004caf94952bf97cbfdc8a631bb8a9763ddf02f8ff3c6c7a16a8d55ca322e2364871d74061b8a44a0ea02089434a11fe13f5f654844d92555488e6618f1e19104d799d1a159a019e4bb7ffe051760b3b6796d8b2a32b6115fb81d59", 0x9c) write(r1, &(0x7f00000000c0)='(', 0x1) 21:47:41 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0xd, 0x0}, &(0x7f0000000400)="55901e48393d12bbb246b3409e2806c50805982a95ba33e37c1db7a27b65c681b091898df49d24e3c824b8eafdffffffffffffbf86775c3a9f5786bffe1311db1a3fbedb589e7c16e527ac089bcc9d8a70d028f7f7ea3498684c0b7cf5527ce2c7f304d94c3415070d6a184d40573bfed2a2b2ae741c4f0ae1d7269f1adea5fb6831d94720c9d7850dfac898f7b15ae0167f595003ab5af6d87d8c10377e574e127802349b9e853c44128373c413ae2bc905867cd6942e4cc55ebd33f43b5902d7455afd67b60f4967320a1075a4d4570de625c9f02338da9a0bfd4e32b8810e82351e4612409fd4c2444fad3b34c8404bac692b9bc4e1e45704d6fd88e3f29965daa9106008", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:47:41 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x141412) [ 1771.985616] loop4: detected capacity change from 0 to 39 [ 1771.986215] loop6: detected capacity change from 0 to 39 [ 1771.988798] loop2: detected capacity change from 0 to 39 [ 1771.989386] loop3: detected capacity change from 0 to 39 [ 1771.992654] loop5: detected capacity change from 0 to 39 [ 1771.999317] FAT-fs (loop6): bogus number of reserved sectors [ 1772.000291] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1772.002574] FAT-fs (loop4): invalid media value (0x20) [ 1772.003363] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1772.010483] FAT-fs (loop5): invalid media value (0x00) [ 1772.011317] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1772.040851] syz-executor.2: attempt to access beyond end of device [ 1772.040851] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1772.042588] Buffer I/O error on dev loop2, logical block 31, lost async page write 21:47:41 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:47:41 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) [ 1772.105276] loop4: detected capacity change from 0 to 39 [ 1772.114140] FAT-fs (loop4): Unrecognized mount option "./file1" or missing value 21:47:41 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) [ 1772.148549] loop7: detected capacity change from 0 to 39 21:47:41 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0xe, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) [ 1772.168143] loop5: detected capacity change from 0 to 39 21:47:41 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x141413) [ 1772.177873] FAT-fs (loop5): bogus number of FAT sectors [ 1772.178470] FAT-fs (loop5): Can't find a valid FAT filesystem 21:47:41 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) 21:47:41 executing program 3: sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000f703200026bd7000fedbdf250700000007000000863b2e2f66696c65302e2f66696c6530"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8000000000101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x409a911, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) 21:47:42 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) [ 1772.323819] loop2: detected capacity change from 0 to 39 [ 1772.325376] loop5: detected capacity change from 0 to 39 [ 1772.332185] FAT-fs (loop5): bogus number of FAT sectors [ 1772.332958] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1772.365634] loop7: detected capacity change from 0 to 39 21:47:42 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x42800) symlinkat(&(0x7f00000001c0)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00') chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x121042, 0x0) write$binfmt_aout(r2, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r1, r0, &(0x7f0000000280)=0x1, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x101802, 0x0) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000340)={0x9, &(0x7f0000000300)=[{0x8001}, {0x0, 0x6}, {0x1e2, 0x7}, {0x2, 0xb66c}, {0x400, 0x2}, {0x9, 0x80}, {0x500, 0x6}, {0x922d, 0xf6cd}, {0x924, 0x2}]}) mknod(&(0x7f0000000380)='./file0\x00', 0x40, 0x8000) r5 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x100000000, 0x28b00) r6 = openat(r5, &(0x7f0000000180)='./file1\x00', 0x313000, 0xb) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r3, 0x0) tee(r2, r6, 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r7, &(0x7f0000000200)='E', 0x140000) [ 1772.385619] loop3: detected capacity change from 0 to 39 21:47:42 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1772.413187] syz-executor.2: attempt to access beyond end of device [ 1772.413187] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1772.414767] Buffer I/O error on dev loop2, logical block 31, lost async page write 21:47:42 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) [ 1772.426080] FAT-fs (loop3): bogus logical sector size 0 [ 1772.427069] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1772.520459] loop4: detected capacity change from 0 to 39 [ 1772.543787] loop3: detected capacity change from 0 to 39 [ 1772.552837] loop7: detected capacity change from 0 to 39 21:47:56 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x141900) 21:47:56 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x600, 0x0}, &(0x7f0000000400)="55901e48393d12bbb246b3409e2806c50805982a95ba33e37c1db7a27b65c681b091898df49d24e3c824b8eafdffffffffffffbf86775c3a9f5786bffe1311db1a3fbedb589e7c16e527ac089bcc9d8a70d028f7f7ea3498684c0b7cf5527ce2c7f304d94c3415070d6a184d40573bfed2a2b2ae741c4f0ae1d7269f1adea5fb6831d94720c9d7850dfac898f7b15ae0167f595003ab5af6d87d8c10377e574e127802349b9e853c44128373c413ae2bc905867cd6942e4cc55ebd33f43b5902d7455afd67b60f4967320a1075a4d4570de625c9f02338da9a0bfd4e32b8810e82351e4612409fd4c2444fad3b34c8404bac692b9bc4e1e45704d6fd88e3f29965daa9106008", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:47:56 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) 21:47:56 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) 21:47:56 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:47:56 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) fcntl$setstatus(r2, 0x4, 0x42800) openat(r2, &(0x7f00000000c0)='./file1\x00', 0x10000, 0x88) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) accept(r0, 0x0, &(0x7f0000000080)) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x389480, 0x120) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) 21:47:56 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r2, &(0x7f0000000180)="4c650dec89946dcb1d3317c930d16752a84a824bfe6701b968c66d8646f9d8f8d6452c934110f99575c11dbe95720e6d08ccf818329115dd7e597ebf8759fd1a33a5f5fb1984ac61fd07e213e45a5f2f1a5729752f8f59ef6b8c81b27e6369d17b7966cbc8", 0x65) 21:47:56 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r3, r2, 0x0, 0xfffffdef) [ 1787.299681] loop3: detected capacity change from 0 to 39 [ 1787.303446] loop7: detected capacity change from 0 to 39 [ 1787.306625] loop2: detected capacity change from 0 to 39 [ 1787.309810] loop4: detected capacity change from 0 to 39 [ 1787.310825] loop6: detected capacity change from 0 to 39 [ 1787.315558] loop5: detected capacity change from 0 to 39 [ 1787.318423] FAT-fs (loop6): bogus number of reserved sectors [ 1787.318882] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1787.322785] FAT-fs (loop5): bogus number of FAT sectors [ 1787.323234] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1787.334850] syz-executor.2: attempt to access beyond end of device [ 1787.334850] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1787.335993] Buffer I/O error on dev loop2, logical block 31, lost async page write 21:47:57 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x700, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) [ 1787.374695] syz-executor.3: attempt to access beyond end of device [ 1787.374695] loop3: rw=0, sector=40, nr_sectors = 4 limit=39 21:47:57 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) 21:47:57 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x142000) [ 1787.522783] loop5: detected capacity change from 0 to 39 [ 1787.544300] loop2: detected capacity change from 0 to 39 [ 1787.576066] syz-executor.2: attempt to access beyond end of device [ 1787.576066] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1787.577119] Buffer I/O error on dev loop2, logical block 31, lost async page write 21:48:10 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) 21:48:10 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x900, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:48:10 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r3, r2, 0x0, 0xfffffdef) 21:48:10 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x143101) 21:48:10 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) setxattr$security_capability(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)=@v1={0x1000000, [{0x81, 0x4}]}, 0xc, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='E', 0x140000) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x145400, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200400, 0x100) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) fsetxattr$security_capability(r2, &(0x7f00000001c0), &(0x7f0000000240)=@v1={0x1000000, [{0x3, 0x200000}]}, 0xc, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xf, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x44}}, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r3, 0x8030942b, &(0x7f0000000300)={0x0, {0x10, 0x9, 0x4, 0x0, 0x4}}) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000280)=0x5) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f00000000c0)) 21:48:10 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') readlinkat(r0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000240)=""/241, 0xf1) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) 21:48:10 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) 21:48:10 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1801.191767] loop6: detected capacity change from 0 to 39 [ 1801.194784] audit: type=1400 audit(1689976090.920:13): avc: denied { tracepoint } for pid=9474 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 1801.200483] FAT-fs (loop6): bogus number of reserved sectors [ 1801.200879] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1801.204892] loop7: detected capacity change from 0 to 39 [ 1801.207402] loop2: detected capacity change from 0 to 39 [ 1801.225789] syz-executor.2: attempt to access beyond end of device [ 1801.225789] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1801.226688] Buffer I/O error on dev loop2, logical block 31, lost async page write [ 1801.245186] loop3: detected capacity change from 0 to 39 [ 1801.250443] loop4: detected capacity change from 0 to 39 [ 1801.255592] loop5: detected capacity change from 0 to 39 21:48:10 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:48:11 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x143f00) 21:48:11 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0xd00, 0x0}, &(0x7f0000000400)="55901e48393d12bbb246b3409e2806c50805982a95ba33e37c1db7a27b65c681b091898df49d24e3c824b8eafdffffffffffffbf86775c3a9f5786bffe1311db1a3fbedb589e7c16e527ac089bcc9d8a70d028f7f7ea3498684c0b7cf5527ce2c7f304d94c3415070d6a184d40573bfed2a2b2ae741c4f0ae1d7269f1adea5fb6831d94720c9d7850dfac898f7b15ae0167f595003ab5af6d87d8c10377e574e127802349b9e853c44128373c413ae2bc905867cd6942e4cc55ebd33f43b5902d7455afd67b60f4967320a1075a4d4570de625c9f02338da9a0bfd4e32b8810e82351e4612409fd4c2444fad3b34c8404bac692b9bc4e1e45704d6fd88e3f29965daa9106008", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:48:11 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) 21:48:11 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1801.380365] loop7: detected capacity change from 0 to 39 [ 1801.383374] loop2: detected capacity change from 0 to 39 21:48:11 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) 21:48:11 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x400, 0x101) write(r1, &(0x7f0000000200)='E', 0x140000) [ 1801.419914] syz-executor.2: attempt to access beyond end of device [ 1801.419914] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1801.421237] Buffer I/O error on dev loop2, logical block 31, lost async page write [ 1801.450290] syz-executor.2: attempt to access beyond end of device [ 1801.450290] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1801.451455] Buffer I/O error on dev loop2, logical block 31, lost async page write 21:48:11 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x6251, 0x6, &(0x7f0000001640)=[{&(0x7f00000003c0)="aa1940fa715f95abe9ce8dce5ae3db9bf8b52f45fa368dc5d3fc89be9daba57060b7d17b102ee717bb8ff43565a77a203d17c0ca0e62967ad3c931fec486456c70cfe697097c55b46260bdbb9e64d9544ef949b02da3eef615b3be1442459f6363b1647e497c6ec5", 0x68, 0x6}, {&(0x7f0000000440)="e2b47eb8eeeffdd296eb0c0aa4e875668fabe9ceb56844e8b20d79d15ac94603d75b430c684d4f2737b523ebd26e2b77e7010beae471ac946c89bfd9e23a9e3c7314bbab1653ebb49cb315c84bdcdbb0a532a02bbace7f73c709b938cb5c8d97225d64", 0x63, 0x1}, {&(0x7f00000004c0)="77209161643debe18f5b21c1cee2a275bdaa11c96c7388b59d1bfeee3c67eece888ceba149ca0697544a40530e67286a6fe524a0e12f9023b1ad774c14b7f03c447eaee318beb4e24fdea2869c83852697e2144b2b07e709391f1501666af48ac3086964a13559efaa6ec3fc80f1e9fa3ac6e8e0e356ebd2f0675963f6302d43e2a9aa1dbf37e1687027fe097dbce4dc31bcf218751bdbe5f7d7e93de6f4c0174eb8aba0b88ebb90208b772596306ada10ce17d39c83c4c3f96883a445b129012a5770f5348940ccee2e1837992e1a9a66acb3", 0xd3, 0x6}, {&(0x7f00000005c0)="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", 0x1000, 0x64}, {&(0x7f00000015c0)="2dbc3dba36", 0x5, 0xbed6}, {&(0x7f0000001600)="70af7afd7389ffff14054aa770723bb37c01dbc9cdb9d4cd96be340a055576df1a331cb9f3df231bc6c78296e79d72c6", 0x30, 0x8}], 0x40000, &(0x7f0000001700)={[{@shortname_win95}, {@numtail}, {@shortname_win95}, {@nonumtail}], [{@fsuuid={'fsuuid', 0x3d, {[0x39, 0x62, 0x33, 0x39, 0x9621a3553a1001d6, 0x36, 0x32, 0x35], 0x2d, [0x0, 0x61, 0x61, 0x37], 0x2d, [0x30, 0x36, 0x62, 0x5cd9dad630df398], 0x2d, [0x66, 0x32, 0x35, 0x63], 0x2d, [0x61, 0x32, 0x63, 0x39, 0x34, 0x39, 0x61, 0x64]}}}, {@dont_hash}, {@pcr={'pcr', 0x3d, 0x28}}, {@euid_gt}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@subj_type={'subj_type', 0x3d, '\xff\xff\xff\xff\xff\xff'}}, {@smackfsfloor}, {@smackfsdef={'smackfsdef', 0x3d, '(}'}}]}) openat(r1, &(0x7f0000001800)='./file1\x00', 0x100000, 0x10) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001840)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="d85727cd1cc22363c327050000000000000000000f00000008000300b6fa6e6a881c0862588e8851f1139b1deea9893d5390bb9b672737860df52ceed0181ee8a5adac2073e8bcc24819a86445735b4bdc54451cae8ec47c0a240346e703bac379b43df8235a59f9f9f6f70b15a1589878692a1547f8329ea089cacd986715712eec2d6da01b19de9ea8909c9473fa8c1f9c66a10b1f07dd3919327653539776c5ccc38f6a47ecabb3d010ae751b221b2b343ae4f98525e9b6808e1119a57e4920356048197e9720fc2c73f3973131e6b6e9242356dbe1bc0fed7f8cf4ce8602e5ff412d6859f442", @ANYRES32=0x0, @ANYBLOB="28000f0000000064000025"], 0x44}}, 0x0) pwrite64(r3, &(0x7f0000000240)="5b90a70c1743a67cba27350f1ce685bb330994a3add087b09843d1bb8d508d0631e25c653dad87831f92d54cb7f2b89e9b47a183110977a5b1d07ec450ac36d1df15010efcbc79a6f441a077385d62ee010a003e39c1b9c81931153addea780f74c11c8862f982b7dfe4c7de9ae3063f2c04fc5f3c3bf643ddc595756c03ad788d3c3ed1aa0dec6d4fd065a3ee5e394c8257b8ebaca11a07ec49508c07ea88eb591e3eb1c66b30b5d82945fc8aee469273549836f8979c41c150f8b453a15e1ce5d4afb43ef58899d8ff73a2aa9dbd1dba5ca8d22e", 0xd5, 0x1) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r5, &(0x7f0000000200)='E', 0x140000) fspick(r2, &(0x7f00000000c0)='./file1\x00', 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xf, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x44}}, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000001980)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6, @ANYRES32=r8, @ANYBLOB="00000005dbbf4e2725347af839787bb2420c49d5345147418ae527b4af2373ab0a0f30811075d46ad871c1d759272d1206a9738acf135de6eed269eadba9ae1cd076e807c8c6a8967c4d04bf1a2217c37b1e294dee5876f576f6b518c2f1132ec78fb42b161bf6cf77929d46ce3ad855b966504d6380058738fd7a2e9b229279c436b8923a9418ee201e"]) [ 1801.455667] loop5: detected capacity change from 0 to 39 [ 1801.459211] loop3: detected capacity change from 0 to 39 21:48:11 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:48:11 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) [ 1801.569713] loop4: detected capacity change from 0 to 39 21:48:24 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x144000) 21:48:24 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0xe00, 0x0}, &(0x7f0000000400)="55901e48393d12bbb246b3409e2806c50805982a95ba33e37c1db7a27b65c681b091898df49d24e3c824b8eafdffffffffffffbf86775c3a9f5786bffe1311db1a3fbedb589e7c16e527ac089bcc9d8a70d028f7f7ea3498684c0b7cf5527ce2c7f304d94c3415070d6a184d40573bfed2a2b2ae741c4f0ae1d7269f1adea5fb6831d94720c9d7850dfac898f7b15ae0167f595003ab5af6d87d8c10377e574e127802349b9e853c44128373c413ae2bc905867cd6942e4cc55ebd33f43b5902d7455afd67b60f4967320a1075a4d4570de625c9f02338da9a0bfd4e32b8810e82351e4612409fd4c2444fad3b34c8404bac692b9bc4e1e45704d6fd88e3f29965daa9106008", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:48:24 executing program 4: prctl$PR_SET_KEEPCAPS(0x8, 0x200000001) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) openat(r0, &(0x7f00000001c0)='./file1\x00', 0x115402, 0x80) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[], 0x24f) openat(r0, &(0x7f0000000180)='./file0\x00', 0x2000, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r2, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) chdir(&(0x7f0000000240)='./file1\x00') write(r3, &(0x7f00000000c0)='G', 0x1) 21:48:24 executing program 3: fstatfs(0xffffffffffffffff, &(0x7f0000000240)=""/136) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10010, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) r3 = open_tree(r2, &(0x7f0000000080)='./file1\x00', 0x80000) write(r2, &(0x7f0000000200)='E', 0x140000) openat(r0, &(0x7f0000000340)='./file1\x00', 0x321500, 0xec) r4 = open$dir(&(0x7f0000000180)='./file2\x00', 0x385b01, 0x124) r5 = dup3(r2, r3, 0x80000) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f00000000c0)=0x5, 0x4) renameat(r4, &(0x7f00000001c0)='./file0\x00', r5, &(0x7f0000000300)='./file1\x00') 21:48:24 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) 21:48:24 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:48:24 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r3, r2, 0x0, 0xfffffdef) 21:48:24 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) [ 1814.474336] loop4: detected capacity change from 0 to 39 [ 1814.475189] loop6: detected capacity change from 0 to 39 [ 1814.478679] FAT-fs (loop6): bogus number of reserved sectors [ 1814.479162] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1814.489990] loop2: detected capacity change from 0 to 39 [ 1814.496494] loop3: detected capacity change from 0 to 39 [ 1814.508153] loop5: detected capacity change from 0 to 39 [ 1814.521546] syz-executor.2: attempt to access beyond end of device [ 1814.521546] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1814.522526] Buffer I/O error on dev loop2, logical block 31, lost async page write [ 1814.535818] syz-executor.3: attempt to access beyond end of device [ 1814.535818] loop3: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1814.536764] Buffer I/O error on dev loop3, logical block 31, lost async page write 21:48:24 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1814.577652] syz-executor.3: attempt to access beyond end of device [ 1814.577652] loop3: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1814.578665] Buffer I/O error on dev loop3, logical block 31, lost async page write 21:48:24 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) 21:48:24 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) 21:48:24 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) sendmsg$sock(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="f3ef90f4e54a5f332e056e06c1e64ae55521658269aa35e41eed1658e5db926d9afd0595e0f442653a2e6ab9ce0d5f6e922f0a2970c7ef0ec78a885c9d6230ec183a8c8231fc827aefbdd6b6035a745af3e8cded6d9e6b605d701d82c003906bb8e8e7acf3a11438663e6fbfe19e877bd95072882b81e561a178ce7c45cf411cc0c861c9ff8da817e441b1478b3d5b8f25eaf9eae5e70d3759191505beede6323bf9d7cf273b59cba050ac8240e6eb73fa2e10cfce0d872a4bd4a9eb40292af79c8d0e777f142a5895f5113652097f636df3d9d997174affa8781f82a573c051aa8bbd8208665c775322", 0xea}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000000180)="06912d4b2cff3e7391aecd8a15c7c87a7d26b9f4ec5af54c5941ba0739c818743b9100e6823072e7a4f4813abfaa794e8d00d6b5aeacc14ce83760b313d922e2f832385cf1391ffdf5522f1d799ba72a", 0x50}], 0x3, &(0x7f0000001340)=[@mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x81}}, @mark={{0x14, 0x1, 0x24, 0x8001}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @mark={{0x14, 0x1, 0x24, 0xfb3}}], 0xd8}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) 21:48:24 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x2000, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:48:24 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x144800) [ 1814.634145] loop2: detected capacity change from 0 to 39 [ 1814.658001] loop5: detected capacity change from 0 to 39 [ 1814.660209] syz-executor.2: attempt to access beyond end of device [ 1814.660209] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1814.661167] Buffer I/O error on dev loop2, logical block 31, lost async page write [ 1814.676476] loop4: detected capacity change from 0 to 39 21:48:24 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:48:24 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) [ 1814.755683] syz-executor.7: attempt to access beyond end of device [ 1814.755683] loop7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1814.757810] FAT-fs (loop7): unable to read boot sector 21:48:36 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0xfdfd, 0x0}, &(0x7f0000000400)="55901e48393d12bbb246b3409e2806c50805982a95ba33e37c1db7a27b65c681b091898df49d24e3c824b8eafdffffffffffffbf86775c3a9f5786bffe1311db1a3fbedb589e7c16e527ac089bcc9d8a70d028f7f7ea3498684c0b7cf5527ce2c7f304d94c3415070d6a184d40573bfed2a2b2ae741c4f0ae1d7269f1adea5fb6831d94720c9d7850dfac898f7b15ae0167f595003ab5af6d87d8c10377e574e127802349b9e853c44128373c413ae2bc905867cd6942e4cc55ebd33f43b5902d7455afd67b60f4967320a1075a4d4570de625c9f02338da9a0bfd4e32b8810e82351e4612409fd4c2444fad3b34c8404bac692b9bc4e1e45704d6fd88e3f29965daa9106008", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:48:36 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e80)={0x50, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x34, 0xf, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x432, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @val={0x6, 0x2, 0x7f7e}, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x50}}, 0x0) write(r3, &(0x7f0000000dc0)="4705000000000000008c392648ec39235e8405b51b164a08bde2daf4be2933152caa6cbe674c3645fa331c283ff9c179a595e2e607bf718e9821944de93a22aa036905ab76ad65ea4d73de2e2c1b18d82c3412c8c10f59ec02982984efdf6d285c24583187836b9e5cf0a8b0ea4757c5ae6b5b88320f1dd88c6c43985c05e3c2ad549933b1de63dbbe63e71bf546d10d6a6cd029d2b3545b91ae01316ff7014b9130cdbd2df294", 0xa7) openat(r2, &(0x7f0000000080)='./file1\x00', 0x158b0dc4668f87c5, 0x26) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="c629d242", @ANYRES16=r6, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="28000f0080000000ffffffffffff0802110000000802110000000000000000000000000064000000"], 0x44}}, 0x0) connect(r0, &(0x7f0000000c80)=@caif, 0x80) ioctl$BTRFS_IOC_DEV_REPLACE(r5, 0xca289435, &(0x7f0000000240)={0x0, 0xffffffffffffffff, @status={[0x2, 0x1, 0x7, 0x8, 0x1000, 0xfff]}, [0x8, 0x0, 0x35, 0x7f, 0x4, 0x200, 0x80, 0x7, 0x4, 0x10001, 0x7fff, 0x7ff, 0x56, 0x1, 0x200000, 0x1000, 0x1, 0x8, 0x791, 0xfffffffffffffffe, 0x8000, 0x101, 0x81, 0x7a, 0x8001, 0x200, 0x7, 0x6, 0x9, 0x200, 0xc600000000, 0x8001, 0x10000, 0xffffffffffff97c7, 0x3, 0x3, 0xff, 0x6, 0x2000, 0x0, 0x4, 0x7f, 0x10001, 0x8001, 0x5, 0x3, 0x80, 0x3, 0x10000, 0x7, 0x20, 0x0, 0x401, 0x0, 0x8, 0xff, 0x5, 0x5, 0x3, 0x14, 0x101, 0x8, 0x4, 0x8000]}) fallocate(r2, 0x2, 0x7, 0x8) 21:48:36 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) 21:48:36 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x144c00) 21:48:36 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) 21:48:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xf, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000028c0)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002880)={&(0x7f0000002800)={0x5c, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4f}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x90}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44000}, 0x40000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xf, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x44}}, 0x0) r3 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000100)='./file1\x00', 0x9, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000180)="601c6d6b646f7366d8a02b00080101000440002000f801c362fee6470dddb2aea3870f55c1dee4a582834fb8334c7d8c3f9cd928ec3f1e0ca7118a6d5e5a5b456fd684af9af2142aa5244e9bdeafbce38d225f9846a97d7ca8e50102d4b0", 0xfffffffffffffcb0}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r2, @ANYRESHEX=r2, @ANYRES64]) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xf, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000001780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001740)={&(0x7f0000000340)={0x13e0, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x73, 0x40}}}}, [@NL80211_ATTR_VENDOR_DATA={0xd2, 0xc5, "d0ee085b3af082c0dbbb7ce78ea12cb43d74ce4ef89c35e873b75d16cd68b56ece497f53ae29442c494c27537436ad176dbd9fa68a3e36030f8982c58a4215bc5651b00170519581fa4792a601dca4c58b33383db0f5e34b1ca1ddec27ebddfe1b8ca054d1f92e0940841b97f27532f47022c3169dae101491379902729e777a2b97a1d63c06fde6a59aa5b35f718610ec0759a550644a10cfc60f95c987455c13d439fe8b2b7525a4785ecd0c294f110a68d68661bcd3ff4abc30108b62f5c15cdc8b1ac76e66547ab324a4db30"}, @NL80211_ATTR_VENDOR_DATA={0xce, 0xc5, "489fb620eab3210c796b02d6316273d0fbf502b87840b2cef5dbd7f76fc8f0a6da4e9c209383bc1a28801ac111f742a8af577f6ad6a43aac8759faa900068995d8798dd0a716d21444dda681870e66f0f35dd1bf6c8cef78d1e0ffba749fc162e9b786b837d43445201d76d29c27ae566c34cf494965c5dd224e318d27261f096be61c72a7894ea6367c474a4bd18f99fdd2d06526dbd7fd68b9aa27840fdbfd4728e1e389196acd902ba7513a1046439553d8c2e57ee4f7ac534513f3cb490c047600356b6c21884e1a"}, @NL80211_ATTR_VENDOR_DATA={0x4a, 0xc5, "bb7a611b57a305f5a27fbf4b2219adc30ae04cd1b5d9cd27f534ed78c102bfea1f6742688d5567e3feb791f3f36bfa550a65d77f60ee69544c881078972eb562daacccb7e919"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1f}, @NL80211_ATTR_VENDOR_DATA={0x55, 0xc5, "df5e39b0510c26b923279c6ff5f1e3fe92a55db4da88d1f4b2e68a3a95c610ba5c67a585673da852c570bcc41888de0c059c21b5289f9d5d47fbdd4b2a6fdda4a5774bcc1068acff6d0b0334619ceefbe2"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3ff}, @NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "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"}, @NL80211_ATTR_VENDOR_DATA={0x5f, 0xc5, "d18453e775aaaade48fc1e269397ef096f5088812e3b5ab93915c7389e55a5152181e55970244d1feb469742330ce49aa8f3adaafe161ead4a96f7548ceb4150c1c043d67466103becbd5807f1ae1b4fc9b7f487e3f23e43a8e632"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x800}, @NL80211_ATTR_VENDOR_DATA={0xfa, 0xc5, "3cb3c8832fbe1012e8598c4f96d4f635379c437dd2a1e022b6eff4121181e763460924d224a81f84e44bb0e7dd76b6ae13e6d8266315ba38dae60e259beec70916b9ff4c371e248d173734fc51d3012015d51b568fa79d3ba9f7d9b8dd7ce4aa1aa92949139d99371f9e2c62cf77c29104f7eb9ce21d42623b587448d617efd5f3b7a17f84785bba28f13848a5cc33811a306925517d64a82ccc3ae76f92c99d52e98b47280fd2feb12098c4c8d64e45efff9bfa271f810a6f4707de2cd77a615b9a615d3c7543ac05158dd37c74d6424f07ec9aea0bd198edfe3d6781b790b2817e94ee37c43c4f6a74b8a2a63e64a615f2bb4d44a8"}]}, 0x13e0}}, 0x10001) r7 = dup(r4) ioctl$BTRFS_IOC_ADD_DEV(r3, 0x5000940a, &(0x7f00000017c0)={{r7}, "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"}) write$binfmt_aout(r4, &(0x7f0000000440)=ANY=[], 0x24f) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r8, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r9, &(0x7f0000000200)='E', 0x140000) 21:48:36 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:48:36 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r3, r2, 0x0, 0xfffffdef) [ 1826.717450] loop6: detected capacity change from 0 to 39 [ 1826.721163] loop3: detected capacity change from 0 to 39 [ 1826.731070] syz-executor.7: attempt to access beyond end of device [ 1826.731070] loop7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1826.734306] FAT-fs (loop6): bogus number of reserved sectors [ 1826.735079] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1826.738541] FAT-fs (loop7): unable to read boot sector [ 1826.740688] loop2: detected capacity change from 0 to 39 [ 1826.746894] loop5: detected capacity change from 0 to 39 [ 1826.798727] syz-executor.2: attempt to access beyond end of device [ 1826.798727] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1826.800235] Buffer I/O error on dev loop2, logical block 31, lost async page write 21:48:36 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) 21:48:36 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x146800) 21:48:36 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x1000000, 0x0}, &(0x7f0000000400)="55901e48393d12bbb246b3409e2806c50805982a95ba33e37c1db7a27b65c681b091898df49d24e3c824b8eafdffffffffffffbf86775c3a9f5786bffe1311db1a3fbedb589e7c16e527ac089bcc9d8a70d028f7f7ea3498684c0b7cf5527ce2c7f304d94c3415070d6a184d40573bfed2a2b2ae741c4f0ae1d7269f1adea5fb6831d94720c9d7850dfac898f7b15ae0167f595003ab5af6d87d8c10377e574e127802349b9e853c44128373c413ae2bc905867cd6942e4cc55ebd33f43b5902d7455afd67b60f4967320a1075a4d4570de625c9f02338da9a0bfd4e32b8810e82351e4612409fd4c2444fad3b34c8404bac692b9bc4e1e45704d6fd88e3f29965daa9106008", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:48:36 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1826.977253] loop2: detected capacity change from 0 to 39 [ 1827.004770] syz-executor.2: attempt to access beyond end of device [ 1827.004770] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1827.006581] Buffer I/O error on dev loop2, logical block 31, lost async page write 21:48:36 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) 21:48:36 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x200000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {r1}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) [ 1827.081330] loop5: detected capacity change from 0 to 39 [ 1827.082999] syz-executor.7: attempt to access beyond end of device [ 1827.082999] loop7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1827.098220] FAT-fs (loop7): unable to read boot sector 21:48:36 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x146c00) [ 1827.139664] loop2: detected capacity change from 0 to 39 [ 1827.157822] loop3: detected capacity change from 0 to 39 [ 1827.164130] syz-executor.2: attempt to access beyond end of device [ 1827.164130] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1827.165650] Buffer I/O error on dev loop2, logical block 31, lost async page write [ 1827.191075] syz-executor.5: attempt to access beyond end of device [ 1827.191075] loop5: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1827.192542] Buffer I/O error on dev loop5, logical block 31, lost async page write 21:48:36 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x147400) [ 1827.250304] loop2: detected capacity change from 0 to 39 [ 1827.261762] syz-executor.2: attempt to access beyond end of device [ 1827.261762] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1827.263362] Buffer I/O error on dev loop2, logical block 31, lost async page write [ 1827.467159] loop4: detected capacity change from 0 to 32767 [ 1827.600759] loop4: detected capacity change from 0 to 39 [ 1827.606567] FAT-fs (loop4): Unrecognized mount option "" or missing value 21:48:49 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) 21:48:49 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x2000000, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:48:49 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r3, r2, 0x0, 0xfffffdef) 21:48:49 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) 21:48:49 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x147a00) 21:48:49 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:48:49 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[], 0x24f) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001240)={0x60, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_HE_OBSS_PD={0x44, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0xc}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xc}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x8}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x5}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x2}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x1}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}]}]}, 0x60}}, 0x4f61782a6d793038) ioctl$BTRFS_IOC_ADD_DEV(r3, 0x5000940a, &(0x7f0000000240)={{r4}, "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"}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_mount_image$nfs(&(0x7f00000012c0), &(0x7f0000001300)='./file1\x00', 0x4, 0x8, &(0x7f0000001940)=[{&(0x7f0000001340)="03028489812ed4ccd8285e907680d861ee0c2e1b656cb4de93adc191af44c790f47f468328d96063c5710eec12753d2c32e3cb49bc26cd8bba43a10104aafb8a042ced233c6d8bd2c1500cfb6f1740b69abb9e53bd983423160a3fc18154b41ac746f5be458cade1fe8177288c3843e0e5e81374be48455f0f77c40328895157772d9b722309e3821e93ac295f264a5e1c263b58e9bc515462ea2b36eed1c34abc219092ee991894", 0xa8, 0x80000001}, {&(0x7f0000001400)="40e26356b949c212fb5bc6165f864be4b47c2ec5a3e33b38df545c74a39362ef1c24fd987905928cff55df849320e2bb816135d61afa0822aaecc0ef84a40016a51fde5db739eb7f3a8ee9fc82d255e7440bfbd5cfb51c0e53cdee63", 0x5c, 0x101}, {&(0x7f0000001480)="cc4e0650d12c87ccbca5531c3275892a0ec74f3facd911eeba8042f14d6ff154033c0aaeea86a48660f1978bbb1b32b24f23f8a9624d43d785776802841e4413aa24cbb42c32e1de5e2ff0aa5720440df8d0f875690ea5036d09313b6ca0ee162f07a064fd40daf1eb596a4b376dfbb85003c79edcd84af143ff81dc3205fc2e8284f74ac0065612354d8ddf1ec39977a15d8c4e6d96622676053c3b", 0x9c, 0x8}, {&(0x7f0000001540)="4a87df8a5e7e6ee1f647198db0dcb81eea74c78716968274d3003135af399910910c7bc546b2440c8becdcbe946ccd2182cf23042bd2592c7fff4dd77eaaedf2d1b35739e24b3c6aa2812addb0ef05d32d373edd83b456b7835447139f53faf6d671ee182104491652834e9ceca342ef15eee448cdc53daef24f582b9a88749b396d4da76f60111f1cab5d8853c722841db44bf993703f7ecceb5f522ce998dada0aab318a7f8879ec8c054d18df834d2a45a2b2b93f4c3c1ec5bd8df9eb8b7db90619526c93618878be94794f79f579af5010b6181d1e3d35", 0xd9, 0xfffffffffffffffa}, {&(0x7f0000001640)="9fe083457c472b6f006e72880143d40446301e97c9cf082c33db5ccd9ab768cc10eeea16413e4b32f99375a0ec390c50721418ce3e6456f56a0562d310eb2fe3ed9c51d96d0db00f46233a1832572dbcba6ba10fa4ce6b47e3d6990fe8cfb84cb9bef4c8768e7bbc11", 0x69, 0x3}, {&(0x7f00000016c0)="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", 0xfc, 0x100000000}, {&(0x7f00000017c0)="b2cac9a504f8217aec156edc504cd642d89ec4669388c0df91ec75f67c6434e6436c0b64e7ca2390eb1ce6c6f82b43f0907f52170eaf346fa0b21168f99e49c2dc00bd5cfea41d13967cd3e0333e1d88da1a3868d8b905c711749451e33481219fdbd9d1db6081023fcf5d96e28e6d3e38fd067f434a455c57fbc1029f9a35ac0d85b8c6c0e970105c7538783a87671d0cf2fe337003b09f10a058af2f88075688819657a3f3907cc717bf55e96d389136d1d5b5db5e60a0faf73da4eae14dca03d83f1cd971d5e01b4c33ea2d", 0xcd}, {&(0x7f00000018c0)="4b382399223dee1a4765232264df4481f72e02be1d412aed407e0bdb045eea5186ca5301712ee81de2a747a6655ee065674ae9f2d5412e14cd3226aa19e4c45d1aa4e55b863d8883f41e8b3a", 0x4c, 0xffffffff}], 0x1000000, &(0x7f0000001c40)=ANY=[@ANYBLOB='vfat\x00,vfat\x00,appraise_type=imasig,fowner=', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d4250524d752d4845434b2c0013a03fa5487dd935aaa81f7580b557be5c5f1017853aae8ad400004a6cd57d15a671317a8fa55b435726141bfa0008be00000000000000"]) openat(r7, &(0x7f0000001a80)='./file1\x00', 0x80, 0x100) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000001a00)={0x0, r6, 0x1bbf, 0xffffffffffffffff, 0x7, 0x9}) signalfd4(r6, &(0x7f0000001ac0)={[0x5]}, 0x8, 0x800) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001b40)={0x28, r8, 0x5, 0x3, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x20000012}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x400c1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6, @ANYBLOB="00080000006effffff2f66696c653000"]) write(r2, &(0x7f0000000200)='E', 0x140000) 21:48:49 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e22, 0x80000000, @loopback, 0x7f}}, 0x0, 0x0, 0x1c, 0x0, "9bd7c5c57e2a8845dd2004feacd0455e97ceb4032140604afe6c8192f73d0d22aee145248c5ae2c44320a9455925178ff978ac29c6fcad9d0fcb8f8016ed0d54305dec6dc2d461caad75c143beadde24"}, 0xd8) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000200)=@gcm_128={{}, "0d4b8ac9b8421cbd", "235397b5db4a6e004adab0492506dac4", "8524a7e4"}, 0x28) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17, 0x3d5a5f43}, {0x0, 0x0, 0xefda}], 0x2954b4, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) chdir(&(0x7f00000001c0)='./file2\x00') r2 = openat(r1, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) pipe(&(0x7f0000000000)={0xffffffffffffffff}) openat(r2, &(0x7f0000000240)='./file2\x00', 0x80, 0x4) openat(r1, &(0x7f0000000440)='./file2\x00', 0x0, 0x10) fcntl$setstatus(r1, 0x4, 0x6800) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000002c0)=0xc) syz_open_procfs(r5, &(0x7f0000000300)='net\x00') openat(r4, &(0x7f0000000180)='./file1\x00', 0x1, 0x80) [ 1839.534715] syz-executor.4: attempt to access beyond end of device [ 1839.534715] loop4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1839.535562] FAT-fs (loop4): unable to read boot sector [ 1839.537658] loop5: detected capacity change from 0 to 39 [ 1839.543386] syz-executor.5: attempt to access beyond end of device [ 1839.543386] loop5: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1839.544262] Buffer I/O error on dev loop5, logical block 31, lost async page write [ 1839.561309] loop6: detected capacity change from 0 to 39 [ 1839.568330] FAT-fs (loop6): bogus number of reserved sectors [ 1839.568744] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1839.570713] loop4: detected capacity change from 0 to 264192 [ 1839.571319] nfs: Unknown parameter 'vfat' [ 1839.573044] syz-executor.7: attempt to access beyond end of device [ 1839.573044] loop7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1839.583354] FAT-fs (loop7): unable to read boot sector [ 1839.584912] loop2: detected capacity change from 0 to 39 21:48:49 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) [ 1839.615497] FAT-fs (loop4): Unrecognized mount option "./file1" or missing value [ 1839.624630] loop3: detected capacity change from 0 to 264192 [ 1839.635202] loop4: detected capacity change from 0 to 264192 [ 1839.635800] nfs: Unknown parameter 'vfat' [ 1839.647542] syz-executor.2: attempt to access beyond end of device [ 1839.647542] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1839.649508] Buffer I/O error on dev loop2, logical block 31, lost async page write 21:48:49 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x6000000, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:48:49 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) [ 1839.676071] loop5: detected capacity change from 0 to 39 21:48:49 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366daa02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2801}], 0x83008, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/reserved_size', 0x8000, 0x53) r2 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x17d241, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r3, 0x4, 0x42800) openat(r3, &(0x7f00000000c0)='./file2\x00', 0x258103, 0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xf, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x44}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xf, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x44}}, 0x0) signalfd(r8, &(0x7f0000000180)={[0x40]}, 0x8) tee(r4, r6, 0x0, 0x2) write(r5, &(0x7f0000000200)='E', 0x140000) [ 1839.701882] loop4: detected capacity change from 0 to 40 [ 1839.713808] syz-executor.7: attempt to access beyond end of device [ 1839.713808] loop7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1839.716068] FAT-fs (loop7): unable to read boot sector 21:48:49 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1839.746452] syz-executor.5: attempt to access beyond end of device [ 1839.746452] loop5: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1839.748091] Buffer I/O error on dev loop5, logical block 31, lost async page write [ 1839.768782] loop3: detected capacity change from 0 to 264192 21:48:49 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x14cfff) [ 1839.793451] loop4: detected capacity change from 0 to 40 21:48:49 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) 21:48:49 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) [ 1839.832215] loop2: detected capacity change from 0 to 39 [ 1839.867267] syz-executor.2: attempt to access beyond end of device [ 1839.867267] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1839.868249] Buffer I/O error on dev loop2, logical block 31, lost async page write 21:48:49 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:48:49 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x7000000, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) [ 1839.898438] loop5: detected capacity change from 0 to 39 [ 1839.945979] syz-executor.7: attempt to access beyond end of device [ 1839.945979] loop7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1839.956988] FAT-fs (loop7): unable to read boot sector [ 1839.960145] syz-executor.5: attempt to access beyond end of device [ 1839.960145] loop5: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1839.961737] Buffer I/O error on dev loop5, logical block 31, lost async page write 21:49:02 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:49:02 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x9000000, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:49:02 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xcc, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') pipe(&(0x7f0000000000)={0xffffffffffffffff}) fcntl$setstatus(r1, 0x4, 0x42800) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x6, 0x200}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0xffffff81}}, './file0\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r4, &(0x7f0000000200)='E', 0x140000) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x2, 0x20) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000240)) 21:49:02 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) 21:49:02 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) 21:49:02 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x14d000) 21:49:02 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r3, r2, 0x0, 0xfffffdef) 21:49:03 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xf, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x44}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xf, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x44}}, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYRES32=r3, @ANYRES16=r3], 0x24f) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r4, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x22000, 0xa) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r5, &(0x7f0000000200)='E', 0x140000) [ 1853.293155] loop7: detected capacity change from 0 to 39 [ 1853.294000] loop3: detected capacity change from 0 to 39 [ 1853.298396] FAT-fs (loop7): bogus number of reserved sectors [ 1853.298798] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1853.320963] loop2: detected capacity change from 0 to 39 [ 1853.321212] loop5: detected capacity change from 0 to 39 [ 1853.327816] loop6: detected capacity change from 0 to 39 21:49:03 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1853.344492] FAT-fs (loop6): bogus number of reserved sectors [ 1853.345443] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1853.355239] loop4: detected capacity change from 0 to 39 [ 1853.359525] syz-executor.5: attempt to access beyond end of device [ 1853.359525] loop5: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1853.360371] Buffer I/O error on dev loop5, logical block 31, lost async page write [ 1853.371244] syz-executor.2: attempt to access beyond end of device [ 1853.371244] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1853.373004] Buffer I/O error on dev loop2, logical block 31, lost async page write 21:49:03 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) 21:49:03 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) 21:49:03 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0xd000000, 0x0}, &(0x7f0000000400)="55901e48393d12bbb246b3409e2806c50805982a95ba33e37c1db7a27b65c681b091898df49d24e3c824b8eafdffffffffffffbf86775c3a9f5786bffe1311db1a3fbedb589e7c16e527ac089bcc9d8a70d028f7f7ea3498684c0b7cf5527ce2c7f304d94c3415070d6a184d40573bfed2a2b2ae741c4f0ae1d7269f1adea5fb6831d94720c9d7850dfac898f7b15ae0167f595003ab5af6d87d8c10377e574e127802349b9e853c44128373c413ae2bc905867cd6942e4cc55ebd33f43b5902d7455afd67b60f4967320a1075a4d4570de625c9f02338da9a0bfd4e32b8810e82351e4612409fd4c2444fad3b34c8404bac692b9bc4e1e45704d6fd88e3f29965daa9106008", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:49:03 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) [ 1853.447387] loop3: detected capacity change from 0 to 39 21:49:03 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1853.486997] loop7: detected capacity change from 0 to 39 21:49:03 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xf, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x44}}, 0x0) write$binfmt_aout(r3, &(0x7f0000000240)={{0x107, 0x8, 0x3, 0x269, 0x1ea, 0xd2, 0x12d}, "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", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x1520) [ 1853.504416] FAT-fs (loop7): bogus number of reserved sectors [ 1853.505370] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1853.507685] loop2: detected capacity change from 0 to 39 [ 1853.516084] syz-executor.2: attempt to access beyond end of device [ 1853.516084] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1853.516903] Buffer I/O error on dev loop2, logical block 31, lost async page write 21:49:03 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x14effd) [ 1853.538102] syz-executor.2: attempt to access beyond end of device [ 1853.538102] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1853.539807] Buffer I/O error on dev loop2, logical block 31, lost async page write 21:49:03 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1853.583432] loop5: detected capacity change from 0 to 39 [ 1853.597542] loop4: detected capacity change from 0 to 39 [ 1853.619733] syz-executor.5: attempt to access beyond end of device [ 1853.619733] loop5: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1853.620560] Buffer I/O error on dev loop5, logical block 31, lost async page write 21:49:15 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0xe000000, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:49:15 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x14f000) 21:49:15 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) 21:49:15 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) 21:49:15 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:49:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xf, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x44}}, 0x0) fcntl$getown(r0, 0x9) r2 = clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace(0x10, r2) tkill(r2, 0x33) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)=r2) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x24f) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), &(0x7f0000000340)=0x6, 0x8, 0x0) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x7, 0x3f, 0x40, 0x7, 0x0, 0xd8b, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_config_ext={0xffffffffffffece7, 0x100000000}, 0x28, 0x4, 0x4, 0x1, 0x1, 0x1, 0x2, 0x0, 0xe, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000000, 0x401a012, r4, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='E', 0x140000) 21:49:15 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r3, r2, 0x0, 0xfffffdef) [ 1865.899775] loop5: detected capacity change from 0 to 39 [ 1865.911217] syz-executor.5: attempt to access beyond end of device [ 1865.911217] loop5: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1865.912104] Buffer I/O error on dev loop5, logical block 31, lost async page write 21:49:15 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000080)='./file1\x00') chdir(&(0x7f0000000140)='./file0\x00') syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x4, 0x5, &(0x7f0000000540)=[{&(0x7f0000000240)="70741cddb8c086bb890d23aa345b5f508bac8559481b63d5a7cd3f111a0ad02f9b4ca658393f9f3536c9a751c0865aa130735fd872f3c1fd62d06d285a466de239eeaf0532a930feda5dc3625a81968d1ae23a48dbea36434e8bf4630a2d74c6fe940f9e8a44b25859f7da351039167f36fd4580e669fdf97466e74f750a5a5875782aa80a1495c8ed5b6fd1339bed9e6fc73c64166d57b703396fa24ad2d6a4453f7be835c1aff9bd560b01a337aaff35adc842270fca53f6daae483f", 0xbd, 0x7}, {&(0x7f0000000300)="d593c80f2a8de30e814e39e276a915412ddf149408dfeb11b74efd24abfe108e92ebad7ad90b4044082ad9ebee08101155df31ec47c657fb8dfd4d3da7fb90c03906c7077e95bab975ee42916a77eae15d23395452fc092ead40413416b41db2205a0e02d9e4dda691194a9f04956aabc0a32aef8a231daae161a891dc942272ef84fd72bc21cfc452690d67c82070f41e8c4ca15226b8579e53af9cf3d5254a4201178dafc63ff768909fd1fd32c9ce415397edde0cd61d1c22e47f70645cd257b2f618", 0xc4, 0xba2}, {&(0x7f00000001c0)="8b2b", 0x2, 0x5}, {&(0x7f0000000400)="931a1281eccdb80a43002d7f20b6a5e0b88fe3edbcbe73234019c46be0fb4840eaf727b29c38f82cf405944b59d2d9fa04be2f49d9f5a5ca47d594c38cbf725b27b2a4a1162dbe1449c91a6722725503055db511510cfd1ffd85732905b4a1a55683340e", 0x64, 0x6}, {&(0x7f0000000480)="b0297604dff054563e439b6b455983c11ba6c78334e088412b494a90172894b589d050f5043ed68f944808d925b45af51aaed01d92ebff916172bc9953186d5a1b0a773dc25eff1094768ccec197f5cf4bf6bf236d49be5e277ddce5fe28b5a547d6ae75d1edb2fea43a48782e6e66a5d6be5aeed85a0139c03a1ea38b030ee089cdb6855e97a377c414f2cf3ccec619af58", 0x92, 0x7}], 0x8801, &(0x7f00000005c0)={[{@nolazytime}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x100}}, {@barrier}, {@delalloc}, {@barrier_val={'barrier', 0x3d, 0x9}}], [{@subj_user={'subj_user', 0x3d, 'vfat\x00'}}, {@seclabel}]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) [ 1865.914601] loop7: detected capacity change from 0 to 39 [ 1865.918335] FAT-fs (loop7): bogus number of reserved sectors [ 1865.918738] FAT-fs (loop7): Can't find a valid FAT filesystem 21:49:15 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) [ 1865.964322] loop6: detected capacity change from 0 to 39 [ 1865.974873] FAT-fs (loop6): bogus number of reserved sectors [ 1865.975298] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1865.977814] loop2: detected capacity change from 0 to 39 21:49:15 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) 21:49:15 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1865.992429] loop3: detected capacity change from 0 to 39 [ 1865.996240] loop5: detected capacity change from 0 to 39 [ 1866.006231] loop4: detected capacity change from 0 to 39 [ 1866.018421] FAT-fs (loop4): Unrecognized mount option "Î" or missing value [ 1866.019477] syz-executor.5: attempt to access beyond end of device [ 1866.019477] loop5: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1866.020355] Buffer I/O error on dev loop5, logical block 31, lost async page write [ 1866.021262] syz-executor.2: attempt to access beyond end of device [ 1866.021262] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1866.025065] Buffer I/O error on dev loop2, logical block 31, lost async page write [ 1866.030362] loop7: detected capacity change from 0 to 39 [ 1866.040768] FAT-fs (loop7): bogus number of reserved sectors [ 1866.041523] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1866.092800] loop4: detected capacity change from 0 to 39 [ 1866.101343] FAT-fs (loop4): Unrecognized mount option "Ð" or missing value 21:49:28 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x14f60f) 21:49:28 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:49:28 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) 21:49:28 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) 21:49:28 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0xfffffff, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:49:28 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file0\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x4}}, './file2\x00'}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) r3 = syz_io_uring_complete(0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="28000f0080000000ffff367c8ce4a2cf192bab9a2f00875ae1ffffffff0802110000000802110000000000000000000000000064000001"], 0x44}}, 0x0) fcntl$dupfd(r3, 0x0, r4) r6 = syz_open_dev$usbmon(&(0x7f0000000240), 0x0, 0x42100) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xf, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x44}}, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r7, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="02000000010004000000000002000500", @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRES32, @ANYBLOB="02000200", @ANYRES32=r7, @ANYBLOB="02000500", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32, @ANYBLOB="040003000000000008000100", @ANYRES32=0xee01, @ANYBLOB="000000000000000002000000faffffff37236a29f8cd5aa341071537a73108b46b420cb3ae76f95e6522dac1d8e38199c7fafe000000804ce93b2911e8859ec66da7281186fc8773547d92d6b307d6b9e4cf094fe9c902ee8ba2bd1bd020070378e9286278bce92f740b02bb9d792941c8f9c684d5b42e3414f7e5e6f824c53ac148631bfac71d1b2d7e39aa4042b4d233f37fd68a5d9b650bdc27e50fa17acae2a0abd3ad363edd815afd68073fe54710ce41b1fb08c257de3e9982f6503113fc2c28e3c449"], 0x54, 0x0) ioctl(r6, 0xfffffffa, &(0x7f0000000340)="1bb65d8ea1521a2d05744e0a440b553c965fd62a9604a26b11c7f39f47bd2f5cdf2ec2025e1fd8ebc0d488e4c6df0c9b3ce4c87241eee8642df8e93caab152eb53ce5bc9c31ab2a8194b26f5af62c42db1fd5432222b88d2c7b9f5cc72192bcf5df32c2a7909ea4b210834dfc397f011984b3f44a03d05717d279a52795aa2d7402534d789b19cd728b7cbef36b312b84b4961d983ab2fbf1b1580797b9a755b7fbf4960d30a519d6af37d6a9d9c437b291ef67f4ef937b270e716281fd8c35fbbfc8f25c3390523dc082b0ac7070a72912b81a2b212ae1531123ce86526b0efd36a77117d06e97485b5dc729e8a1381fa8f4eddbdade3f697") 21:49:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x502, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000d, 0x1010, r1, 0x351dc000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x4c, r4, 0x5, 0x70bd27, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xf, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x4c}}, 0x0) sendfile(r3, r0, 0x0, 0x325e) write(r2, &(0x7f0000000200)='E', 0x140000) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x240, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0xe0, r7, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x36}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0xb7, 0xf, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @val={0x6, 0x2, 0x100}, @val={0x5, 0x61, {0xd, 0xea, 0x9, "1d113bb475c8fcb56507d676c3b422a764c5b4895eb2c3efa60e31333650ec35afe45211ba8768b572c1e8d9644f9c3ef42178bcd746d0a571bb254f301729098e197bd52adf68975c5e6425c834736d073e944f999c0a29d0235751f17c"}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x800, 0x3, 0x0, 0x0, {0x98, 0xff, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x800, 0x1, 0x20}}, @void, @val={0x71, 0x7, {0x0, 0x1, 0x1, 0xffffffffffffffff, 0x0, 0x3, 0x8}}, @void}}]]}, 0xe0}}, 0x80) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xf, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x44}}, 0x0) fadvise64(r5, 0x0, 0x59, 0x0) 21:49:28 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r3, r2, 0x0, 0xfffffdef) [ 1878.804578] loop7: detected capacity change from 0 to 39 [ 1878.804695] loop5: detected capacity change from 0 to 39 [ 1878.809238] FAT-fs (loop7): bogus number of reserved sectors [ 1878.809631] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1878.811684] loop2: detected capacity change from 0 to 39 [ 1878.833482] loop3: detected capacity change from 0 to 39 [ 1878.843244] loop6: detected capacity change from 0 to 39 21:49:28 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1878.852645] loop4: detected capacity change from 0 to 39 [ 1878.862350] FAT-fs (loop6): bogus number of reserved sectors [ 1878.863512] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1878.867656] syz-executor.2: attempt to access beyond end of device [ 1878.867656] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1878.869170] Buffer I/O error on dev loop2, logical block 31, lost async page write [ 1878.880484] syz-executor.4: attempt to access beyond end of device [ 1878.880484] loop4: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1878.882101] Buffer I/O error on dev loop4, logical block 31, lost async page write [ 1878.901504] syz-executor.5: attempt to access beyond end of device [ 1878.901504] loop5: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1878.901645] syz-executor.3: attempt to access beyond end of device [ 1878.901645] loop3: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1878.903183] Buffer I/O error on dev loop5, logical block 31, lost async page write [ 1878.904774] Buffer I/O error on dev loop3, logical block 31, lost async page write 21:49:28 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:49:28 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) 21:49:28 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x20000000, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) [ 1879.031345] syz-executor.3: attempt to access beyond end of device [ 1879.031345] loop3: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1879.032977] Buffer I/O error on dev loop3, logical block 31, lost async page write 21:49:28 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x14fdef) 21:49:28 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) 21:49:28 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000240)) write(r2, &(0x7f0000000200)='E', 0x140000) 21:49:28 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f4ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1879.132729] loop7: detected capacity change from 0 to 39 [ 1879.159979] FAT-fs (loop7): bogus number of reserved sectors [ 1879.160744] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1879.171996] loop2: detected capacity change from 0 to 39 [ 1879.216633] syz-executor.2: attempt to access beyond end of device [ 1879.216633] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1879.218213] Buffer I/O error on dev loop2, logical block 31, lost async page write 21:49:28 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file0\x00', 0x101042, 0x0) write(r1, &(0x7f0000000840)="5fffc7c4bcfa6cb92496ac76bdaef61220dd0f9de6752294ac812c40c4f8c3f377733fb667a1da90ad80b7b52884762a96d50abdac7a73441136c2291ddbebaf0ca6b4dfb9b409c7381d6eef0faf55c3f7c7185e1d46f0014dfa768ef05ccf1a9b74e22a3978e6f9c8b15fd41e66eca31fa9a8fd3bcc65a51a8d498d9234d387cd549306c35a27be9cb2", 0x8a) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xf, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x44}}, 0x0) r5 = syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0xffff, 0x5, &(0x7f0000000680)=[{&(0x7f00000002c0)="42e29c1d7ae89f0ee38f97f2f513e55cb73b5d26146f4b907a671dd3cd2b2abd5ef3f4b8fe5aa7b89007d053dd139ccca54f7f030b5eccc9b96c5fc9ecca5ff19c1c5576af740e9af45eb99f6d32da1374fe40327ef8a6b6311ef2ca9af8dc6fd1c055737841762a0167cbf3496278f6ece77c728286d9dc88d1432040405f3c9ef72d", 0x83, 0xeb3}, {&(0x7f0000000380)="f86e06dc1a2366e008889247fe1ea45b81431b9600e4d3ec7780fb0201485f816d043fc973b80289751102dbcb938d5d57121828586489edb9bb0cc59921472b904812b184d749b49462d06bb43128565be072577fef60f5f2285c4a5aec17ad45c47e8974ebda24358fc8", 0x6b, 0xffffffffffffffff}, {&(0x7f0000000400)="6736d55f4540456f88f6ec0d4756052b064564634028be9d9815e14830277be74f23bdc9d2d4b1befab10671f397f0823fdaa6cbb720536268d9c4eefbc3b536b68a9b60d350141c2c88bc3f248ef0decf46e65478b80fe57e37081f22d3eb10a3153dacec5bc85773379c131ff49511d33978cdadf29407952774a78f92048af5b0a46b67229db4e641370f00c08d09827e6cab2b73a7048cd555f0f086a06f293091e5ed5e062f46556608ae017e101424a1aa4ab722952aa0654ec4d034a786ef", 0xc2, 0xff}, {&(0x7f0000000500)="f1c556ffab34a719de2d6f3e684f31e042c4dd756a9f48d5137d2e7cb9e01e04d36e42e566cd9b9f113e60a7c68fcef2504a00c48f0375ebbae785faa8d1c0a68512e815f2e19a01f5960f71cc091e192f4b7ebb71e56e266703ef26fd6d0ce765ee2ee8450b0639250cf130a50e16ef9ba13ca7015900592b155de3ebc0536105f4a3efc9810421dcdee3270a7f1b1b19c366718cfb4a2f85625b48a7d7734aed7bd90f4837b784883c67c3e62b4162c7d17ee789cad1941f863dfa645a723b117334e1838e010e7135218ffd7ed30b97019ddde38032f37b4620d2", 0xdc, 0x7}, {&(0x7f0000000600)="84e1a1a829389b1f7df9fae04e427880c2d3838d6518d44c1fee897402dd44b0b7b119097500733380fd1a9da83c2d644e2d275eceab7dacd6c5d0ba294e49a1f798d07f505ea5c52d9a5d3ca047ee0542ca3ab9131f0c4062ef25113bf78f14747c918d", 0x64, 0x6}], 0x8360e0, &(0x7f0000000700)={[{@gid}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@gid}, {@nr_blocks={'nr_blocks', 0x3d, [0x30, 0x34, 0x70, 0x37, 0x74, 0x32, 0x37]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x4b, 0x25]}}, {@huge_always}, {@nr_blocks={'nr_blocks', 0x3d, [0x25, 0x36, 0x2d, 0x3d, 0x78, 0x65, 0x37, 0x33]}}], [{@dont_hash}, {@euid_gt={'euid>', 0xee00}}, {@obj_type={'obj_type', 0x3d, '-\xf3*!:&\\'}}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@obj_role={'obj_role', 0x3d, 'vfat\x00'}}]}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0xc0406618, &(0x7f0000000800)={@id={0x2, 0x0, @auto="d1ac940afa1f25b1639a26ab19d5ea10"}}) ftruncate(r3, 0x3f) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./file1\x00', 0x40000, 0x0) write(r6, &(0x7f0000000200)='E', 0x140000) [ 1879.229824] loop4: detected capacity change from 0 to 39 [ 1879.269066] loop5: detected capacity change from 0 to 39 21:49:29 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0xf5ffffff, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) [ 1879.299813] loop3: detected capacity change from 0 to 39 21:49:29 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1879.356187] syz-executor.5: attempt to access beyond end of device [ 1879.356187] loop5: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1879.357735] Buffer I/O error on dev loop5, logical block 31, lost async page write 21:49:29 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x14ffcf) 21:49:29 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) [ 1879.522498] loop7: detected capacity change from 0 to 39 [ 1879.540746] loop2: detected capacity change from 0 to 39 [ 1879.541684] FAT-fs (loop7): bogus number of reserved sectors [ 1879.542613] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1879.581282] syz-executor.2: attempt to access beyond end of device [ 1879.581282] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1879.583111] Buffer I/O error on dev loop2, logical block 31, lost async page write 21:49:43 executing program 4: r0 = openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x400682, 0x100, 0x12}, 0x18) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0xad, 0x2, 0x0, 0x61, @empty, @remote, 0x700, 0x80, 0xa3af, 0x1}}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000340)={r1, 0x1, 0x6, @multicast}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000440)=ANY=[], 0x24f) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) rename(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000180)='./file1\x00') mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r4, &(0x7f0000000200)='E', 0x140000) 21:49:43 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) 21:49:43 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:49:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="a11ce15004ceaf27510e8fc751ccc9af6f2faafeb20e673a4be8ae46da9fed049f0f511af286555da255af7e59cbb2c9f29a005e39a5ef543e06bdd00a4099e453f439abf61e5f019368a3b07f75d504e1b997ca2c74d74c9f4f4e425dca0dd3f1402a2e0206"]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) pwrite64(r2, &(0x7f0000000240)="641e76241842ec27a69bbb285b4b42f4c5f4e0bf7d45de6d7c950259d9991544bf4f561f2104917e7cdc71e5bdf412ea82001f032c442a546bf7ef56d5e1cc5d079ce495ab4fef303be87e43999ed85da8901986b8e2d36bcf6e81401af34401962363199a5529ff05c49e2a0e50d7a4c89a0bc05cb9977f5db08bc370a4a060d3c47fa314e2", 0x86, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x2) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xf, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x44}}, 0x0) dup(r3) 21:49:43 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0xf6ffffff, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:49:43 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) 21:49:43 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) fcntl$setstatus(r1, 0x4, 0x42800) mount$bind(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x10000, 0x0) r2 = socket$inet6(0xa, 0x5, 0xfeba) pwrite64(r2, &(0x7f0000000400)="b756fedf96137a7e46693e6feea295923442cd2597c506e6edf3e68bae4b595f2531e00c626593075666bf597de110729fc96aeac8e929675b32f45d9179443d380025e6928ad32b7f2612cc3943313da655e763bebd6f8cbb6a60fbdbf5ee438fb075d2aaae9e45177d597b6cc6c6cb6b2f407764edaa01c5f0aa914e56824178b44a24c39752ecf36ccca64f09c289f3f7e28a60a899920c8b17", 0x9b, 0x5) execveat(r1, &(0x7f0000000280)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000080)='\x00\x97\xeb\xd1k\x8f\x00\x00\x00\x00', &(0x7f0000000180)='vfat\x01', &(0x7f00000001c0)='vfat\x00', &(0x7f0000000240)='vfat\x00', &(0x7f00000000c0)='.\x00'], &(0x7f00000003c0), 0x800) write(r0, &(0x7f0000000200)='E', 0x140000) 21:49:43 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r3, r2, 0x0, 0xfffffdef) [ 1894.053285] loop5: detected capacity change from 0 to 39 [ 1894.054857] loop6: detected capacity change from 0 to 39 [ 1894.062350] loop2: detected capacity change from 0 to 39 [ 1894.065671] loop7: detected capacity change from 0 to 39 [ 1894.073167] FAT-fs (loop6): invalid media value (0x00) [ 1894.073846] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1894.078382] FAT-fs (loop3): Unrecognized mount option "¡áPί'QÇQÌɯo/ªþ²g:Kè®FÚŸíŸQò†U]¢U¯~Y˲Éòš" or missing value [ 1894.083537] loop4: detected capacity change from 0 to 39 [ 1894.092549] syz-executor.5: attempt to access beyond end of device [ 1894.092549] loop5: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1894.094159] Buffer I/O error on dev loop5, logical block 31, lost async page write [ 1894.097694] FAT-fs (loop7): bogus number of reserved sectors [ 1894.098547] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1894.121716] syz-executor.2: attempt to access beyond end of device [ 1894.121716] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1894.123319] Buffer I/O error on dev loop2, logical block 31, lost async page write [ 1894.143975] FAT-fs (loop3): Unrecognized mount option "¡áPί'QÇQÌɯo/ªþ²g:Kè®FÚŸíŸQò†U]¢U¯~Y˲Éòš" or missing value 21:49:43 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0xfdfdffff, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:49:43 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:49:43 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) 21:49:44 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) 21:49:44 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x1, 0x6, &(0x7f0000001380)=[{&(0x7f0000000240)="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", 0x1000, 0x4}, {&(0x7f0000000180)="95130e3d3cc2e2e4c5a1a59b03e2cb5c7fa5873c87924fd17faa286599ac6369f5c2b14656925efaf444c15776967b57eecdd299eddbb6191fc20bf3555275614b0d9991ded4e161f17547bd36f9b2e6443935f614ca6459ce67be69224908a8790d4973db4cfee292df03ccafa701d6e181cea24ca2be9642", 0x79, 0x9}, {&(0x7f0000001240)="98e25a2cc1ae2da5a014bbdd958359075595e5d1112588", 0x17, 0x2}, {&(0x7f0000001280)="57731c3746d091dc7868f5ec34e2aaf24c4f0f603797b16eae02becc6b4965eff4f39f9589b96b2ba943c9f7408e161e11fdebc28070bd8e66087f967b131b22b09d3198338423e33b25abd9e295751425bc", 0x52, 0x81}, {&(0x7f0000001300)="ec2fd74adf0d64efb7131c0a29", 0xd, 0x1}, {&(0x7f0000001340), 0x0, 0x1}], 0x0, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRESOCT=0x0, @ANYRESHEX]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) fcntl$setstatus(r1, 0x4, 0x42800) openat(r1, &(0x7f0000001340)='./file0\x00', 0x82, 0x60) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) 21:49:44 executing program 2: sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x118, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0xb0, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x50, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7fffffff}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xf1f}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8000}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x74f}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xa}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8000}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x200}]}, @NL802154_ATTR_SEC_DEVKEY={0x44, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x40, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1ff}]}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x118}, 0x1, 0x0, 0x0, 0x48804}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') open$dir(&(0x7f00000001c0)='./file1\x00', 0x4000, 0x22) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140000) [ 1894.357853] loop5: detected capacity change from 0 to 39 [ 1894.373720] loop7: detected capacity change from 0 to 39 [ 1894.381035] loop3: detected capacity change from 0 to 8 [ 1894.382330] FAT-fs (loop7): bogus number of reserved sectors [ 1894.383167] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1894.389629] FAT-fs (loop3): Unrecognized mount option "ÿÿ000000000000000000000000xffffffffffffffff" or missing value [ 1894.412345] syz-executor.5: attempt to access beyond end of device [ 1894.412345] loop5: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1894.413953] Buffer I/O error on dev loop5, logical block 31, lost async page write [ 1894.422533] loop2: detected capacity change from 0 to 39 [ 1894.516679] syz-executor.2: attempt to access beyond end of device [ 1894.516679] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1894.518264] Buffer I/O error on dev loop2, logical block 31, lost async page write 21:50:00 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0xfeffffff, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:50:00 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:50:00 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r1 = openat(r0, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xf, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x44}}, 0x0) write$binfmt_aout(r2, &(0x7f0000000440)=ANY=[], 0x24f) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r3, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000380)={0x20, 0x6, 0x2}) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x5c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xffffffffffffff80}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x8}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x800}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040000}, 0x45) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r4, &(0x7f0000000200)='E', 0x140000) 21:50:00 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) stat(&(0x7f0000000080)='./file1\x00', &(0x7f0000000180)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000001240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="00000000000062ba251f93f5764331004083f8de848b732cc5c1e001a0b7d1e4dbc3175f671ade0b8eb38c47fc25de67b830e418b1c19836c7e13218955dec769db2f51426168b8432fde3d88bd42e25b8490ee8f9d3db4c777e8c4015580b7c2b0662f0332f4a"]) write(r1, &(0x7f0000000200)='E', 0x140000) pipe(&(0x7f0000000000)={0xffffffffffffffff}) fcntl$setstatus(r2, 0x4, 0x42800) statx(r2, &(0x7f00000000c0)='./file0\x00', 0x6000, 0x400, &(0x7f0000001300)) openat(r1, &(0x7f00000012c0)='./file1\x00', 0x0, 0x147) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r4, 0x5, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xf, {@wo_ht={{}, {0x9}, @broadcast, @device_b, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x44}}, 0x0) pwrite64(r0, &(0x7f0000000240)="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", 0x1000, 0x971) 21:50:00 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140300) 21:50:00 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) 21:50:00 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000080), &(0x7f00000000c0)='./file1/file0\x00', 0xe, 0x3) lsetxattr$trusted_overlay_redirect(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x8, 0xef52b0f4053b3c82) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xf, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x44}}, 0x0) sendfile(r1, r3, &(0x7f0000000180)=0x401, 0x3f) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r5, &(0x7f0000000200)='E', 0x140000) 21:50:00 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r3, r2, 0x0, 0xfffffdef) [ 1910.852265] loop3: detected capacity change from 0 to 39 [ 1910.853851] loop4: detected capacity change from 0 to 39 [ 1910.855005] loop6: detected capacity change from 0 to 39 [ 1910.859534] loop2: detected capacity change from 0 to 39 [ 1910.871540] FAT-fs (loop6): invalid media value (0x00) [ 1910.872385] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1910.900350] loop7: detected capacity change from 0 to 39 [ 1910.903620] loop5: detected capacity change from 0 to 39 [ 1910.911535] syz-executor.2: attempt to access beyond end of device [ 1910.911535] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1910.913269] Buffer I/O error on dev loop2, logical block 31, lost async page write [ 1910.918472] FAT-fs (loop7): bogus number of reserved sectors [ 1910.919329] FAT-fs (loop7): Can't find a valid FAT filesystem 21:50:00 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1910.957539] syz-executor.5: attempt to access beyond end of device [ 1910.957539] loop5: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1910.959356] Buffer I/O error on dev loop5, logical block 31, lost async page write [ 1910.985981] syz-executor.2: attempt to access beyond end of device [ 1910.985981] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1910.987630] Buffer I/O error on dev loop2, logical block 31, lost async page write 21:50:00 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0xfffffdfd, 0x0}, &(0x7f0000000400)="55901e48393d12bbb246b3409e2806c50805982a95ba33e37c1db7a27b65c681b091898df49d24e3c824b8eafdffffffffffffbf86775c3a9f5786bffe1311db1a3fbedb589e7c16e527ac089bcc9d8a70d028f7f7ea3498684c0b7cf5527ce2c7f304d94c3415070d6a184d40573bfed2a2b2ae741c4f0ae1d7269f1adea5fb6831d94720c9d7850dfac898f7b15ae0167f595003ab5af6d87d8c10377e574e127802349b9e853c44128373c413ae2bc905867cd6942e4cc55ebd33f43b5902d7455afd67b60f4967320a1075a4d4570de625c9f02338da9a0bfd4e32b8810e82351e4612409fd4c2444fad3b34c8404bac692b9bc4e1e45704d6fd88e3f29965daa9106008", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:50:00 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) 21:50:00 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17, 0x4000}, {0x0, 0x0, 0x27ff}], 0x21489c, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000001cc0)='./file0\x00') mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1000006, 0x1010, 0xffffffffffffffff, 0xd96cf000) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000440)=ANY=[], 0x24f) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0/file0\x00', 0x276400, 0x8) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000240)={0x115, 0x0, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ftruncate(0xffffffffffffffff, 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000001c80)='./file0/file0\x00', 0x1c5042, 0x1) write(r2, &(0x7f0000000200)='E', 0x140000) r3 = openat(r2, &(0x7f00000000c0)='./file1\x00', 0x61a001, 0x80) openat(r3, &(0x7f0000000180)='./file0\x00', 0x4900c1, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x200100, 0x1) 21:50:00 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140300) 21:50:00 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000180)="6d6b826f73667fa82b00081b01800495d0b598f8010000", 0x17, 0x3}, {0x0, 0xfffffffffffffdcc, 0x27ff}, {&(0x7f0000000240)="adc8fb61ecb303e17a31518f2301c7153bccea05d13d27f0fa52572a94bfc077d85f733f722d28e5f16348160a96014fefbb9a79b262328394e97a1bae45eea9f0d51db86a1e01b71a9b6f6d61b9d9a5be688fba6e9172a14091d88c3fabbed2067209c89f8e6131170ffde25e5a6069275e4c3e5ae974475152db827480ca11cd5201d15cc84aa0107713eb6f1a52367f4714cef1f59f42aa2cabfeae954f2055f0112fe3592ebfa51a05aaea4546bfd71f64440dd174", 0xb7, 0x4}, {&(0x7f00000003c0)="12bb261f9d47ca31d90d625592da4acb0c2bbd39643a774de2c9164f11e46cac310a753cf5bf407b94637ef46bc8274db57492611a91a7191fab55ce9e330ff714d4702db8ba6fba4a398941c186c37ae67150ab76cc659e35f405909992f455719b0d8096160e9f929b6d2dc93cb984d99a2d216c65bd554632d2fa66c98202c4053715a72b70436ff33b8c0b0fe8dcf989a522cad6d6ad04352cd0a8d693ac6ad50173beef7bb3ab1e32fbb062", 0xae, 0x3f}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) 21:50:00 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) r2 = accept$unix(r1, 0x0, &(0x7f00000000c0)) write(r1, &(0x7f0000000200)='E', 0x140000) r3 = dup2(r1, r2) openat(r3, &(0x7f0000000180)='./file1\x00', 0x8e400, 0x1a4) sendfile(r0, r1, &(0x7f0000000080)=0xfffffffffffffff8, 0x3) 21:50:00 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1911.194696] loop5: detected capacity change from 0 to 39 [ 1911.220199] loop7: detected capacity change from 0 to 39 [ 1911.231627] FAT-fs (loop7): bogus number of reserved sectors [ 1911.232495] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1911.236721] loop4: detected capacity change from 0 to 264192 [ 1911.237442] syz-executor.3: attempt to access beyond end of device [ 1911.237442] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1911.239550] FAT-fs (loop3): unable to read boot sector [ 1911.266230] FAT-fs (loop4): bogus number of reserved sectors [ 1911.267017] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1911.276454] FAT-fs (loop3): Unrecognized mount option "./file1" or missing value [ 1911.310450] syz-executor.5: attempt to access beyond end of device [ 1911.310450] loop5: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1911.312066] Buffer I/O error on dev loop5, logical block 31, lost async page write [ 1911.321425] loop4: detected capacity change from 0 to 264192 [ 1911.339192] FAT-fs (loop4): bogus number of reserved sectors [ 1911.340217] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1911.368815] loop2: detected capacity change from 0 to 39 [ 1911.418462] syz-executor.2: attempt to access beyond end of device [ 1911.418462] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1911.420057] Buffer I/O error on dev loop2, logical block 31, lost async page write [ 1911.452458] syz-executor.2: attempt to access beyond end of device [ 1911.452458] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1911.454008] Buffer I/O error on dev loop2, logical block 31, lost async page write 21:50:14 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) pipe(&(0x7f0000000000)={0xffffffffffffffff}) fcntl$setstatus(r2, 0x4, 0x42800) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, @out_args}, './file1\x00'}) openat(r1, &(0x7f00000000c0)='./file1/file0\x00', 0x9001, 0x12) 21:50:14 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r3, r2, 0x0, 0xfffffdef) 21:50:14 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) 21:50:14 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xf, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x44}}, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000180)={0xfffffffd, 0x0, &(0x7f00000000c0)=[r1]}, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa11202, 0xe) 21:50:14 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:50:14 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140300) 21:50:14 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[], 0x24f) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r2, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f00000000c0)) creat(&(0x7f0000000580)='./file1\x00', 0x9) bind$unix(r1, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) r4 = syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0/file0\x00', 0x37d, 0x2, &(0x7f0000000440)=[{&(0x7f00000002c0)="767034d50faf1d3e68ae08f31ed5c20d69fd8555f426241d3a91cc0623a07c7c4285dc883f52ffb9d2e2ce11843200e149775b0000667651e00408000000b8f9401978e12ec0ffffffffffffff26e411ab08062c07fc8f6cdffb8ce8c4f0bee771b3c22b7336c7eee9bdb62f84d508a304e1359bef30de1596ed", 0x7a, 0x6}, {&(0x7f0000000340)="8d16a6b64fd3b63aa5c5a4e723d2f5f0f13b5888108ca77a64b8068c75a4133f24ec78680343d693422e8369d93af7744f7c1e03192dd21d4608af528fecfd28b73a527c20f8752d179e84d0f36362cab3362dc1f827d0c73112423e4b1264c114f35e09bb9882f3e2b49b8082da943d0c2053921fbceee673edd0bd10d706eb255ebdb40fa100712ac9193de9f38fa61d533f3b3269d055ac0abca7ebe10cb819df3fcd8e1ba40c3f0ef3afc29948cd2ceabec511a0231a3087de2dbcc83afa6f5f5266043fca7127399bb253b424a606", 0xd1, 0xff}], 0x2, &(0x7f0000000480)={[{@fat=@debug}, {}], [{@fsname={'fsname', 0x3d, 'vfat\x00'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@pcr={'pcr', 0x3d, 0x40}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x82'}}, {@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@euid_lt={'euid<', 0xee00}}, {@dont_appraise}, {@mask={'mask', 0x3d, '^MAY_READ'}}]}) openat(r4, &(0x7f0000000540)='./file0\x00', 0x40000, 0x44) 21:50:14 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0xffffff0f, 0x0}, &(0x7f0000000400)="55901e48393d12bbb246b3409e2806c50805982a95ba33e37c1db7a27b65c681b091898df49d24e3c824b8eafdffffffffffffbf86775c3a9f5786bffe1311db1a3fbedb589e7c16e527ac089bcc9d8a70d028f7f7ea3498684c0b7cf5527ce2c7f304d94c3415070d6a184d40573bfed2a2b2ae741c4f0ae1d7269f1adea5fb6831d94720c9d7850dfac898f7b15ae0167f595003ab5af6d87d8c10377e574e127802349b9e853c44128373c413ae2bc905867cd6942e4cc55ebd33f43b5902d7455afd67b60f4967320a1075a4d4570de625c9f02338da9a0bfd4e32b8810e82351e4612409fd4c2444fad3b34c8404bac692b9bc4e1e45704d6fd88e3f29965daa9106008", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) [ 1925.256565] loop3: detected capacity change from 0 to 39 [ 1925.279363] loop7: detected capacity change from 0 to 39 [ 1925.283139] FAT-fs (loop7): bogus number of reserved sectors [ 1925.283526] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1925.285446] syz-executor.3: attempt to access beyond end of device [ 1925.285446] loop3: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1925.286298] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 1925.314295] loop4: detected capacity change from 0 to 39 [ 1925.326690] loop2: detected capacity change from 0 to 39 [ 1925.332096] loop6: detected capacity change from 0 to 39 [ 1925.333476] loop5: detected capacity change from 0 to 39 [ 1925.348661] syz-executor.4: attempt to access beyond end of device [ 1925.348661] loop4: rw=2049, sector=40, nr_sectors = 8 limit=39 [ 1925.352011] syz-executor.5: attempt to access beyond end of device [ 1925.352011] loop5: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1925.353734] Buffer I/O error on dev loop5, logical block 31, lost async page write [ 1925.358173] syz-executor.2: attempt to access beyond end of device [ 1925.358173] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1925.359120] Buffer I/O error on dev loop2, logical block 31, lost async page write [ 1925.368135] FAT-fs (loop6): invalid media value (0x00) [ 1925.368508] FAT-fs (loop6): Can't find a valid FAT filesystem 21:50:15 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000080)=0x4) write(r2, &(0x7f0000000200)='E', 0x140000) [ 1925.374403] syz-executor.4: attempt to access beyond end of device [ 1925.374403] loop4: rw=2049, sector=40, nr_sectors = 4 limit=39 [ 1925.375293] Buffer I/O error on dev loop4, logical block 10, lost async page write 21:50:15 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) [ 1925.401904] syz-executor.2: attempt to access beyond end of device [ 1925.401904] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1925.403665] Buffer I/O error on dev loop2, logical block 31, lost async page write 21:50:15 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0xfffffff5, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) [ 1925.436097] loop3: detected capacity change from 0 to 39 21:50:15 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) 21:50:15 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1925.474114] syz-executor.3: attempt to access beyond end of device [ 1925.474114] loop3: rw=0, sector=40, nr_sectors = 4 limit=39 [ 1925.475816] loop7: detected capacity change from 0 to 39 [ 1925.491452] FAT-fs (loop7): invalid media value (0x00) [ 1925.491818] FAT-fs (loop7): Can't find a valid FAT filesystem 21:50:15 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x20, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') unlink(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140000) [ 1925.540593] loop2: detected capacity change from 0 to 39 [ 1925.542179] loop5: detected capacity change from 0 to 39 21:50:15 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) pipe(&(0x7f0000000000)={0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x42800) openat(r0, &(0x7f0000000180)='./file0\x00', 0x80000, 0x0) chdir(&(0x7f0000000140)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[], 0x24f) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r2, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f00000000c0)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) 21:50:15 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000040)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='E', 0x140000) [ 1925.574171] loop2: detected capacity change from 0 to 39 [ 1925.660743] loop4: detected capacity change from 0 to 39 [ 1925.673730] loop3: detected capacity change from 0 to 39 21:50:29 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0xfffffff6, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:50:29 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) 21:50:29 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r3, r2, 0x0, 0xfffffdef) 21:50:29 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYRES64, @ANYRES32=r0, @ANYBLOB="8f21f5ecfe1ee433098c08e1ca84e34f906d393c49facfa4b5ff36b2e3688c8df7b49def0282"], 0x24f) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) 21:50:29 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) 21:50:29 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x94200, 0x0) 21:50:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xf, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) 21:50:29 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c020000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1940.276124] loop7: detected capacity change from 0 to 39 [ 1940.277674] loop6: detected capacity change from 0 to 39 [ 1940.283726] loop4: detected capacity change from 0 to 39 [ 1940.289570] loop5: detected capacity change from 0 to 39 [ 1940.295848] FAT-fs (loop7): invalid media value (0x00) [ 1940.296686] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1940.299199] FAT-fs (loop6): invalid media value (0x00) [ 1940.300039] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1940.323334] loop2: detected capacity change from 0 to 39 [ 1940.328398] loop3: detected capacity change from 0 to 39 21:50:30 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:50:30 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0xfffffffe, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) [ 1940.406688] syz-executor.2: attempt to access beyond end of device [ 1940.406688] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1940.408213] Buffer I/O error on dev loop2, logical block 31, lost async page write 21:50:30 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) 21:50:30 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) [ 1940.514823] loop5: detected capacity change from 0 to 39 21:50:30 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='E', 0x140000) 21:50:30 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:50:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x2) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) tkill(0x0, 0x33) r2 = clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace(0x10, r2) tkill(r2, 0x33) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000cc0001000000000008000300", @ANYRES32=0x0, @ANYBLOB="28000f0080000000ffffffffffff0802110000000802110000000000000000000000000064000000"], 0x44}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) fcntl$setstatus(r5, 0x4, 0x42800) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="030300000000000000ff0e0000001420003608000300", @ANYRES32=0x0, @ANYBLOB="54000f0080000000ffffffffffff080211000000080211000000f00100000000000000006400000000060202020202022d1a000400080000000000000005000700050000000004ff7f0000207206030303030303"], 0x70}}, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r2, 0x7, r3, &(0x7f0000000080)={r5, r6, 0xffffff96}) [ 1940.552501] loop7: detected capacity change from 0 to 39 [ 1940.557100] FAT-fs (loop7): invalid media value (0x00) [ 1940.557839] FAT-fs (loop7): Can't find a valid FAT filesystem 21:50:30 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x844, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) mount_setattr(r0, &(0x7f0000000080)='./file2\x00', 0x1800, &(0x7f0000000180)={0xf3, 0x1000fa, 0x60000, {r1}}, 0x20) openat(r0, &(0x7f00000001c0)='./file2\x00', 0x8000, 0x6c342ff6e12a5602) write(r0, &(0x7f0000000200)='E', 0x140000) [ 1940.614811] loop3: detected capacity change from 0 to 39 [ 1940.616896] loop4: detected capacity change from 0 to 39 21:50:30 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0xffffffff, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:50:30 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1940.718336] loop2: detected capacity change from 0 to 39 [ 1940.773731] syz-executor.2: attempt to access beyond end of device [ 1940.773731] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1940.775050] Buffer I/O error on dev loop2, logical block 31, lost async page write [ 1940.805907] syz-executor.2: attempt to access beyond end of device [ 1940.805907] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1940.807798] Buffer I/O error on dev loop2, logical block 31, lost async page write 21:50:43 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:50:43 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) 21:50:43 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) 21:50:43 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:50:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) readahead(0xffffffffffffffff, 0xb9, 0x80000000) openat(r0, &(0x7f0000000080)='./file1\x00', 0x102, 0x82) 21:50:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x418, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x401}, @NL80211_ATTR_TX_RATES={0x25c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x9, 0x0, 0x101, 0x8, 0x969f, 0x7, 0xffff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x94, 0x0, 0x8, 0x6, 0x3ff, 0x7, 0x146, 0x5]}}]}, @NL80211_BAND_60GHZ={0xfc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x43, 0x2, [{0x0, 0x3}, {0x5, 0x3}, {}, {0x1, 0x3}, {0x6, 0x7}, {0x7, 0x5}, {0x1, 0x4}, {0x7, 0x5}, {0x2}, {0x6, 0x3}, {0x1, 0x4}, {0x6}, {0x5, 0x7}, {0x4, 0x1}, {0x4}, {0x5, 0x3}, {}, {0x4, 0x2}, {0x0, 0x9}, {0x0, 0x8}, {0x4, 0x2}, {0x3, 0x2}, {0x3, 0x2}, {0x0, 0x8}, {0x1, 0xa}, {0x4, 0x8}, {0x6, 0x6}, {0x6, 0x9}, {0x6, 0x9}, {0x7, 0x8}, {0x0, 0x3}, {0x0, 0x2}, {0x2, 0xa}, {0x7, 0xa}, {0x5, 0x5}, {0x7, 0x6}, {0x4, 0x9}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x2, 0x8}, {0x5, 0x7}, {0x5, 0x2}, {0x6, 0x5}, {0x3, 0x2}, {0x4, 0x8}, {0x1, 0x8}, {0x2, 0x6}, {0x6, 0x2}, {0x0, 0x6}, {}, {0x2, 0x4}, {0x2, 0x7}, {0x0, 0x4}, {0x4, 0x6}, {0x1, 0x4}, {0x1, 0x3}, {0x5, 0x1}, {0x3, 0x4}, {0x4, 0x9}, {0x1, 0x7}, {0x3, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x5, 0x3, 0x4, 0x3c, 0x8000, 0x7, 0x7]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x12, 0x1, 0x48, 0x5, 0xb, 0x60, 0x12, 0xb, 0x3, 0x12, 0x0, 0x36, 0x16, 0x1, 0x1b, 0x1b, 0x3, 0x18, 0x48, 0x4, 0x18, 0x6c, 0x1, 0x1, 0x6, 0x24, 0x0, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xd920, 0x7, 0x2c, 0x800, 0x7ff, 0x20, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x9, 0x7ff, 0x3, 0x6, 0x9, 0x8, 0xfff]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x3}, {0x3, 0x3}, {0x6, 0xa}, {0x5, 0x2}, {0x1, 0x2}, {0x4, 0x2}, {0x5, 0x2}, {0x3, 0x3}, {0x6, 0x4}, {0x4, 0x3}, {0x1, 0xa}, {0x7, 0x5}, {0x2, 0xa}, {0x6, 0x6}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0x5}, {0x4, 0x7}, {0x0, 0x9}, {0x1, 0x2}, {0x7, 0x2}, {0x4, 0x3}, {0x0, 0x4}, {0x2}, {0x0, 0x7}, {0x1, 0x6}, {0x0, 0x2}, {0x6, 0x4}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x6}, {0x7, 0x8}, {0x6, 0x7}, {0x3, 0x8}, {0x0, 0x5}, {0x1, 0x6}, {0x6, 0x3}, {0x7, 0x5}, {0x4, 0x5}, {0x1}, {0x1, 0x9}, {0x2, 0x4}, {0x7}, {0x2, 0x7}, {0x6, 0x2}, {0x6, 0x5}, {0x4, 0x7}, {0x6, 0x3}, {0x1, 0x2}, {0x1, 0x9}, {0x2}, {0x7, 0x8}, {0x5, 0x1}, {0x4, 0x5}]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x12, 0x5, 0x30, 0x36, 0x6b, 0x1, 0x5c, 0x1, 0x48, 0x2, 0x9, 0x48, 0x24, 0x9, 0x9, 0x60, 0x18, 0x48, 0x12, 0x6c, 0x6, 0x6c, 0x48]}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x14, 0x2, [{0x6, 0xa}, {0x0, 0x3}, {0x7, 0x6}, {0x2, 0x2}, {0x6, 0x5}, {0x0, 0x6}, {0x4, 0x9}, {0x0, 0x4}, {0x4, 0x8}, {0x0, 0x9}, {0x5, 0x8}, {0x1, 0x7}, {0x2, 0x2}, {0x4, 0x9}, {0x2, 0x9}, {0x2}]}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x2, 0x2}, {0x5}, {0x0, 0x4}, {0x5, 0x5}, {0x5, 0xa}, {0x1}, {0x3, 0x1}, {0x5, 0x4}, {0x5, 0x8}, {0x0, 0x1}, {0x7}, {0x4, 0x6}, {0x4, 0x7}, {0x3, 0x3}, {0x3, 0x8}, {0x0, 0x6}, {0x1, 0x3}, {0x0, 0x1}, {0x4, 0x3}, {0x6, 0x3}, {0x1, 0x8}, {0x2, 0x8}, {0x6, 0x6}, {0x5, 0x1}, {0x5, 0x9}, {0x0, 0x1}, {0x0, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x4, 0x8}, {0x0, 0x3}, {0x2, 0x5}, {0x2, 0x7}, {0x3, 0x9}, {0x4, 0x8}, {0x5, 0x8}, {0x5, 0x2}, {0x6, 0x8}, {0x7, 0x2}]}]}, @NL80211_BAND_5GHZ={0xc8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7, 0x22, 0x8, 0x40, 0x9, 0x5, 0x7ff]}}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x4, 0x5}, {0x0, 0x5}, {0x0, 0x8}, {0x4, 0xa}, {0x6, 0x3}, {0x1, 0x1}, {0x7, 0xa}, {0x7, 0x4}, {0x6, 0x5}, {0x6, 0x3}, {0x1, 0x8}, {0x2, 0xa}, {0x7, 0x9}, {0x5, 0x4}, {0x3}, {0x7, 0x4}, {0x3, 0x9}, {0x0, 0x2}, {0x7, 0x4}, {0x7, 0x3}, {0x7, 0x3}, {0x2, 0x3}, {0x0, 0x4}, {0x5, 0x5}, {0x4, 0x5}, {0x5, 0x4}, {0x3, 0x3}, {0x2, 0x3}, {0x2, 0x4}, {0x0, 0x5}, {0x2, 0x1}, {0x7, 0x5}, {0x2}, {0x0, 0x5}, {0x7, 0x6}, {0x3, 0xa}, {0x5, 0x3}, {0x4, 0x7}, {0x2, 0x3}, {}, {0x2, 0x8}, {0x6, 0xa}, {0x3, 0x1}, {0x7, 0x6}, {0x2, 0x1}, {0x3, 0x2}, {0x6, 0x6}, {0x0, 0x5}, {0x4}, {0x6, 0x3}, {0x7, 0x6}, {0x0, 0x1}, {0x1, 0x7}, {0x7, 0x2}, {0x2, 0x7}, {0x6, 0x6}, {0x5, 0x1}, {0x2, 0xa}, {0x7, 0x1}, {0x3, 0x8}, {0x0, 0x7}, {0x5, 0x5}, {0x4, 0x9}, {0x1, 0x8}, {0x2, 0x1}, {0x0, 0x5}, {}, {0x5, 0x1}, {0x4, 0x3}, {0x6, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7912, 0x3, 0x5, 0x9, 0xfffb, 0x7, 0x2]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x1b, 0xc, 0x3, 0x4, 0x9, 0xc, 0x6d, 0xc, 0x0, 0x60, 0x30, 0x2, 0x2, 0x9, 0x36, 0x4, 0x1, 0x16, 0x12, 0x9, 0x24, 0x48, 0x6, 0x18]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x5, 0xb, 0x3]}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x6, 0x9}, {0x4, 0xa}, {0x1}, {0x5, 0xa}, {0x5, 0x7}, {0x6, 0x5}, {0x5, 0x3}, {0x5}, {0x0, 0x7}, {0x7, 0x9}, {0x5, 0x9}, {0x2, 0xa}, {0x2, 0x9}, {0x1, 0x4}, {0x2, 0x1}, {0x5, 0x4}, {0x5, 0x8}, {0x4, 0x1}, {0x6}, {0x2, 0x4}, {0x7, 0x2}, {0x1}, {0x5, 0x9}, {0x6, 0x1}, {0x4, 0x6}, {0x0, 0x5}, {0x0, 0x8}, {0x5, 0x8}, {0x1, 0x2}, {0x0, 0x5}, {0x2, 0x8}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}]}, @beacon=[@NL80211_ATTR_IE_PROBE_RESP={0xc, 0x7f, [@gcr_ga={0xbd, 0x6, @broadcast}]}, @NL80211_ATTR_IE={0xce, 0x2a, [@fast_bss_trans={0x37, 0xc0, {0x1f, 0x6, "0e676ed7784aedc4fdab6ba04f023866", "970fb3ad8c509072c68739bc80254623a6f9760ff966355096c7dbc17e79cc69", "274211d30bdef84fef006cd04d62b2eb04f60b6752971c2987680f612a35a354", [{0x3, 0x13, "625d4fa97a3438b113857a3417211653644ad1"}, {0x3, 0x13, "218904e4b3f3ddc5962d3910c1cfac0333a30b"}, {0x3, 0x1b, "f7350167f7c49d919028ae4b8144b3adfbc9bfd5493fae5dc70a86"}, {0x3, 0x4, "130e4527"}, {0x7, 0x14, "cf89397d1473246b1b76d79eca5d97d646f78a72"}, {0x1, 0x9, "0a76c02a506953f450"}]}}, @mesh_chsw={0x76, 0x6, {0x4, 0x0, 0x37, 0x6}}]}, @NL80211_ATTR_FTM_RESPONDER={0xa0, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x33, 0x2, "17d992a9c7e65aaa52c7eba2266490fa15ffc72100ad1b853aa3d27a1f961ffffd12fc4834ddbde29ef22002848eee"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x63, 0x3, "4cd6496ed8c0762e8d9be171165861fd15df1cbead25e424259d8782e24c5daf90c8f4d7be4cf824b24442e77ff2767e551e2625fae18257f6c3260511fb1054b6a19a72dfa153e214dea1cf9b28a816c307397c9d3c600b05047abf1c4229"}]}], @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x5}]}, 0x418}}, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f00000000c0)={0xfffffffffffffffc, 0x2, 0x6, 0xfff, 0x0, [0x6, 0x4, 0x3f, 0x3]}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000440)=ANY=[], 0x24f) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r4, &(0x7f0000000200)='E', 0x140000) 21:50:43 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f00000054c0)='./file1\x00') mkdir(&(0x7f0000005640)='./file2\x00', 0x1f2) getpeername$unix(0xffffffffffffffff, &(0x7f0000005400)=@abs, &(0x7f0000005480)=0x6e) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000005200)=[{{&(0x7f0000000080)=@isdn={0x22, 0x80, 0x9, 0x4, 0x7f}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000240)="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", 0xfe}, {&(0x7f0000000180)="c0a8acb7572d841988d53d68cee950779d4816dd030d7fb1f9501c1009", 0x1d}, {&(0x7f0000000340)="e3395d6c2316df26de80c7536effb7f2669ae55cddab9c8e6cba7365a23c266816167173d42faf8ec5146f601aa2e236acd492cfeb9a90b4873f829f0788ba814ad503da7cc15c8c47b4df2f9b53d98dda17ba26301ecc72c1dc10237ab13c1d39f0782b294952f999fcd4e7b5c02a7919f1860223c8e6fcdfb24b4e7ec975d06f4157", 0x83}, {&(0x7f0000000400)="587590d4beee8227f512d627b167db039789f311523c7a62bbbeb8444a06c821f183f3923e685e69f4a532d0cbe86e4a49a002cc253d2f4eac9c7aee610107d6055096e60b46384057e12bc9ca6c23f07471b627845615b92f75fa99b64b40e78a96e35bed192dbc9d701ed4895bbfc4cda074be56d8dd840866853759a00e8387f7fd478497eaaf4aaf33f73015ff4842b6a9880ae4f60871e62be96493774a307c76cdec0402388efcca27e554fca9afd808893a86c41914e6fc6fa26c150d243c1f7888c63a26a1a5926b54e0d95dab30537bb905c099b8c94ce08818bcc6a5", 0xe1}, {&(0x7f00000001c0)="45c9e068b747", 0x6}], 0x5, &(0x7f0000000580)=[@mark={{0x14, 0x1, 0x24, 0x10001}}], 0x18}}, {{&(0x7f00000005c0)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000640)="f1385513cee010226b5e6c983a6e802fcd66cb0931e34371e1f5d58c687027cee2b0aec5d012fb3bf1ebb22e5070cad1678a89b28bc42745bcf565a29c8a7fdaebdea5276fc6a23454ef192a98ea2d4eb29494bc1b64f52563ce7cb382e4763aa484ed642c86a7389741abcfbcfc4206d7604a977d4163e396f22afc2da428e7070f8e0ae5ded7cc5fad02b1fcde82776610a3", 0x93}, {&(0x7f0000000700)="1bd2f7d82fa4d955757bab3c9e810e6c4698e34ed15cfe6fe0a27360d565564fa577de3c8180c237ad46f108701590b22f134ca67994bf1e8c3c8992398ba984dff0d878f7b88389b11acf2804788c1e64313c66c45955117b416ce80507d0cd5e0b61d9b7d277d35faa3e3b9edb94c2de882190869e07f4bfda32f9c0109418b613fce720c9258222605e69b9a4960bfafe971114a1fe2a4d37f15d61ebe3090274671b340428e96d9eb81d4bb32ca5", 0xb0}, {&(0x7f00000007c0)="e0bd4b9e7b3ccb2869a81bf8de07faf664d072a028bfec3d34bb89cef18ba68c3fd2143d76f5c8761ee6a922e4caf23e60629c52b08e806e35ca3f3daf112fcb043d739d30714e25", 0x48}, {&(0x7f0000000840)="a760cc38ce6684080293c48ebe9e51fbfacd79e63e1ac8a415907cf9d1c1f6cef70806fde324355cf3e2cacdbca01c73d574232ed39e014f2137", 0x3a}, {&(0x7f0000000880)="cf8d787b15e989b35b29018cbc6511d37341833bdd7b0f05d7c1396f2d12", 0x1e}], 0x5, &(0x7f0000000940)=[@timestamping={{0x14, 0x1, 0x25, 0xfff}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffffa}}], 0x30}}, {{&(0x7f0000000980)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000a00)="8366ab805d9a300254b3c2913181f4369eabdb276d48a06d1f61b626840af4d545cbfa79fedc651e03716ee3ec831753d8b962cc319300d2c518327df707fb8a04424f62c78d9bb27c61be22f65b9a56332bccf60f2e047e7d76fb0801", 0x5d}, {&(0x7f0000000a80)="fd0be120578c52083eed6d12636c9c61cc3b856544d87824e3b6bb1e20bbddf18eb20c1d81f60bf7e8550364f4ce2431a6dafd1c0a5c2dcb5dce0049942027e7911cf32fe17723525b6c5feff2ddb4bbce4b898cca207dbe2623549e409d3f8ef3f158", 0x63}], 0x2, &(0x7f0000000b40)=[@mark={{0x14, 0x1, 0x24, 0x1f}}, @timestamping={{0x14, 0x1, 0x25, 0x1000}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}], 0x60}}, {{&(0x7f0000000bc0)=@l2tp6={0xa, 0x0, 0x8, @local, 0xfffffff8, 0x3}, 0x80, &(0x7f0000002200)=[{&(0x7f0000000c40)="3ee2a54feb179710af63b56e52c71cd377e3a912d480e2de459e59c64fa2a017e565f1a47e276ecb5dc96764f6dad9f9c9e695165c83eb8ec955ac94cd0469978f8fd31528e9dbac", 0x48}, {&(0x7f0000000cc0)="0e9d7b06d995e6918859e1b35c7b16ae0c05c93a8d10239daa17ec20f53b1f8cd04227c48f118fb11cfd5a792c228d0480b6f60cadd5f86711fa7eb002cb66d29c3635da10c7c0be9287d612f6b69c79bb3a1456ab14fbb9123caee27d44563ae833c6d5e655ac08448a85f85a3145b21b1eacdfdc295eeb957e1d87cf0cc17f54413f646849071f907ffda12b46a1e7b656d7f7467648c66823be5f71385f6698443371e880d3238bb0aebbbf10b9a59ef26a737286b0ad3cee8eb0da922c0bdd7a7fef6c3f47e8a3330f4df304912e822bf3e48fa9ec07d8e6728131", 0xdd}, {&(0x7f0000000dc0)="5de51e301993fb4e7b57da5070571a2e79376a1b5c34a662a41c344524fdf66768939435dff646989cdbdc99d082f9ab45550b9d9ade31dcd4e8b7641a08fc73483d081ded4fa1551e9f4e8accd0638dd471b04726463813bc10d3a044279b8be0e6d4f97d1bb8e5eb284e566a659897659d08faf34344b8c68e11da554518640757ec90b76a36f114ad93e20d493b6569ecb2", 0x93}, {&(0x7f0000000e80)="5ead7b9cee82033b529c3f6e27eacc493bc15731e0eac255710557cc66231b246727da6e708c54376323dec14ebf4d49db3d948d5464396f546ac3c610913fe9ca6843b39840d7b2409a1cc145c5e0d275a28bf1a95cfb631ef62c5a39a512c1de8886e2c1033e4c3a7ad0b0322c7d43e243c1f9e30db126499c917193f7a46fe6dd96b20ee87650674ffa9baff6ff908a56d58c51b0e0b4e29f256132dc74c29b9583b473ed49343768fe0d71df147d8744b054ca95aab862c3c2ebdd2003534146d3450e19e89538c784ae4aa9100ddb4e7040fc616999d33059e4506c880deece0ed404fb833542a635e1a3e290d9d4cc12a8416e566bf42569d0927aa0db08e00900cd891d2dd50ca891b04155db937babd6151aa5903fd352357ad4bfc5b14dbcd5e2e3b528270d3b8da776eadbe2faafb1806642f1b11f5ef218fad34802ee7a426fd1a98faa3c9e899bf7e6ecf20ef3c9acf2721c655bb9c9a022ee3ebd0b21a9787968bde272386bbea1ee1ae06f078483ed4ae034f1d0a7a878a2c60a4a667f585545108ce1e1c4e37b777893728e456dcdf82ff60542650e217caf3ec744633c2c420cbfbf1aa4519e1cbbab3ec8930166f2da62ba93f1f1008800845f2a23d6fc94284cc0a9e01cf6b3fea1bc9eae967e7003c4b2ffeecaa7ddb76f806ba485215f60013cc3ed1a2f62cea58ba9eb6ed57e7de188fb407e3dc0c1b6a8b5c90d5c7753de3d6272ee7fc942302680578b9a5a81bbaa7d58d8d7888eef508c7e775a42411c20ba272ff8f078aa9c750b2c4c484dc08dab44879aba2e94a889c08cd6ac5b55b9774a82cf65093a179b0e257d1be5f4132950cde7d9459a6eabe14baf2ec5b9a5cae1b36c6b2a00153c01933bcedac23a3f9e8fd9c55642bbdd7811d825ae0412b31f67f6c17d049ed7bbe492c49a7b4fa7f255236542e0d7262686448038ca13c6882aeef4f251c9b9eec0388f6003ec1a534a6460fa4331218a9740b32d55326bc51d6f446a4446590e308723ddc5dd313cd8c0669adc386eac960ccfd852bf4daee5c937670e450dbd5566d541ff269df5ca8ef2fe64293f1cd8b709b5e5df956d2093bb470566fd805eb714d916a1284092f1d20b89046c8e70743092483f58c801e8e463dd5f9088e0e0f4157175050a94b706de46b8707a06b0828bf4f56f4f2618738efba650cb2fe341a081bf8909c523aa6dea4318699742abf1f19ca4d99223c36dc04644c0fcf1406e990cdb44b573311d78bceb1ee44864f6e8fec7e61579b5a851f16c5ede53cad6ce6204cb1a3b3ec46b7ee1478c8d216fd719d943ea3c0f5750d3a0d219f861e69484dc66aa192db1fd7372326729f572d33b58d9f5397e406a4bb6a577e121e81e25da143dc0364eb5abc5b2637698afbfa7a114b84f38f90c6a7edb798f3cc5dd95245cd06278762f52a84ae99873950019caee94e6499d3d2dbd4083cb926c7078d0876da89440a7308ad37df2e06099bf81453746f074c827b2020de177f444482e236fde9f54e4480416a93f40f55234631f3af686ab69f0a3df4f842d6313f036ed8de7da2a37b06f5d27a63620dee43178898f66db946b9aa303f1c3669b6ff57cb11ab1b2be4cc4bb1b3e325c8e53340a3ca5ebdcb9edc8176b2c95248393434f80cfa74a50dab2f9348baf1f9045ad879b7f4579dc068d06c5a87216820069a72bc481aac5fbb4ec8148bd1b8b5e658fd316442ec73a74056d3603b8ad12dae7b3ba8fc1fb47c3c77d9c8f25fad245410aff3d3aed8d66aa44281013ff6699f7371d9219d133910420f9c706d9a41d4e4bc454ca3fe841698279f877811b6d1552f5e18dcf5eb8548137f8e79fdb3eeef6b212d886003ebb5aa0d0a53dcbfb59069de0cdad36d3490fddb9cab492f613eda746ad99f1055a7c7e80401bef2a2dad2cf5ebd5a90d7c97593a1242a85d5681492fdf913431cd153b7f4cc10624c36a5c9aefdf00fa0b1833840ca6f437f665967e8f124ed4a59c0f54a3d2935dc8c1428432942a68cec7edb88a19f2e36a68f45da3f1a1a5e1dc762c30de1a4f72aa46ec2fbcf46f2449709964b327dafccbee3142f00abcb0ddc2b6562766a31b020533bceab259594ed12cebb775f9ef616963e0b368a6a21b48735d88ff9d5f7d49c4a9b9cfd5f3376597e82dd9a984344774e2ec7105abfc82df5c8ab50bc7687875523eb21aa99278ebcbb3daf4624ed1354bd885032f35a21f170d7af07cae2c00c8844cb2a231f3508f4ddfdfb4a93f97ed382b124cd84ba39760d8eec675661d7500423ceef2f013815ae6debf14f7ca331892ea914729c6ab8b1330cafe1589d60f1b07aec0f69c190c434c5b095ad06216920307ec8f28c954d417a7d405ea62d716657ee4dc05a6d835b398bf48eeee223809b753f550cb7a50e07051421e955360ffcd8713960a150f92d8011121809b579873160dd734d3a8a48c167da0f08fb5c6d7ee101f45aa5b71e0c0eee1ecaab3cac486e4f5b07ffac479bf09b3b4bb6562db2eca6703a3368738dfc2c2a0b046d69a9baa7c1ae89781d548b6f139dea15e87f3ba9d6bbbf044deddaca63c8cb2b887df963199de8dc2a71ddd9231939c4d81ccc5c81ae953bcfa7bec67ee55eaf6f6ca420650f5e7d717d13c586820c92f3346a0527c3b7d273a8bca315d5d42acbe67ea67959cc7fc31b4f5859991d0e76bc940116586c901267c11ee0fd64ed6624f909bdae4089d52f9ea287d99e9dc13e4a65adc5b4be8044f1ab38454dd70e2fc641c2196036261c5b433c49730b4a0118e089274d7a661b98022afc9852e15080760571139d3fc349c0001819562b0a69a197d280a9e0922940cb23f635a62e742b3f1d90824332345207617128292b13e6e0fa362642d6d1daca45560473e515afb461df2a8327fcbf27f95206b1f0a350e2f42c3934cc37af8e1449b523b49aa11c4d25e0b47e4116891efe50c06590c81e80ed77d231080be459a3a3f68c94023501a87b33944409620bd2bde2d5c622a342a9f6b0b5e461f45da25742cb526fcdd3146458fb3011c6f0f77eb3e3753b61a70902a4a03ea415d1f95001c0ee9581fe07745b0537dda725b88f00755a01fe9b9c4bc479191d860a9ac36b45f883dbab54a115e6b6c90b4c790cc63d210e6770875c276588fe84b5781c1fccad73993a5a4a2a477435632cad034ef0ba5216c9a5d95dd5705ff1794849c4e40ce636e5240b2730e0df7e3c9a4e13e3eece98c278ca0e37b123343ae21cad587010ae95f83d3b66f8cb2ff05552ecf52e8641056b0caaa43a14c8dd62d93812ce269e1d8e64fa9ca646a87970a73404b69f0bb20443fcc36c6fe1244b9a992ea4fbc00e3d3513d2cc43479abfc156d333144c686a1c092fb06e1476793c57ad8d87d13cbab74b3c14f80fde638ad68e65292b8cd7625223c593ea821c7ffcbd468ec95a832384728961cd4fa6c17cde2d60341729c71c19dba6b2f5d517fbb4a5cf015d091db8d83e9f9f929d8df7d55b1047838dc849d289ccaedf6734f344e3aa5823e04a7776cdd29791c3eed8a3ddc3dc05da7cb1fb665522d80a133837fa77f057537af8fc87f839901709781f49baabfb93a45018ec2914bc13a86dea35b0e7f908aed6598aed6ca7363c2db648f947ec006e58d37913c7b85346a36d7b23f764a2aacff4744a2cd2239de391b466092ec76ef713ed616a9ebf16c5a83ff5bc9c344776211563c1525c64b5ad0595f5f634800bf5ad8688adaf23b67c72e7861b92fd33f5ded867667d3b2d0afe708bfd65ef8382dba31c4983874f612f7176416d9be0933a4eb2d8e2ece59d75651fb6d265648c7e6dbb60f3ad5e10d05271ec825d5b50234db295b3b7fdb1d74901ab43b9c39d3a22ed41e9e0495a4528f35be7d6c389e450bd965e2b2868705551612684eaa61ad3b480f1d5afb7395fb1d37a3571e9d90d7aeb570a988239f9039ca317e4120a0e02c453725f70932555f09ca98b06e1e7659dc8d9d59ee89d216f5520146f580fa2d4c35608db39e233a2363aa5cd08dc3064cb92375dcf81fdad3df070405465b3651bf881e087fb4b2d39eeafe7e35bae04dcd30ab476d8c82566428f274449aeb36ef9cd35cdb42bee336ff6f4b0cd86edf08c28d4f2c3ece1284da17e0a97a5da4fb54dfb219c9e0a52507c29c9842c8ce0c79bf6002b237a855a5f4cf31b730e737c0b8a8935734cebe63830cfc6087b325a7081351ccaec088b7d1bce37b43bc20b657b49a885bc629ef5e89549f150ccc06ebe7360a5dace49fa891dcee2da165ad86ef749afe484ab076407d8236b527ea3dd277d66ebaa965f5d908c03400352cf3e414b460caa5bf012b1999090425b57aa80eaa8d3c8e67c14d380c6dcc2bc1eb93940b111a9cca6e231efa166b39bf9d69f05f81e1ee8361c123bb44a87f3da31c5bfe9411836ed08488e05ca7e9417cb9b33e6ded199f79c010817b1ad4abd30755ed1c0d44c9c1a14b0f0d4ff9ca0162f15903c5c9c4360187885ea34a3f993f8fa289f9bf83225b83769d968235702513acb55795964698b3412eb93b66fdbfbbcc767c20b8b74b0c47dcf73392911208f3ba7dce7dbe5c75863b7aee8c6f378bb385de94c815be435ae2166ff1663fbc5a5eb9be611d19bb18384e80c319e2ff9b21366aedd34d7d097c5b6fbf84dd406f07249f93775d1c3492708b08f842f9969f948f5f6729b5321b707f104968752f699c67df93a45aeeb8a809ba59cd3844690ba8c606075812724f7eb249f0e9aa1e7968462c1c5f670a34c6343332650e9624390d20f199d171b551076143ad95c8c590c48f7064b52594cce04baf0f12483886ca0d97376a5d08b82e9a5dd96be26f0e8bbf429b795b42af867d9f852b7d666f2594c4c48ed417c6bf1c915f69766800c38869b7b9c85c1ea13defdac580544193157b52938ffbeae6ae6a4b3e23daa5122dfbe5f77ecb9306ef6c54c7d6f17c3ec9cb34e466433c7bdc9b765ac509b9aba8bf39a0fede6b4fa380089dff83c180fdb55c83e745c740231c95364477dc5ebc0504adf0b31b28671734743ec68822a074bda3e7b717941b4a0ea856284c611c4ba4f8ee3c27d7c5e4f0d0f5938cc669e7446ffa84aef4a28fd795f04dab5058e2f585b3d8fc05a1bd8be7f36929df86a99e951d311e0306ab09d3c8408a2fe629b2ced1a6e144ec75f80e5f6e8492f0a90a6eba4a49468959599d4fd6a0481746a4a43689c9a4c22e68eb867e397caede3db2e594024cf06efe070d6be9d1e7b87f083654556adc778ff37bfad7d04811491360b29e9b5bf02d47b39af4bb5426fcceae64a7bdee0457684b68a467b4780af24777969568e1c6578c9fb5b23f51539387b083d5bb6b3eff53848ddb072c36d6368113db75b62dbdf4941a0718b1f68a3d22abc400dee90bb3642f93a9c94de1a52346ad3b700beff20d43467e16fbf81dd54386cba7fe9386eaf0611f5fa5870f5e2d8d16813f4e8ab3f5a9e024ff7dbd7a47c8d7a12af9cc5b3b7e9ed6eb71e0239780e2e12d930c92fca13ca3de3005a93a17460041a868589ff1589b5bcd3e51b72bac61a562abc74d18364a97c216c305a214c19dc3a9f79da64f6f5817f3b43b1395abd88765eec565980e4547e6abc8367f557c952b47780ac38189f0bd875bb6ae8a0d58b90cbf6641acc66ea72d93e94a6b037580396402528b905ad66692411ac76f3ad75af363a950f16535f6fe1435ee0d43befcc54a7603df28ab", 0x1000}, {&(0x7f0000001e80)="661bd5b56754481645bee5ff33552350ca4f7cad1236282f836b44868527095a2f4b1c0ce659775c8e8fc0cbad392a35198f37e1e06e4b0c11b3fa623c595120224101c39d4095992158ffa4657aadd00e1e1f3ed14c33f25e3ca8e6c285bb6ae46cd86e70a8b9f884a384dc25fc4cff9817566c5994b59d16f947c5e81d3d556154a997d1b4b9bb3dfd934a0965297c0f9c319af5378eb6ff7ab99147c5b8", 0x9f}, {&(0x7f0000001f40)="578e115448f68844f40cefefbaddd12092cbf08fce4c0f37a3637805afcfe2882945d5b6765f33754f5b969ecc482ca6986dc63e9eaf104b1a80b9f0741d43a409524c20817b48f72fc7e3a00b546f83b3f6b810d6a241e603d6fa3843ee8233f51aaea8cdad02f50c167c00b94d17f60e50af3f2590278ed146b2d1f07f40f7972f4706f17c567f39f2ea2de5f75e87b368748ac02bd59981084343ce9216dfe7c38196208a5e65468212c02f0d8c614055482a1b9cc5572e3626785522873bdc13d3eb544ca455c6e6096d4abb49cd788cd3a03b63c1d18429006ba9876fa30748799ddb33b312f2649b", 0xeb}, {&(0x7f0000002040)="fd5fe83082c116d9", 0x8}, {&(0x7f0000002080)="a2a837f340fe4febbc4deae06edbfff7770c8f8d8f495ce423e94cd2e6cc74b5d52f86709dbffeb49f5eed310aefed68a90cb31cf6d02331919e74a8cefa8e438dad4dc978a9d10843341356d5f9a70e3144be9288dfe167b24aeac7d1eba00e227c1eb3a0ff480b18e57d766fb0872eea82c26ec343ffc9216227b2902e8ce6ca9ed8b7", 0x84}, {&(0x7f0000002140)="4ec75c6ea6663deefd787445ba3beb446d1769ac084407e6d90f597c6e00bfcec18bc268", 0x24}, {&(0x7f0000002180)="c6ffb7fe415803812422a5bf47e0978e3d8df1d0836095286116a8a99140615aab57628c4ac91f7204e9ee4afb1bd7b7e8db4b0d12c8790766da5ee54afdcaf2829d32622aa1c217a685e7b7c4a9ede7ae742ebeed4cc74aff238570175b37311a87ea1d5508015e1d8dbc0881dd3faa83e5bafcc8fa71fc21cb55cb", 0x7c}], 0xa, &(0x7f00000022c0)=[@mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffe}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0x14, 0x1, 0x24, 0xfffffbf4}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x4b4}}], 0xa8}}, {{&(0x7f0000002380)=@caif=@dgm={0x25, 0x927, 0x39}, 0x80, &(0x7f00000027c0)=[{&(0x7f0000002400)="fe1236fb84c19214fca7b3c985a753eba7ef3292504c6c459fd7d886e5067de77d696a20e30e70911406fb1db6b2586eb669e862fddff496b938eb28503c37adbcb064d1de8472c47a9b990a30507f9df9ef422fdb37773ed14d8df4e28c9b540af28ad0788b37b2c5e8cf2268ef2cf209337cc90a17093331f43b787157f0dbc678f3092600bbce4ee9a575d264748ae07630bdb8a2fe6a067dd74f08522e3087eeedfad8288a546cb08cb4", 0xac}, {&(0x7f00000024c0)="51ad6372788f3d3b3061a85ccd81947069ee284683433f74ad9ef5070706290e7a51467a04f5acbb5ee4aa0f473e59f69b4f7c6b5206dd33a93dc55c304ac851318184e616c8280097bae85c30a555482a45e5838caf21585959c6d979adc4cb", 0x60}, {&(0x7f0000002540)="82d3ba83753173e9d8bdb9730ffdf85a0c2862747efee3137fa78174490a95ca33e2cab516b4c6285cd1175ec089b375fc7042df47a7e0a3ffbc13f14b5a29db6305d0278f8aa9f81208bab87f6920bc5e0573da0099a1f9ff1d226e7365f2e2a9f1a89ddaff0e348f365f56eca5664eeeb8b44e84219dddfd807f5831003542e7f3c8f4c2", 0x85}, {&(0x7f0000002600)="d80ff199642b8921ce343fdcc5a4294e5e6ede45e020010a4f83233a3f33fefdf0ed0fcce6c2ddf72c91ea94262a7b5cc334856a70bc7700f0c08aa919d393e8f2d2fa89c640dd7be83d1b9c31a315a954fc2feccd245a3cc9329c0501b91955209462654f3b4ed78ce875e5b6bca03bc69bda293a02260ddff488d1ecae25fc0b3103fe15a687590b8b88d0ee8365867420c1ef2760c442638a73dc3081443b4465730f4d96fe6b940df8a522142f89f2b221ca9716", 0xb6}, {&(0x7f00000026c0)="c1e4784ec0ad73844fd1f49e496c60d7e8c7633b8b325cc198af0ea32659524faf51e0209f71797fe523a056f0ce5c028dff182fee050a5146e8b7c5a30f4eb1ec97a9e53d5988064ebcb706eeb19913c5773ab93ce229c1086071365d1bcb51a96bb61b97f1b64240fb799aea128bdbc70f5bec051bce1f58dc3cbfeff65ac136a8f4c8581fb6d4358b754536346a0a16c0457868bd385ec4376e13a6b60e39a0df1a063821edf95c4f5d1d54134837a25b275a6d69a50a4124c3b6fd9fc04f1c26b1161765fd0847304a92292a6d912233fd7f8ba32d03125a11", 0xdb}], 0x5, &(0x7f0000002840)=[@timestamping={{0x14, 0x1, 0x25, 0x6}}, @mark={{0x14, 0x1, 0x24, 0xa7}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}], 0x48}}, {{&(0x7f00000028c0)=@caif=@dgm={0x25, 0x6, 0x1}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000002940)="f83ddcfd8bb998076af4dcfb023b8be23dd2a88687ec32139daa7bcfef33926b3d94ae750a1a7a0bbf0b9c81657bb223cfde03b3f121", 0x36}, {&(0x7f0000002980)="abebbb013fcd4316ccf51661db69a4a94078180bbff3cbde50c5e159441a3f07112fc9149fe4ed07c56234f4327bc1dfda561a79d0c4846c4fbc90f1d465af6fde8ccdbb7d8364e95afb39ab047fafc9e1253ee41276852d1565361c37548dbc767a791c5ed20b838c081f9548", 0x6d}, {&(0x7f0000002a00)="9a9dc88542787ca5be30867f5cd7a22f7d1e5f62cb5bdc9a5a596b59931a0e0b8693f5cb523ab04ddb917429318db1a107092a1a2d1bcc4dd112749600fe9b205256e2d53f789e6ae7457d8371fd9f48dce4b2a661317069609fc36636cff47c008fa5a7cef742ecb5de17c32794c1426d1beadbf7c45dcfebf7a492b8f031284431d4da7bbc635ac0fa35e92bdb6a321fcfdee4f0ee8e5350233e", 0x9b}, {&(0x7f0000002ac0)="10a603a957500e3772652bfc7e0914fd333bbfc028f4cca46c1a9ffe3966a8160edd517e90a1fd66472892f7bff68ce189650633a9692822a5a40cc1350fd7f805065fade9d0497d9b93d75f058bf1ec36756cf074f0d0a91f6a6b6fed3c6af30b93aa27148de2d60cc5c06e32e09ea9c195f9b5681a2eae2f973cb0e7c9c057503d1a90aa3a2adbb6c89f76278ab26f56cdfb7c", 0x94}, {&(0x7f0000002b80)="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", 0x1000}], 0x5, &(0x7f0000003c00)=[@txtime={{0x18, 0x1, 0x3d, 0x37}}, @mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x200}}, @txtime={{0x18, 0x1, 0x3d, 0x15}}, @timestamping={{0x14, 0x1, 0x25, 0x3289}}], 0x78}}, {{&(0x7f0000003c80)=@l2={0x1f, 0x2ab, @none, 0x8, 0x1}, 0x80, &(0x7f0000004e80)=[{&(0x7f0000003d00)="49d4755ed5c5d625cc1a732782a79afc986944b97dbb54825b0d157c62cd7209ecc52092cb8d08ddedc6d8a2", 0x2c}, {&(0x7f0000003d40)="daae922ab770a22927583efcc90d92d8c3790772935014917d32605b12a4f1f54c1bd9c7137d619475939db09d965377a5e7fc93dec0e981abf0beb1996049facaa51f59cdf4eb66bfd51b12ec4034a33d62099058a405c98ac35e6859f198f26a599a662157d83e7364f7f758403d2e35ac47501c88ec8c6b44874add9b56450ba73ccdbe1913548e1321ba112fef759c13e7360de313787b72a18b6484a969871d875ffbcc0a8e4bd26ef22caf77aefc746ec69b6ab92205836c194f29409c9c7c7dd0c13edbf4be948271451d56bd9b1564f16690227aa6285631e691fbf6bd123ed6fa18dfb5ca", 0xe9}, {&(0x7f0000003e40)="35504419896d155f590c020d4b6b40f35b6021dcfe41e75f", 0x18}, {&(0x7f0000003e80)="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", 0x1000}], 0x4, &(0x7f0000004ec0)=[@txtime={{0x18, 0x1, 0x3d, 0x80000001}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffff}}], 0xc0}}, {{0x0, 0x0, &(0x7f0000005140)=[{&(0x7f0000004f80)="66566e544d8b8b36", 0x8}, {&(0x7f0000004fc0)="a27edbea044d7e3f5552cceb275df77a998799a6e204dc31b06cd46e40152e897632923e9fc1620f60cd4cb934e70e120c2c52cfdd3819ecdcfbfc6d8ba97abb23a0cd35ee236c996971296a8aaaf733c151e8e3d3b9d7e7ac8eaa5956f1182d5fe94a201ba649f2", 0x68}, {&(0x7f0000005040)="363d0e48f831833be678a403aa0bd54ac6b3373ce7ca650047b5afcad269e97d1f4930ac", 0x24}, {&(0x7f0000005080)="51b68e87d0bac0383ea8379ee0ccf0b08ba240f34790b0fd1faa", 0x1a}, {&(0x7f00000050c0)="75a7feb960797ace40305b4a687210f23c5c12a04ed1b23651ad5da428beb1adfd25734573185fd7621557b5131b9321c4fd2675cca0c6dd293265a286e9e6ac", 0x40}, {&(0x7f0000005100)="7bb6c2f00e46ad429d0092685fed35c4df05c6d1f2265d705fef8f474091a1a645dbbc2100e81072724bbf016af1ba582ad0bde5e23cff0009668055f3541f38", 0x40}], 0x6, &(0x7f00000051c0)=[@mark={{0x14, 0x1, 0x24, 0xab}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}], 0x30}}], 0x8, 0x4004010) sendto(0xffffffffffffffff, &(0x7f0000005a80)="e55df1e2b5bceaaecb80dbaba06638063361ad3649559c11fd68e28b6d55e4b709e153b40ec2fb29c45e5fc933b663a73b9c34d50d92f1a29d3197fd1179aa744edecfaf8400fbfef222fab86f4ba2df43a11174b24e3a7a242caeed35e6ecbf20e88f7851d1380c19b80ccf11ca68bae853592f9361f229a5640683ebbc89884a6d", 0x82, 0x8800, &(0x7f0000005b40)=@in6={0xa, 0x4e24, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7ff}, 0x80) chdir(&(0x7f0000000140)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000005680)={{0x1, 0x1, 0x18, r0, {0x2, 0x4}}, './file1\x00'}) clock_gettime(0x0, &(0x7f0000005a00)={0x0, 0x0}) recvmmsg$unix(r1, &(0x7f00000059c0)=[{{&(0x7f00000056c0)=@abs, 0x6e, &(0x7f0000005840)=[{&(0x7f0000005740)=""/110, 0x6e}, {&(0x7f00000057c0)=""/110, 0x6e}], 0x2, &(0x7f0000005880)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x118}}], 0x1, 0x40000000, &(0x7f0000005a40)={r2, r3+60000000}) openat(r0, &(0x7f0000005500)='./file0/file0\x00', 0x14001, 0xc0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) lstat(&(0x7f0000005580)='./file1\x00', &(0x7f00000055c0)) write(r4, &(0x7f0000000200)='E', 0x140000) openat(r0, &(0x7f0000005540)='./file0/file0\x00', 0x44000, 0x102) 21:50:43 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r3, r2, 0x0, 0xfffffdef) [ 1953.867204] loop6: detected capacity change from 0 to 39 [ 1953.872027] loop2: detected capacity change from 0 to 39 [ 1953.873870] loop7: detected capacity change from 0 to 39 [ 1953.875699] FAT-fs (loop6): invalid media value (0x00) [ 1953.876083] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1953.878689] loop5: detected capacity change from 0 to 39 [ 1953.880707] loop4: detected capacity change from 0 to 39 [ 1953.891912] FAT-fs (loop7): invalid media value (0x00) [ 1953.892632] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1953.899850] syz-executor.2: attempt to access beyond end of device [ 1953.899850] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1953.900623] Buffer I/O error on dev loop2, logical block 31, lost async page write [ 1953.920238] syz-executor.2: attempt to access beyond end of device [ 1953.920238] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1953.921773] Buffer I/O error on dev loop2, logical block 31, lost async page write 21:50:43 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:50:43 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:50:43 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) 21:50:43 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140000) r1 = clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace(0x10, r1) tkill(r1, 0x33) recvmmsg$unix(r0, &(0x7f0000000c00)=[{{&(0x7f0000000240), 0x6e, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/179, 0xb3}], 0x1, &(0x7f0000000540)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf8}}, {{&(0x7f0000000440)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000640)=""/244, 0xf4}], 0x1}}, {{&(0x7f0000000740), 0x6e, &(0x7f00000009c0)=[{&(0x7f00000007c0)=""/50, 0x32}, {&(0x7f0000000800)=""/53, 0x35}, {&(0x7f0000000840)=""/160, 0xa0}, {&(0x7f0000000900)=""/188, 0xbc}], 0x4}}, {{&(0x7f0000000a00), 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000a80)=""/151, 0x97}, {&(0x7f0000000b40)=""/7, 0x7}], 0x2, &(0x7f0000000bc0)=[@cred={{0x1c}}], 0x20}}], 0x4, 0x100, &(0x7f0000000d00)={0x77359400}) getpriority(0x1, r2) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000500)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x4, 0x6, 0x7, 0x9, 0x0, 0x7fff, 0x1030, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3, 0x1, @perf_bp={&(0x7f0000000080), 0x2}, 0x48a8, 0x80000001, 0x9, 0x1, 0x3ff, 0x1, 0x7, 0x0, 0x8001, 0x0, 0x6}, r1, 0x10, r3, 0x2) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x509180, 0x0) perf_event_open(&(0x7f0000000d40)={0x1, 0x80, 0x2, 0x80, 0x4d, 0x40, 0x0, 0x1, 0x48040, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x0, 0x10001}, 0xe04, 0x6, 0x1, 0x0, 0x4, 0x6, 0x80, 0x0, 0x5, 0x0, 0x1}, 0x0, 0x1, r4, 0x0) 21:50:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) fcntl$setstatus(r2, 0x4, 0x42800) r3 = openat(r2, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) getpeername(r0, &(0x7f0000000080)=@in={0x2, 0x0, @private}, &(0x7f0000000180)=0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000001c0)='dummy0\x00', 0x10) 21:50:43 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) [ 1954.061871] loop5: detected capacity change from 0 to 39 [ 1954.067600] loop2: detected capacity change from 0 to 39 [ 1954.106935] syz-executor.2: attempt to access beyond end of device [ 1954.106935] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1954.107827] Buffer I/O error on dev loop2, logical block 31, lost async page write [ 1954.113173] loop7: detected capacity change from 0 to 39 [ 1954.119863] FAT-fs (loop7): invalid media value (0x00) [ 1954.120569] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1954.161970] syz-executor.2: attempt to access beyond end of device [ 1954.161970] loop2: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1954.162750] Buffer I/O error on dev loop2, logical block 31, lost async page write 21:50:56 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:50:56 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:50:56 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r3, r2, 0x0, 0xfffffdef) 21:50:56 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000740)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x6}], 0x0, &(0x7f0000004a00)=ANY=[@ANYRES64, @ANYRESOCT, @ANYRESHEX, @ANYRES32, @ANYRES32]) getxattr(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000180)=@random={'system.', 'vfat\x00'}, &(0x7f0000000240)=""/236, 0xec) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004b80)=ANY=[@ANYBLOB="c8000000", @ANYRES16=r2, @ANYBLOB="05000800000000000008000300b32404a2285bece4b179d4b74b68994fb7367622fead125ddf99073e8fdacddd3ce8924ccc5cf05d30d3a292ae3007dc982e24653aaf522b8321fab05e1bbd3dd788b39a2978fa295684bd4c0d37ae4eba439a08588431f34eecd108699676e64cd6af3c2d48615f79c2f4e28d100000000000b41900"/141, @ANYRES32=0x0, @ANYBLOB="aa000f00379c080485591ba5480074c49a7aa8811a9260b3864d8144f88344760023aedc5053b29b1228fa173b98a2d8da6310b83712ee72fe49c232061fe14ce43f3533a02a712e8141b00f0dfa29514ee99c142f388f4a040ea862bac07122bf4588ffffc26c9a0409cdaaf924d34ae0bd3e010d72a7bec4cec9197a92db2b524e041ee407427651e6f145b5ae659a519ba366ad53877f8aa197fd831750180d0e010689b60382e0030000"], 0xc8}}, 0x0) r3 = clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace(0x10, r3) tkill(r3, 0x33) r5 = accept4$packet(0xffffffffffffffff, &(0x7f0000001080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000010c0)=0x14, 0x400) inotify_init() sendmmsg$unix(0xffffffffffffffff, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000400)="e26e50ac4c073069a487322b8d95da1de56b01fb078c05d9621a46fdc87d641057090b2089a9c016029d7a3ed7", 0x2d}, {&(0x7f0000000440)="7b2a495ff149a48688799f04923bcd427218b91fd8b101324213c12c0a275a2b8ef009bce92aaee740dad2e46ec8dfadea576115057c55c0648250a83ec356fc759abcbbc587733bd8dc69451e897a4c1f1534555110afb6c0713312434c707345988b0d99f69433d3183f32abd01754ca108bad7e7e0fb7028ae01fc3312ce27c9c5a5cbae68826aa91518fec5290101ea24674d058325bc22be69058f56e4e368f85c6a87d9d3855b183662ee69a1f11db70d4e96d614b43c3ec7ba7ec61fc62172905f88c483a363d463c982de719d918e844e2b0d2331bf49909045f23fd60fe45abbb4c0c790f6981b630", 0xed}, {&(0x7f0000000540)="92ed46b4614614a82e", 0x9}, {&(0x7f0000000580)="57784862667e1fa92aba3b1b3807d037b870a39038551975d629c69d2724ee929a63688699c433038d23275289963f2eb765d58e3c331a0845385242bf24f0450ea7398ce33147a63ad1d9920d219dbf733b143931f7efd7e890a9ddcd9b539f116032eb335bc0311325ae24917ca398dfcfeba2", 0x74}, {&(0x7f0000000600)="043370d86b46b2e30513e25f086f9d2aacd78a35b25e3cf72e83964d90465d5c78d7f684a195a8762975a2f64bd8089142411902cb0c1f6f7e49fd25a2870d8fdb34feca90788adb8e55ce794256b227b4e82eb19d760f58377c4a9d5efe562e2ffa51eb443bfe0d532edb7bef61bef5841d04a5e5d1067f8a1ae39956f063f154e4d4ee7e8fe62158c03569e3d5", 0x8e}], 0x5, &(0x7f0000000780)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r5, r1, r4, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x48, 0x40480c4}}, {{&(0x7f0000000800)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000880)="1e34339c86fbb9d92b50bf82218ae536cfb32881d8f7c0ad2b70913c8293d72926045f6c465aaede55ec9c18368636f367b96be138373dcfb54eba503a747f3156540dd5a2123a90d588843763f13638d10e8ed06f9486be7abba7c1470a2620ba6a480738f264fff40e5c97714a19e39edc6e50f90edd4b3f765296d5d402f9b3c37a294e5b082316d976d13075f3f55f596fff058393550a34f0f297302330007bddead82e2e6a02252227ce75102306c2343dc657fe08cdb765607c12b777f3a24b948df1ad586d6bd43f00a00d29e966ecf0cb", 0xd5}, {&(0x7f0000001100)="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", 0x1000}], 0x2, 0x0, 0x0, 0x44011}}, {{&(0x7f00000009c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000ec0)=[{&(0x7f0000000a40)}, {&(0x7f0000000a80)="22b99388ac84367da2ef06cc8e5c76511a7995f21a894fcb799f4b39198479c11793e1d1cad96f6531186cb2a3bff4d47a6cf4102194ff3035725f54daecf98d3a7450d625582543bb08ac222b123513440bcaba6311f6e364b2ced6dcd2a626cd9661cfe3a0c063e5b49a1f16bb8f46f2d404a733360759613cc7e4e7c4937eae9789401841265df590e2b3608fc94be59d80b6c74b2d47c20377a143a2f4517faa80b677527c53be7a6f2e32d1d0595de4029d4269b80fe48ff1581327f0fcfbc662cfc40e6085ff1a30b73461a57b04553b3ebe8b34bcf76fe102c4", 0xdd}, {&(0x7f0000000b80)="32258158a7aa55b895f021aba2c34e1f6565a9ca08aa524e8fd22e38117c90d983ee55694c4d28612369cb60ec43ff06eee8760d7e67b062633708d9d01d85c91c1030a59d39ba6385900102e3cd86fb53a618150c19341df73755f98a75adadc303a306bfa754d1e77c897c607fa34d2b4d018c5c3435ca9dc3219114173e4942496a00de08d0ea4595adc7c9dade636aa8467224298869e8b990d3ee3262c09d4c29ef2717c0f0c5bb18b09d8764b5745e54e2010398c5e998e31ac038f46748fa04e0294d46cd1bd59d274c05912b1bc8051def28192a0ea1a84b36381159f14f29b97509e7b829", 0xe9}, {&(0x7f0000000c80)="e4bf41382e170022ec686970adff28764a5312b7e61721092b5115b690b676dbfdff245cfe97f2c06cabc60fd4fbb626e3f1da6ac31c5b553dfd1c01111ce24e81c866ca41b96e7f43e34ccc9230b84cff5d9e6a164e2c710064122a7f63e2229351db41fabcc412d0511f07f78d647fc6854f5bf790c85307692f01471d4d83f9d78a70be6bb6af161f6400224f3989cc825dc506bfd6ad1093b1d7baa390b0ed8a6958c3d73c858a2ed3498a91cec74b42", 0xb2}, {&(0x7f0000000d40)="4c79114c948eba81546c3493e207dd2d915c4b842747f563240ff39c96159f2ac4347a3a274753ce96bb0e2df54c387212b468f22031aa7fe9ab79faf22c5fc27c97e8beb08cffdea8c1be06c67f032ef6f65cef7d6248f4f1abf277773ef0cfb758196313c55e0190b28906149ef75467cee9545998d8ba0858ba7ef250a3077f4d6a12e8fe858a442ae8f7b34b374fc5b99dbff50c01910275f57572c46290a488328da4694be7c3e7ecaea5d8a2bf528debfd35210a9a6065a626a43a0d667b146cbc260ab5f81838074214a4b5c1a05bd0fd59b8bfd375555eff89b10d5f13d402fd3f808769eeaf25cccb884bad7dcc5415c1f515", 0xf7}, {&(0x7f0000000e40)="60cd73538669f37dd9be459158da8b94b294d23ef09d0f62862a80b186f1d64df7a94090cae1d1971cf3d9f92f72eca170723fe440ec2b5190ae70f2e417ef27cf266c3f8e82dd129370c20a773f2db07454d856970709efbb12461974b96f7cb0f169871c5058e61e74b06e28040da1497adb2db24e249a5a1dfbd8", 0x7c}], 0x6, &(0x7f0000002180)=[@cred={{0x1c, 0x1, 0x2, {r3}}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd0, 0x4040080}}, {{0x0, 0x0, &(0x7f0000004540)=[{&(0x7f0000001040)="e56bfd6d224251", 0x7}, {&(0x7f0000002280)="33626133728ad473d9ca942dfc699744906858db903423593c2eecbf8315dc5210eb4c41d641725e5d0f76a4e95fd7d93b43314b351363518a53e5cc7c43ae0cec195392313246247f55", 0x4a}, {&(0x7f0000002300)="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", 0x1000}, {&(0x7f0000003300)="d26ac469490656803c78a07fdf22691c5c79e351e9ea46137cdcb52b505a6d4193644cb26fedbc1871761a1ecb0b72f7cebfcc2e638cc23bcccca93d378470fa1869a76b0e27ff49853b5cd1c6e0b752937c960fdc6972e76e715f3e8dc13af8504d4b02c00e3fa85108c87c84fd88b4690e0cee8f0cef06e7fe21907e0ff3c964512c6ea0c5e95313664e67075c46a68918", 0x92}, {&(0x7f00000033c0)="86d3dcdde74e591f10c0d7d3d1685b4643821d32d991abf8f4768830aad78b811ef8c1e1c07105dce52788396a940763a7c7b551bde2f3dfeb1ba90d5d1b857ad7b149c6508acd4cc84a877be6cb6d58da171e0c128652a53edfa65d210656c42fb01330de32f25c59798059e8118aae8d2fa4fd1ad93d90e8c2c075054422cc20413965b13570269a3d8509bf88dc812a72e142439acaf44968557e1031ed91e8c750a7d1bf443cd90d0be121a2be9e1df11fe3752962956674a2457d29b1529590b702bcc00718494a32a0fdd664056a473c3f570f6c0af13cfe4cfa33a011933c432dc85377c52de3ab1bf5d4df0ce9a6da4f0b0884d3236d266e18f40260849a3071b6a5b9e37071e8ac08676afe096f09fc1a43fa2775751c6c89d672481fa5bf991787440130ec2111c54f32ff29f8f52231ca68d3939e520f5d4e878b5b2b0897891460be9608aab2074d68f063ca11c0d6e5f22ad5b1e7c74585a0ecb2039188958d7768169cee2196ac07c8cec4bb0f6b352290d03494c773744de134e79bffbbc9ae5fea3809f65da45e1a7523c99827ad14d40cfbb63d3a147ed51f8fb7e475f3a3a3907392296cec0ca1bce19f0bc906300a0af7928759a0cd2c444b5dd6c75a14fe98f9470c0ae673b8a915cd2fa23ca02a8265a7ab834ebf4e4b7ec318f48260c77733d06399ada38ecdabaeb947e71f823824b26be824386ccf2572a7f9494009441d868f168302295fce1f6bcd886b999bc30464431843d471f0de7b5b58d0bc626dc56ab88c968087c8f6c861940b428ae456301db3de3fee30e0f343c14977c65c02a33ccbee4c74ae3f6fe5f11bbc053c91c2cdec2cefc440a7f80f2f0502eaac84b930a1cce46fcf366b1940856cde9ecc98f8212e26c090a67b81711207b8596dfe5c7ad8f4a8e93859e1aea9997b93466711e21f36ccbfe91a23f5f9dc1e93779c09a86d59ec3d9bc96ac898e28237d1b430c3b13b52d0127e3ebc638a848a517a98e34e5b5be94877b005eafcc0596f4c502db393f9e27b7e6512623b68086f673460d0eac02cc007b2bf77aa2fcdb1e094863f8b551e5280798b23f9904306d30ea7c2555def08e8d05bdea77ee66303b9c7d597ba17d0dc2cd5a0b4e4ce64023ba71ead1bae30358ac863c2f960bac09e589d2abdcbf5bf1cd85a392535004b05fdc0c8e5c97fecfcc8956ce5edcb1a983e2b72e7a420f5149fd58c2dede99a2937eb355ece3cc23c09577b7707190d8fa2e9ec892e684ef25d41b558ffb092e72b20571eb6b2d845e945a6a60a68ca4ce3053320b180c26d426d40a225464db47ad38300de80c000151fcf8e065bbc22a9941f5c7ec53057e230ae7e70586861378b7f000ddf7eb3604c33be1851c4efe5c48242f7e804415e64d435ca50ccf1af4729b6c37ba32c7ae66e361e45aa7cb235f07a781136fa5662071ec2f61ecda028fc6df5291c86a9962df122cb5f74dcd407a0bac5d042e55a77a0c5f36dea2c807ead88477218cd00231a8b7ae851fbf66a2bdfc725b8eb90dbf5c9c3536d41e76bd56b843ca63c5b925dd7a1e86f3d698fed587179353cd2d98a6b7ce19d9b688b400610ee7d7f39705032512db36c0b5d263c49981b0dc6b9e83c72d199262371b480f6c9e3fd9fcb9aae30cd45c56a0e88feaaf6998e610b03a8aea4953b3079e25f2066b389fe727d34e7133ae16997c3a8d68fef05170a7b12bf8b5def8e03ee93e9df71dd4f0e4d4b0951898f5d4c0fa68960f0c668048c2b17ae3fc8da6d6c7a51cab2ebf8df687c3161af11e614e8a0dd9e9826560402aebb4e52e90b222e15417cfe9339e53fef7626e27edc7bcc7f7367d9e9341ab7439d6343c33730f1e93276d52ce21ad10f12449b9dbf7a612907ac847a08682b8af3ae4821e5b796ece67ae43095bfa8a7a958daaccd3c8928ecfdc8ca35ebd664abaf903292c77ef64042d414e350c0ee6e35a9733322a211e23cc31e341d3eb4348dd5d11a270c5772d3617ecfbf19a3fd102a3751e03caa4013a23d36c5019afa35cb068d50d808eaa6bf2ffb47f9cec347e3c1ae171e0254350588162c6067ce114b2617c765006b139947808e11951f4f2e47db173257e1db3cb293a70efeddf07caae67c02c27ece4a356c0e0ff5f6649144fbfa1eec3cbe0c202c9b05aecae6dc8294e7f26860deb3b8f5e50b5e6addf8e70968a0f446995f2e42b8569757d75d6dfedc88abfe27c7251df23209078d4907467927d9ed74d53a0117e521dc04f3e2c6763ddccc33266ae93f8770346f607d115f2fa822e1d14737b3829ec576f902a93a32b24472a75ef7270ea1c41f8b643a338144c682272e8c8416b35b596229f1e0abe983fa09c3414fa9b89c8688cb3b4606d37c2bbff159c588ddf66b5211a2264cc1e7e64ffecf949ca283697235967ba8498120e3910885b275b061e24b4def1d2ef1d2b43ff8665fb194827e56843e04ae9986205f0069cb8367b97651b890982921c5d9dc7e2d563ecb23b6e7b96f7aadb9185dac4170b7bd9a8c9fc2bede5a3f52f0480b92a9cfedc204c7451a5890c9f850e3cbc271f7caeac8cd86ebf7fb89d3b776ae3d90035fe8e166bbba0e83110ceeed2f2aa91e4ab746552474b2f478a4a05fce1a699417838b15daf7af161b7b65597d6febed42bf87596c9f3f75712521740a2c77a3f9c5a7f5d57d75baa51a1d5cdb79af6aab0507e2c3942b1db4ba9baf09495d9428f8f7f621a3530ab2960774122c6cd99d66e5a76e82d232ec4e605b54b1026c3236d1181f4e2b4e38beafb085e9a5f94752139c05fc1471e98b5535c6e1c97321ab5ad4156eef00006bb4f0e95c371a943f6953997d90957682fa05f01e1a0cc99491f1c731f53ad83cc30210a180c850749729443791776553784758f33a3e7a047d4e4edadce1ae7458785e38f2109efe0d2bde0d8058fbdc91976459d406171a1810a89e1d4edd650f690a564c8ee04f658b4d37bdd002e056235a3e3a9f15ae498b511f939e3037b1c08b691f185efd5f0eaac1e91777f92f1d4e627a4a5820b76f62d43f33bb0a8450b7c2820efbd02315f4b20620b8cde24379ceabb971384f0f283cbb050a2890d5b0212f7f702cebd9bd98e130d6e6bc715e51b3dd0e0cc662b9ceb27b55cd1fa8920733a132a92fd3c15a81de93ab660ea8acf747be67de77d6397e59386cb284c14bf77dcf7a0d83c6f619d983fa7578313806efb71ac7348fdf846411a141eb5eb6a7f70334e6a393ed7eb621bf8bc1d2a53d224cbae6ccbfbfdfdaf886370950dea5afefdbe7c89b3ef80bd280299771c497a4a4207d64af1c112ff181fdf197ce25586ed19169c939364770a23eece838ad8b5a04054c44bdb26a891b3e0264caf5f839a14e0c492f79d2f1207fbc5235390cda62c5a5290251b310c7dcfae0bf59453420ed3d5a5ad0c9077281338e47c5e1f7dc37decf0236182da7bb126e23edf671b88d7384db3034a9ab885ef019b54602fc42c5d16caefcab3c3f39e1493ff59c96663302f94323a0774229d409aa2c66d99e0551361527f8b10742875816a34cc54aa10c01563214d41bbcce1edf2075c6712f271900cc6f8b6f88a59e12a3569cc235b7611170b372fc969c6122d92dd44c06f2bf3cb675d17011ab779e85756056ecc8d431c8664ebbfeea1a52c75a49b0fd368a3ef877877112f4a8df2be30e7416e240b288b2ec87ee10b2dbeeed00c2589bbe730f8333a54e8d6800fefff12d4a83d63418be016396f69f096ffcb6ef9ce6261128474a99ddf54545d70be78ea4b2a95b4c90a25f4154b4c6715f4d3195db78a8ae2e17dc8c8adad5a6315d6885168cd339f883ca1650a9c202a4ba43de92177a616b5b6b14c70f321343620bec87bb8425f5da598e9c5b9497155305c807422dff2e25c7f9eb5718a6fd8aef93b85857cef4dbf48110331188db9bd573ddc706615ba4aacbddfd9e504d61a02fc7084ad7b22bfdcdda587b21b01dff7b0369dc673dd21a8f9dd00255825da80d60739dcf62dbdf19bda3be5cec53d72d25462d693418d27c49e297224268cd76f45064c2f3ec00a24bfb989646ab4203f566a5c42af3d7e5a4b7a9de22d3a355461a7595ce0ff577f3cb8b4db8e6bded0963b02c9ef50ab4759c4ff84be47f8adade31e3a870e10aa28ceaeaf8884c3ec1c4d94dce8d93f70f790d3442f1b6face12bf19506c03c5c437662faa37a9ad42c9f65d5436862fe045a1fba4f2c78c0e0cea6b82ea17be49011c0c76090734efd86e95edd2d43a4df5a1c8b802916022d80b3471af585540b13910823569be95ee708475afed63a4fe298240690f594e0efcb00ce3029ae59243a14d8f27729c7504f513f165de17194e18b717500174478d7dde80fbef9948fc682f2162fa43759a9680691d6771d3460b2236f4e42e7b79423d50d5a19b29020ce9b497f490f41cd34d6275a5415e9eee3208e0fa6507d6583627897447c791d7b36fd9951483d0ea663f20a1ef925100ad0fd285c23a2c177a59f3f5cec863a942fbe1b51519d7a96a1982d6b381b8cef86c9f2e7e734c8b3a557ba3a9ea68fa34044952b94222434cf6bb912dc5356621d8812d8376e1b55eb8cd7ccfeab59eb2948eaeb21f3431b61bc80d048fd927f404adbade4b25fe374c1328ef14670115e9986dd8cb86394b4e3be33016586b6debbb7f4b6927680840c63d0c6600cd3d8448a171c870670b77f7caa917a58703587cae2d209bfad06d7f013aabb0646cbddf5743a246bba2a679e747b2eefaf21eb51a529a438e7175ea2e9a825c22a6f7a9d1ab35dcd4e6e71cb29e397a4f6d8ae45efddaccceff4a304ffebd7f4f0b3183e464416e142b51b72744491c14355c7c3a09b25333c64658de44adef3e53853cf7ccf0a461304dd63dd765eaa6110f71d50579dbca966bbcced14b17fe793b7094952437777e113b205b53c98bced85a906c2ed8f052426daf5db912ee4cdec68b9134a37faa696c42191ee30082311e698de403dda298266a99ee79d1b040426e7eb799f38ccb4422a2fc49a9f2cce4678097e4d7a64e13001a974503a21698fd4842c67c9f8e70a783ad62a4bf041057ae5b34f252233540cbc5241c900b8d6c869cb689cca5a7cdf7db746967fd1d022f4fd6b86bfbfcb99980c2712f5cdd4b09c21eb93e5fd98f2cc4049d8bb650f8e0a7e6e9b8e9810244e2dac7df94fc80d402d0e0bf642848684cd537665b33f82bf1bf4d952641517041b14c369757c0b0a349d39ce3adc9b28ab9117447696b734632e2b105ee7166da72d35aa90401ca224d292d0b10fe2c70394a065936d59c6c7d6e9e088682e8ed2b7dfaa86e6f133d183f3073e35c41aeb9bffd1e6488c6bd4b1dd99d5f3b0a7cc826fb64e73482648d6ef6246ed9eb52bc723e4f6fc1e2cb42d349086eed0d0bf77eae3c1f9daaa2da31cd61e041c550fd66dc23441b742af725346d0b3f91384b14384eb2c376e28dea0e1b3039cfa5ed18213ec56cb8ac9bedd6dfce96e25edc8a53006bf6ceb6882107a7de2dcff1eb305ceadb28b4312b26f9059ce5f52d914221d457c1c0500ff160afb42b19ea6ade205b422aa170fca04d3f6662f419b141f546b2779a71ac61f30e0e88035e3ca46aebb2a95bf332bb498712484c0eac60081e1915a0501a19c9ceb78dabe12ae05e3e0702dc97f04d745d5a0ebbacbf457b8a3d9a170a81a8c05630cbcb040160d977e277226670df858851270a30ec0d453a1631796a1f", 0x1000}, {&(0x7f00000043c0)="da37a1f523da356c39edae5e2e23d9b3f33f25035035aeafe404e61a42c1e58429ca40d696c55608cc8bcb82932d743a103dfad73e4a45a2afd54f18a9a18ea1b0245d7538ce4657b83fa879bf2f823485ca2849769d5963ad432451a027b81a0271932b08ce573767eb8eb38d2e701aa7f8c415f58e47f5e8246b7aadcbb56aac1f9358d25146322b061df543621596f080f13e07fbe9aec8c9c657f9c846f50c5d3e6882183f1349e2c6712a175c", 0xaf}, {&(0x7f0000004480)="09c6d06b004836bc6c7aad711a22163e0c50ab38165917fabd8639d2024bd0fc6f86a909745abfdb04ac77b0b19da6c25b91e326a0af83698bd65816cf01a7a00d7d5137f73138921a6b3a0dc2335103b2c3426155aea58a77ab4cd1805921411113c97e833a6e040ffb885c2ee9b11faf5f4d578fe48480716388e1ca6b0711b76b53916ec478e0c9e4c1c3a0579752ecb4973c68a92b75939a35833feedcbba1259b33322d8c3b", 0xa8}], 0x7, &(0x7f00000045c0), 0x0, 0x20000001}}, {{&(0x7f0000004600)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004800)=[{&(0x7f0000004680)="69e55a90515c6c49c27cd1b28b105d4e629fe238c1a93d57df6d0aa0f9f5a2e8abdf517d45d0c025de562839ae1a80766144cfa8148befbc1af2d518aa0918984f9331be3b1c989af4f62c56dc70eaed98a1a776b7080c6b9e93cc0d6e1bd74bcc789a82b777eae6da64ca64b784604b014dc5ef18009adb0cd2d96c53261edb38384b24dd8aabfe4922bb22aa", 0x8d}, {&(0x7f0000004740)="4d278494d47c9e115f234b806fc346da91c4169f38e6cd223cf327bd8a3c4a9bff48fcba89f86ccb6fa4c9e1cd7f9c8bf20b4937fa37d315b8cc2d09503c9a4739c3474bf27fa183d8c1dc767fdaa5dfb216a1331a257db0c5ffd1a06c1a3a9ad259c169473133746d1a6a64d1cd0ca951280a6e59f148e51350ffbfd702a09420965994a18e", 0x86}], 0x2, &(0x7f0000000f40)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e6000000242864d4b6405c725bc726e6596eadba7fe3eb163d0e363cd848e3362c2277a81a09000000b64bfbf897222bb6dfc34afd9f3c159945c0931c11909f6f3d154067504ad9692a4d9138b47820d909e5d9aaafc9eb821deac19bbed448e1635008ae7070f56b7ba6c5854fcbaf"], 0x58, 0x400001c}}], 0x5, 0x4000000) chdir(&(0x7f0000000140)='./file0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r6, &(0x7f0000000440)=ANY=[], 0x24f) r7 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0, 0x4) r8 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x12000, 0x0) mknodat$null(r8, &(0x7f0000000340)='./file0\x00', 0x100, 0x103) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r7, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r9, &(0x7f0000000200)='E', 0x140000) 21:50:56 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000180)=0x5) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x401a012, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) setxattr$incfs_size(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300), &(0x7f0000000340)=0x4, 0x8, 0x1) fcntl$setstatus(r1, 0x4, 0x42800) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000240)={0x0, {0x2, 0x4e21, @loopback}, {0x2, 0x4e24, @rand_addr=0x64010100}, {0x2, 0x4e21, @rand_addr=0x64010102}, 0x108, 0x0, 0x0, 0x0, 0x2987, &(0x7f00000001c0)='ip6_vti0\x00', 0x3, 0x2, 0x2}) symlinkat(&(0x7f0000000080)='./file1\x00', r1, &(0x7f00000000c0)='./file1\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x1c5042, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) listxattr(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)=""/150, 0x96) setresuid(0x0, r3, 0x0) syz_mount_image$vfat(&(0x7f0000000380), &(0x7f00000003c0)='./file1\x00', 0x80, 0x1, &(0x7f00000004c0)=[{&(0x7f0000000400)="f3c47a837795aaf13b732fcf79cf9aa125dcd4242a6e6bfc8e69ac67481cd55e17aaff7f17538b8e3334aa9688d9d2a01dd8bd0fc38b82c63db119a13c580e3a9bf294ceeaea42608cf377d6a3f208c3eb7953fe71e9818425c3c5d6f70481af3da38ff561957384e8d503898de5823eb018c273992c7488c2e86024c2fbe11934decff785bd281db97721aad7a31d4d0f56c1d0829d9f", 0x97, 0x401}], 0x180000, &(0x7f0000000640)=ANY=[@ANYBLOB='uni_xlate=0,uni_xlate=0,shortname=lower,utf8=0,uni_xlate=0,uni_xlate=0,utf8=1,utf8=0,nonumtail=0,smackfstransmute=*-\'#}:{,measure,subj_role=ip6_vti0\x00,fowner>', @ANYRESDEC, @ANYBLOB=',seclabel,obj_role=+-.,euid>', @ANYRESDEC=0xee01, @ANYBLOB=',euid>', @ANYRESDEC=0xee01, @ANYBLOB=',uid<', @ANYRESDEC=r3, @ANYBLOB="73a77b52108c38"]) write(r2, &(0x7f0000000200)='E', 0x140000) 21:50:56 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) 21:50:56 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000080)="37791e0bec7e7e09d7d7ef36c8710c9bfab11da0cf43d7ea1001bbc1470c024e9558ec0224072542f2546205ee8c20f08744cb3c0130b5744da49aee97ca1b96f90edbded925016e84e0061188f82055fa0697609fc1", 0x0, 0x7}, {&(0x7f0000000180)="42913dbfcba2ae0257449615ace29dc5ffc998230a3b86", 0x0, 0xffffffff}, {&(0x7f0000000240)="c1914bcc7ee736ac6b76b852040a452ffe1bc2439533143f26b5a34b5fa742551f497e499640ecb17e7554b4dd3cdc1d18d7f5c2e1e808744483d58a54ef338fac8555f8818ebf41c674035af7f1887a2de621a2a216592aede8355f52fc8ab14a8914c57b20d3a96b2a61abc7f22dc876762b4417a823e447b9b21543f6b6e44c0ed289edb3549aeb09172f2657b3e08ba5920dc7335224647089a54af8c9a0b5", 0x0, 0x9}, {&(0x7f0000000300)="3ad140b79de48da8731355cdebbdec8f4508e76b4174c0516a05acc5a55922bfc6815d6456f6921ba5ae7190990647a9ddb3c9feafa6b18d90b9598115d90dc243bd7dd6148047410aeba0ef7c4397d04e46fe9a36b0c80132f62c44f2e63c1a0ce21cab6b816c7ffeb4cb5579454980200af822f5ef2e6d0f4f6c8c0db68a878c6a59e19b3f782910fb8ee1ef0ac9b3e133ec1f383bd9d911c7eefb7e64264ce0e4231acc2578b94291263baf313d74f6f6b241acbe749b033e68e024afe5b9976eb73d3af35fdd22843c3aa80e15b1271e00c09dba254e32f2fbd6af5cc8f030185735c96974906ad069", 0x0, 0x4}, {&(0x7f0000000400)="3c78fe2b5fd0766f1496c0491d31f5ff4f8ab484556226db19d7be5cd7a45cd6e6e96b9d013fe298b0514b0125a0c047fd84af5604219cda2f83a1aafd3f0c247e2ded23796ba4fce5ebafa4f3c628e78aa0eee56f229a2bb40a9fb6a951992ece7f92d6c853435980f9dc7e689ff6903953fd3c9f5521227d71102ee86dcf802fc0455a19379a95add931581f6f828e8fd8280677268d654a72236e554bc35d0e8ceae856babb4eba5a839e0c", 0x0, 0x5}], 0x944050, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140000) 21:50:56 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) write(r1, &(0x7f0000000200)='E', 0x140300) [ 1967.141777] FAT-fs (loop4): Unrecognized mount option "ÿÿÿÿÿÿÿÿ017777777777777777777770xffffffffffffffffÿÿÿÿÿÿÿÿ" or missing value [ 1967.148355] loop7: detected capacity change from 0 to 39 [ 1967.158765] loop6: detected capacity change from 0 to 39 [ 1967.162967] FAT-fs (loop7): invalid media value (0x00) [ 1967.163624] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1967.166424] loop5: detected capacity change from 0 to 39 [ 1967.172318] FAT-fs (loop6): invalid media value (0x00) [ 1967.173343] FAT-fs (loop6): Can't find a valid FAT filesystem 21:50:56 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:50:56 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000000c0)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x101042, 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) unlink(&(0x7f0000000080)='./file2\x00') mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) 21:50:56 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe2030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1967.256460] FAT-fs (loop4): Unrecognized mount option "ÿÿÿÿÿÿÿÿ017777777777777777777770xffffffffffffffffÿÿÿÿÿÿÿÿ" or missing value 21:50:57 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(r0, &(0x7f0000000080)='./file1\x00', 0x8e400, 0x92) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0xfffffffffffffe2b, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xf, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x0, {0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0, 0x1}}, @void}}]]}, 0x44}}, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f00000000c0)={r3}) fcntl$setstatus(r2, 0x4, 0x42800) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0506617, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000040000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262742292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f40"]) write(r1, &(0x7f0000000200)='E', 0x140000) 21:50:57 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) 21:50:57 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='E', 0x140300) 21:50:57 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="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", 0x108}, {0x0, 0x0, 0x27ff}], 0x2, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) [ 1967.378471] loop7: detected capacity change from 0 to 39 [ 1967.390684] FAT-fs (loop7): bogus number of FAT sectors [ 1967.391146] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1967.396075] loop4: detected capacity change from 0 to 39 21:50:57 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) [ 1967.414588] loop5: detected capacity change from 0 to 39 [ 1967.430236] FAT-fs (loop4): count of clusters too big (55313406) [ 1967.430909] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1967.473894] loop4: detected capacity change from 0 to 39 [ 1967.486308] FAT-fs (loop4): Unrecognized mount option "./file1" or missing value 21:51:11 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4020000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:51:11 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) write$binfmt_aout(r0, &(0x7f0000000080)={{0xcc, 0x8, 0x7, 0x37f, 0x1a9, 0x6, 0x1dc, 0x4}, "af2648c87526"}, 0x26) 21:51:11 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/eeepc_laptop', 0x100, 0x1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f0000000940)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000900)={&(0x7f00000004c0)={0x414, r4, 0x20, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4e}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xda, 0xfc, "be992896acd8dabcec55d4f9cfc8e40c455e2250c793c9dd8fd8f05b054871fae3d5799a12be78dac268b4eea22a5b51692369ab6d7605a5ed0dfe3aa2cef69b160c05c6ed28d956490c9e5f2589f6181861e20cb31e6e2b5ba24e0e2abe4850e31b51c1203377faba15c9ac490268fae75fadca0b0585c084457db51e075006f7d0675315172fdccc8a32c3bf33c9b069d43ce82fbc48af560ecc85c1b8a63bb613651d12bee55b88e4063fef4ce7780505d3c3723553efe172069ea1c0998a28e1e95bafaa9d93b6890cbb85e40bce6ac0a83e6cee"}, @NL80211_ATTR_FILS_ERP_REALM={0x94, 0xfa, "c3b27be1b06f108194cea33e19e9860802f21727df896d084ccd641628bbfc736bd7f76ee9953132debdc1569ff01b96f06478702dcd101ae2f5fc920932288e64812e6689f72ecea18fbff68a3fa2efaa4716fd30b3634eb693e457bc7282c93bfd1dcc10beccb0a17068f04e56e791cb6bb8164d31af62b38428512681b4d68c97436d46d7329ea0094afa1e70b434"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7f}, @NL80211_ATTR_FILS_ERP_USERNAME={0xd, 0xf9, "b5de36155689808e4d"}, @NL80211_ATTR_FILS_ERP_REALM={0xca, 0xfa, "a4ec517bf5eba02c5615f6f0e4e02ce7036625248a286dd20ad9aaa4950191041d7a2376dfa5313bfc43a1c934be4edcc266b7a4f8bf636850eb17b67013cad41310c20f6353177dfbbfa58c26e04c5e83ee5573930db8ca5274885d25cb6591299b8d68ca7c1a4b2f84cf8bcc61e8727bf499145a32f33ee1ab5da19de1359977ecb02d6b9c59f221385796dd5ec16eab64418c1e198f85e9521468050ab82d7f05b651cd960ee61d7f6431f53216e52a9519e54901043776dbb4cffd95a7a3d58e87550fc1"}, @NL80211_ATTR_FILS_ERP_RRK={0x29, 0xfc, "b7a945e7fcc84276b076c85c3a8d4115a7fb7a849f70a389cb6828f9326ae6d9d30fccb97d"}], @NL80211_ATTR_IE={0x171, 0x2a, [@random_vendor={0xdd, 0x8d, "1cc3c38d563d68a607475a7f01f7f793f203ae08370b959a886887fbb28e54306b3ffd833f5170f97e3d866d3420f178040546e40fbbc265cb06923167516e733d5cdffd6a98de2a609f04a58a6e6ed5ac9bfceec8e9db6416b9dfcba62d952a9b711658a30b924d9ebe47d0f5e7869b23df6bf251274ad0d6447c30992c0a14e0586fd2a0d7bf636d9f1a2ef5"}, @random_vendor={0xdd, 0xd4, "3e13a47fd75a1177d80e55f8089dbecb0e20e91a4753b732ab4cc658fc747e7e22be509b7be0fbe667c0dd18a2b5c1be7d1b7c3b18d742bdf96fb6095004daf2dd8af908127bcdfc71ea41f41f19d285e216d33f354c75396f44c091ab51371f4b48cf89df05ced72d80fa37c989f160711975fe7601935ccc1137e94d95e700d9354657923a86721706262fa3675f84415a969903774db1d69a375d65137d8292c1b25acbe8b367c515b80cd5293b732276fb18fd5d3d64ed038275979470cf17c4793bb54ebd6176f68e2618bb8476b69865b4"}, @ssid={0x0, 0x6, @default_ibss_ssid}]}]}, 0x414}, 0x1, 0x0, 0x0, 0x4001}, 0x1) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xf, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x44}}, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r5, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r6, &(0x7f0000000200)='E', 0x140000) 21:51:11 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='E', 0x140300) 21:51:11 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:51:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xf, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x44}}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x8000000080000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0xfc9b, 0x27ff}], 0x0, &(0x7f00000002c0)=ANY=[@ANYRES32=r0, @ANYRESHEX=r0, @ANYRESHEX=r1, @ANYRESDEC=r0, @ANYRESDEC]) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) 21:51:11 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r3, r2, 0x0, 0xfffffdef) 21:51:11 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) [ 1981.657440] loop7: detected capacity change from 0 to 39 [ 1981.659211] FAT-fs (loop7): bogus number of FAT sectors [ 1981.659588] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1981.696751] loop4: detected capacity change from 0 to 39 [ 1981.740479] loop5: detected capacity change from 0 to 39 [ 1981.752206] loop6: detected capacity change from 0 to 39 21:51:11 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1981.774351] FAT-fs (loop6): bogus number of FAT sectors [ 1981.775253] FAT-fs (loop6): Can't find a valid FAT filesystem 21:51:11 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) [ 1981.911728] loop7: detected capacity change from 0 to 39 21:51:11 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='E', 0x140300) 21:51:11 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:51:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xf, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x44}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000480)=ANY=[@ANYRES16=r0, @ANYRESOCT]) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x24f) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="00000000000000002e2f66696c6531007f4dbad56315a99923a0c862c9448008387e83391eda58d251961735c6d63feccff8dd9f8a6ccc96c3333d9f740ad13fa22aec8c21ee510ac943f113031679d214abc65a4f79b6393a3a3881e7e2f05f7b83d0e9964fdcb1a0a80cfe5500"/125]) openat(r5, &(0x7f0000000180)='./file0\x00', 0x200, 0x21) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20010, r4, 0xa06c0000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) r7 = openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1/file0\x00', &(0x7f0000000240)={0x301000, 0x28, 0x11}, 0x18) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x24, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_BSS(r7, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x1}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xff}, @NL80211_ATTR_P2P_CTWINDOW={0x5}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x7}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x7}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x30}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000884}, 0x10) write(r6, &(0x7f0000000200)='E', 0x140000) [ 1981.956588] loop4: detected capacity change from 0 to 39 [ 1981.958230] FAT-fs (loop7): bogus number of FAT sectors [ 1981.959108] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1981.960476] FAT-fs (loop4): Unrecognized mount option "" or missing value 21:51:11 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec020000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:51:11 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002b40)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000006c0)=""/41, 0x29}, {&(0x7f0000000700)=""/75, 0x4b}, {&(0x7f0000000780)=""/198, 0xc6}, {&(0x7f0000000880)=""/205, 0xcd}, {&(0x7f0000000980)=""/70, 0x46}, {&(0x7f0000000a00)=""/120, 0x78}, {&(0x7f0000000a80)=""/27, 0x1b}, {&(0x7f0000000ac0)=""/86, 0x56}], 0x8, &(0x7f0000000bc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000000c40), 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000cc0)=""/14, 0xe}], 0x1, &(0x7f0000000d40)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000000e00), 0x6e, &(0x7f0000002200)=[{&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000001e80)=""/122, 0x7a}, {&(0x7f0000001f00)=""/167, 0xa7}, {&(0x7f0000001fc0)=""/27, 0x1b}, {&(0x7f0000002000)=""/81, 0x51}, {&(0x7f0000002080)=""/235, 0xeb}, {&(0x7f0000002180)=""/92, 0x5c}], 0x7, &(0x7f0000002280)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="30000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x100}}, {{&(0x7f0000002380), 0x6e, &(0x7f0000002780)=[{&(0x7f0000002400)=""/227, 0xe3}, {&(0x7f0000002500)=""/68, 0x44}, {&(0x7f0000002580)=""/226, 0xe2}, {&(0x7f0000002680)=""/247, 0xf7}], 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYBLOB="000000579016e8ef3c20927ee6495a0067cb4c00"], 0x20}}, {{&(0x7f0000002800)=@abs, 0x6e, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/254, 0xfe}, {&(0x7f0000002980)=""/93, 0x5d}, {&(0x7f0000002a00)=""/33, 0x21}], 0x3, &(0x7f0000002a80)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}], 0x5, 0x40, 0x0) fstat(r1, &(0x7f0000003040)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000002d40)='./file1\x00', 0x6c383e49, 0x3, &(0x7f0000002fc0)=[{&(0x7f0000002d80)="91bbd616b5cb9c6a3e3d13e02f3fc9ee6b6a1ad29ea66b6a4c1395d71d84f5160a8d8149b167de9c28584b839407d6b5ec22fa2ecd797f8f2295c9d351cd2bba8e4e37123dde6a9db12b323f9feb1117c22feb6712d0386b33aceb", 0x5b, 0x9}, {&(0x7f0000002e00)="1690f06961ebb2eb14b2616653c02782a5fac94bb6cc8d899b84a4d6b7531b72b22a45aca2d06bb8bfc7ed2a870261bd15c518ef67bb72d6ebcf2600f39ba0e526b209b09ff75917df8d61906e17280034f8085d8772c4a20f0733c87972eead90a8e2be1c16580580845f30eb0e76a6bd095517556867c08841ef231f07f201f3d020eb793c54cbcbaec79cec28fdae426319d92f005592e6b87fcdc0ee510b3bd43c09e094c6af357bf8675ce89adc53b94de2672863eee80f4a2c3e1b9b679e680189362952f95fdb9d89b11002de8126617559c783efbdb64d1989c8456cbdca09f02a3f12a9f32cb4d4", 0xec, 0x1}, {&(0x7f0000002f00)="4bdd5628e3ea8fa24dbcdbb9be3082b8f4f19b228f573369031ec5b82d05da2c7262a17112882e6364ed76e833030dba94ed79f7e1bd58c322f424451998e4023e60bf4184f0a88a65fd88a106ad536ebb1e428dd0fc603b42909121d867a7a04d3df6c26e460422093a6c99b2a85d5bc44553853490f208114a85aeedcd16589f4fc3380a99cba7", 0x88, 0x3}], 0x0, &(0x7f00000030c0)={[{@huge_within_size}, {@huge_within_size}, {@size={'size', 0x3d, [0x78, 0x2d]}}, {@huge_advise}, {@huge_always}, {@huge_advise}, {@gid={'gid', 0x3d, r0}}], [{@subj_type={'subj_type', 0x3d, 'vfat\x00'}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r2}}, {@fowner_eq={'fowner', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, '!*!!,@@[,'}}, {@subj_role={'subj_role', 0x3d, '&-!'}}, {@obj_user={'obj_user', 0x3d, '!'}}, {@fowner_gt={'fowner>', r4}}]}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r5, 0x0) r6 = syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000002d00)='./file0\x00', 0x97, 0x7, &(0x7f0000000600)=[{&(0x7f0000000240)="6ab4dbc5d0c7afca91000f75019344574626591ca69d13cc77c0eb4f3e736a7c7c5c188eb40aca7776eebfc599668d4d04cf426ec7324845c8d90be52d45b458d003bf0712c575241e6592d1f4fc552eea3e85de2940d86f1129686f8f12efec5da4f209892fa9058202345d0136c0caebe8424b73423b547650811cb6a7c07d8e05a5d33ea9bbc8811bac3ab17796d634458a0a7b85ea862daf47ace35ba3e5fa1ce6963286fd9fd2555d16ab813fb71434f20fe5b6c9bc69df598f0eb536e258c490f7ec8c1153b041966bc36eecd3b4bfbe83f21c8135d811", 0xda}, {&(0x7f0000000180)="cc2648faa0074d", 0x7, 0x9}, {&(0x7f0000000340)="a8d5f655df95890a7e61a1234d2dbc08744c57b953249437cd9003cfc6fadcabb74392e344e6867d70c27cecc1935257ea4891ab23e04ad6a7397fc10ba82ad16a66b4293e4e2f812b3757339165c867db34aac0148266e8943eb87165f53c4aa083d71e50a53b7ff178ea9652c2c3eb20ecc9f6de03d25c3c3e31be63dec0ba1500424884dca08d5a0294bcf7aaaf6e7781e5e0c4f67e5a7319ac010f932d6ed8795b73a7e760ec4eb8f5e3d835a42e3c905ba42f489ebd392b441eae0dd0dc47cfa6e4468071475da76d636963f79aa16c774f3296abfb9b817d0a453b0622c328f463b0c02ef158b998ba37047ac2df0661a4aac2610080", 0xf9, 0x1ff}, {&(0x7f0000000440)="bbae9226185053c970564bb77bdd8250d85b59763db7c4ae1dd6f7bc826cd6f0e23e61860a37c9e4c92bd051b4d0b90a3ef8e58ae68ab609418b6246c192990eaa029bb5e42dbfa1260ec8bace7399df8c786474eac46a7c3047b96f66d198592eb154563884d03c70ae37405ff02566539fcd1a363b8e67797ddba909e9443c92670aaa7a92478b7da528df5b1dd3a4b44d13fc528f4d1f9cfb4a44ae7eb0e64817290abf57665847f1b56863312ee08b21e8cb05c67e20adf1380620e3b41bba9c7c9e5ac725a8bb570d9b6b", 0xcd, 0x3ff}, {&(0x7f0000000540)="7bbaa9a423344fdfddece0ba8a860cfb7db83725cbc2ca0cc897679d1f78424a9e936b10500d39c04cea82e68f31ef10482c4dcdf66800fe4f7bff42ac31f86dae6974f29503ccafcf92358f2416df1d1154bcd20dda1546fccedd6e4fb5364ccd34a83717a305738f3cfc5a791b62f8df66b3e5", 0x74, 0x2}, {&(0x7f00000001c0)="f3fc3bbd327d90ba01c9b1b4764890356c0eee7f68250ca07e757578db1ef01281d6e88d0514d30b37a814eb1734b84998855398a7", 0x35, 0x8}, {&(0x7f00000005c0), 0x0, 0x6}], 0x2042c80, &(0x7f0000002c80)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x15012de6d06c6780, 0x2f, 0x0, 0x39, 0x2d, 0x37, 0x34, 0x2c]}}}}, {@huge_advise}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x32, 0x6d, 0x78]}}, {@huge_always}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x33, 0x74, 0x74]}}]}) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r7, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) openat(r6, &(0x7f0000003200)='./file0/file0\x00', 0x301, 0x45) write(r8, &(0x7f0000000200)='E', 0x140000) [ 1982.023691] loop5: detected capacity change from 0 to 39 [ 1982.074296] loop4: detected capacity change from 0 to 39 [ 1982.083701] FAT-fs (loop4): Unrecognized mount option "" or missing value 21:51:26 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r3, r2, 0x0, 0xfffffdef) 21:51:26 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) pipe(&(0x7f0000000000)={0xffffffffffffffff}) fcntl$setstatus(r1, 0x4, 0x42800) mount_setattr(r1, &(0x7f00000000c0)='./file1\x00', 0x8800, &(0x7f0000000180)={0x0, 0x6, 0x80000, {r0}}, 0x20) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xf, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x44}}, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r6, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x184, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6f4800d766ce34b5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) dup(r4) write(r3, &(0x7f0000000200)='E', 0x140000) 21:51:26 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') write$binfmt_aout(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="cc009405450300003c02000001000100a3030000000001000000000000000000347dbfb24711469c21300064b591be14f9c795030ced2e108c940066a3334efd4b4a7ba5f3040c87032f10a70a7144577117ed9fa9513c648699ef2213aac96aa39c6b39a34d1563156ba15149b9501cedcf252205001123416ef876f2dea2101d6c00"/386], 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c1082, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) syz_mount_image$tmpfs(&(0x7f0000000400), &(0x7f0000000500)='./file1\x00', 0xffff, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000540)="a7a4f4dc39ad42a17e3a700bad7a94abb69e84f6a5ffefe182dc9fd8fdbef91de4e429f6eb4059390afa245b8092953a6568af8e92ede458224a7b27defbc336e23ad6710658ec13a448f5d57896ef7500d63db05de55c04c60cdea247fbed4573d076674aa21ea0f43c58bf6afe9966ebbf8d", 0x73, 0xe2}], 0x4402, &(0x7f0000000600)={[{@nr_inodes={'nr_inodes', 0x3d, [0x2d, 0x25, 0x30, 0x67]}}, {@huge_advise}], [{@dont_hash}, {@subj_type={'subj_type', 0x3d, ',%$$:'}}, {@smackfsdef={'smackfsdef', 0x3d, '(:!()!%'}}]}) fcntl$setstatus(r2, 0x4, 0x42800) execveat(r2, &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)=[&(0x7f00000000c0)='vfat\x00', &(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='#$/\x00', &(0x7f0000000240)='vfat\x00', &(0x7f0000000280)='vfat\x00', &(0x7f00000002c0)='\x00'], &(0x7f0000000480)=[&(0x7f0000000340)='vfat\x00', &(0x7f0000000380)='/\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000840)='\xe8\"\x10\xc7\xd5\xa2\v\xd0!$\xd4\xb8^\f\xbd\xa5b9\x94t\x94\xff\xc7\x1b\xdeB\x1f\x97\xc1u\xea\xd5\x10Nr\xd2G\xf6\xe7\xddl\xe3C\xfe\v\xa3\xa7\xb3\x9d~\xf5\xef\x8a\xe57\x05\xa9\xbd\x8c$\xb1\xeb\xb2S\xcbr\xde\xc0Oy;\xfa\xff\x86\x0f\x82\rt\x92\xe8p\x8b\x8b\x11\x03*<7T\x88`\x10\x89\x81\xd24c\x87x\x1d*\xdfj\xc5\xb6y\xd7^\xb0;\x8dsv\x86\x05\x91\xfcj\xdfhc\xf3\x19\x16\xcf\x17\xad\xd8\xa01\xffa\xb3\x1d\x81e\x17\xe9\xd7H\xae\xcd\x88\x17\xed\xd3\xf7O+5\xd3\xef\x89\x8c}\xcd\xa6^r\xda\x8c\x7f\x8e\x10\x89f\x00\x00\x00', &(0x7f0000000440)='vfat\x00'], 0x1000) write(r1, &(0x7f0000000200)='E', 0x140000) 21:51:26 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) 21:51:26 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:51:26 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:51:26 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat2(0xffffffffffffffff, &(0x7f0000001080)='./file0\x00', &(0x7f00000010c0)={0x541000, 0x1, 0x1}, 0x18) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000001100)={{0x2, 0x4e24, @multicast1}, {0x6, @local}, 0x0, {0x2, 0x4e20, @loopback}, 'veth0_to_bridge\x00'}) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f00000011c0)=@add_del={0x2, &(0x7f0000001180)='veth0_to_team\x00'}) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000001300)) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000001380), r1) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001500)={&(0x7f00000013c0)=ANY=[@ANYBLOB="2c010f00", @ANYRES16=r2, @ANYBLOB="000225bd7000fcdbdf2509000000080001007063690011000200303030303a30303a31302e3000000000080003000500000008000900050000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000900050000000e2001006e65746465469c7673696d0000000f0002006e657464657673696d300000080003000000000008000900030000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003010300000008000900050000000800010070636900f9ff0100303030303a30303a31302e3000000000080003000300000008000900000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030002000000080009000100"], 0x12c}, 0x1, 0x0, 0x0, 0x20004000}, 0x1) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x170, r2, 0x20, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7ff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x800}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xe6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x49d5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffffffff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x170}}, 0x48081) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup(r3) getsockopt$packet_int(r4, 0x107, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa8000, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r5, 0x0) openat(r0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r6, &(0x7f0000000200)='E', 0x140000) openat(r5, &(0x7f00000003c0)='./file1\x00', 0x200, 0x1) [ 1996.512678] loop4: detected capacity change from 0 to 39 21:51:26 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, 0x0, 0x0) [ 1996.557193] loop7: detected capacity change from 0 to 39 [ 1996.558615] loop5: detected capacity change from 0 to 39 [ 1996.580768] loop6: detected capacity change from 0 to 39 21:51:26 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(r0, &(0x7f00000000c0)='./file0\x00', 0x20001, 0x185) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[], 0x24f) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) [ 1996.595268] FAT-fs (loop6): bogus number of FAT sectors [ 1996.596012] FAT-fs (loop6): Can't find a valid FAT filesystem 21:51:26 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, 0x0, 0x0) 21:51:26 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:51:26 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) [ 1996.674765] loop4: detected capacity change from 0 to 39 21:51:26 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) [ 1996.709014] loop5: detected capacity change from 0 to 39 [ 1996.733821] loop7: detected capacity change from 0 to 39 21:51:26 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x2024000, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') write(r0, &(0x7f0000000240)="59175bae4de9851150c9ef0daec2dbfc6c93d5a589df0ba1b702e63c31b6cecbcd08bae78d36d98e62b21bcb2f049a8fa7b5e2523ab6f293bc73de7bb87761e2d3daa373d3ba3144b02d70ec1084c52fbe49c64dac5a5bf3982d890535d048dd6ee9d370263ca82a1551d5868e1e904aca296e3b012663786b89faa11b6290f16ac423cf152149f1c813a9f91801e40bd00251abc7987f17c00c280f88c5", 0x9e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000380)={@private1, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) accept$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000180)=0x1c) 21:51:26 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, 0x0, 0x0) [ 1996.953755] loop5: detected capacity change from 0 to 39 21:51:26 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:51:43 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r3, r2, 0x0, 0xfffffdef) 21:51:43 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="55901e48393d12bbb246b3409e2806c50825982a95ba33e37c1db7a27b65c681b091898df49d24e3c824b8eafdffffffffffffbf86775c3a9f5786bffe1311db1a3fbedb589e7c16e527ac089bcc9d8a70d028f7f7ea3498684c0b7cf5527ce2c7f304d94c3415070d6a184d40573bfed2a2b2ae741c4f0ae1d7269f1adea5fb6831d94720c9d7850dfac898f7b15ae0167f595003ab5af6d87d8c10377e574e127802349b9e853c44128373c413ae2bc905867cd6942e4cc55ebd33f43b5902d7455afd67b60f4967320a1075a4d4570de625c9f02338da9a0bfd4e32b8810e82351e4612409fd4c2444fad3b34c8404bac692b9bc4e1e45704d6fd88e3f29965daa9106008", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:51:43 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:51:43 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200), 0x0) 21:51:43 executing program 2: ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000080)={0x0, 0x3800, 0x80, 0x3, 0x18, "2319d4dbce684af47f7271322c62d00a23a3f0"}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140000) 21:51:43 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) chdir(&(0x7f0000000180)='./file0\x00') write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[], 0x24f) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) mknodat(r0, &(0x7f00000000c0)='./file0\x00', 0x8000, 0x1) write(r3, &(0x7f0000000200)='E', 0x140000) 21:51:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fc}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) 21:51:43 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) [ 2014.031316] loop5: detected capacity change from 0 to 39 [ 2014.035859] loop4: detected capacity change from 0 to 39 [ 2014.058897] loop7: detected capacity change from 0 to 39 [ 2014.064387] loop6: detected capacity change from 0 to 39 [ 2014.087993] FAT-fs (loop6): bogus number of FAT sectors [ 2014.088752] FAT-fs (loop6): Can't find a valid FAT filesystem 21:51:43 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) 21:51:43 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200), 0x0) 21:51:43 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140000) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000080)=0x1) 21:51:43 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) openat(r0, &(0x7f00000001c0)='./file0\x00', 0x626400, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[], 0x24f) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) fcntl$setstatus(r3, 0x4, 0x42800) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000180)='vfat\x00', 0x0, 0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$IORING_OFF_SQ_RING(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x2000002, 0x110, r5, 0x0) write(r4, &(0x7f0000000200)='E', 0x140000) 21:51:43 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:51:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) pipe(&(0x7f0000000000)={0xffffffffffffffff}) fcntl$setstatus(r2, 0x4, 0x42800) openat(r2, &(0x7f0000000080)='./file0\x00', 0x40, 0xb4) [ 2014.230587] loop5: detected capacity change from 0 to 39 21:51:44 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) [ 2014.293837] loop7: detected capacity change from 0 to 39 [ 2014.326016] EXT4-fs warning (device sda): ext4_group_extend:1861: can't shrink FS - resize aborted 21:51:44 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200), 0x0) [ 2014.398453] loop4: detected capacity change from 0 to 39 [ 2014.399475] EXT4-fs warning (device sda): ext4_group_extend:1861: can't shrink FS - resize aborted [ 2014.496730] loop5: detected capacity change from 0 to 39 [ 2014.507827] audit: type=1400 audit(1689976304.233:14): avc: denied { map } for pid=10255 comm="syz-executor.4" path="pipe:[37526]" dev="pipefs" ino=37526 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1 21:51:57 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:51:57 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) 21:51:57 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x305142, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) 21:51:57 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r3, r2, 0x0, 0xfffffdef) 21:51:57 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) write(r0, &(0x7f0000000240)="3f3216970d52e5ca7416528cbc42e49bf285115b12c992ed7a683d88f34b8562de7ab2f979d410cfde4340307e0e7530c1ace55c69de2e98a28f8b3c95ac02004f134706dba29ac95a47d0d5b9d536a0b4477c1744a0be6cb517ba97e61ba766f5a09d4da896e1026860caa7e801aac94d22006ba1889252aec883763d3505f273aca77476e563dc484bcdbb9afdb8b4f640bcfab166c3e9e36349a184a0fe0f7dd4a2c82f555eafe2ddc74dcbefba3fd6f8e51f73cd956f0b744206e86113e3", 0xc0) 21:51:57 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:51:57 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140000) pipe(&(0x7f0000000000)={0xffffffffffffffff}) fcntl$setstatus(r1, 0x4, 0x42800) getdents(r1, &(0x7f0000000240)=""/191, 0xbf) 21:51:57 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:51:57 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000001000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2027.999853] loop6: detected capacity change from 0 to 39 [ 2028.009551] loop4: detected capacity change from 0 to 39 [ 2028.013794] loop7: detected capacity change from 0 to 39 21:51:57 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:51:57 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:51:57 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) [ 2028.070691] syz-executor.4: attempt to access beyond end of device [ 2028.070691] loop4: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 2028.072675] Buffer I/O error on dev loop4, logical block 31, lost async page write 21:51:57 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x200000, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) accept4(r0, &(0x7f00000002c0)=@hci, &(0x7f00000001c0)=0x80, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) pread64(r0, &(0x7f0000000080)=""/116, 0x74, 0xffffffff) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xb4, 0x9, 0x7f, 0x3, 0x0, 0x0, 0x400, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000180), 0x8}, 0xe0e8, 0x7e12, 0x2, 0x3, 0x2, 0x5, 0x8, 0x0, 0x800, 0x0, 0x100}, 0x0, 0xc, r1, 0xb) 21:51:57 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) r1 = syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x6c, 0x4, &(0x7f0000000500)=[{&(0x7f0000000240)="a705250e569eb918a24a86e764", 0xd, 0x930}, {&(0x7f0000000280)="918e2fd652867daeffcb6b933cf92bc96167d3f8917e165406e7ca7b967466319837bbf33e1ce49dfa24961e29dd0edd66bb6b0cd092da2d82a88ccb56870b39269d978d6c08870380641dca2ed1d2814ac6855ff3f18d4583a77fdde42a7f20553ac3749f521b6e4bf7dc434f378d1e2f5de876800b54bf78f5462155b36bc4a337d616dd2388e19ba3b229cc8c6767383085a7286e85d2bc003a71612f5e0f0121fba7ed1b438e36f714f1f3b8a3744f6be02e41a5e6aea7fd1f27c2ea7f03beeabb49471a8ea0f3e81a0e54ae25534f9fb9f104f421f4cca0e7c2f4fd2e", 0xdf, 0x6}, {&(0x7f0000000380)="d8c2debfc5aa4d162276809813745371fd60058026106953571325b9fe19b07865b6abd11c0b1dce8b8f6ea38e3371b84c230bface78bb8d472a0b888c4b406900652158070e196561383fc87bcc75c50fbddc27342678672b10c9d65b9e871f6466de457d2d7bb0f07f10e643eeb40c32f880c54db153a6d834defe3f71f9c0961a0a0dafe4702ac40217fb9ca1bda7d702d49cc0643a58f0eec5d03625fecbf01710d22c", 0xa5, 0x401}, {&(0x7f0000000440)="d7f7f5d2f57cd5416be933c27801da23e8896468c330f47afd1351d9cc835d7bb16c1c7c88a30410cd840fe8bd87a42ea7b406936b77b46dff26225cfa758ca97ad7a1ee84cc1839f46ee3b49efb167c38a36a0516853a9116307e9474fa7bd3dde8e9cbed058364a20c00143709585922044b68f8d8ab6c6ad0242ee4a08b894979a381", 0x84, 0x9}], 0xa0004, &(0x7f0000000580)={[{@nodots}, {@dots}, {@nodots}, {@nodots}, {@dots}], [{@measure}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x64, 0x33, 0x34, 0x33, 0x39, 0x30, 0x31], 0x2d, [0x34, 0x34, 0x62, 0x62], 0x2d, [0x30, 0x35, 0x36, 0x32], 0x2d, [0x34, 0x61, 0x36, 0x3e], 0x2d, [0x0, 0x65, 0x32, 0x65, 0x65, 0x35, 0x33, 0x34]}}}, {@pcr={'pcr', 0x3d, 0x40}}, {@dont_appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x63, 0x31, 0x61, 0x31, 0x32, 0x37, 0x62], 0x2d, [0x87468fe4c4f55a04, 0x64, 0x30, 0x34], 0x2d, [0x31, 0x36, 0x37, 0x31], 0x2d, [0x39, 0x33, 0x5, 0x37], 0x2d, [0x65, 0x35, 0x33, 0x66, 0x61, 0x35, 0x31, 0x37]}}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/sg#\x00'}}, {@appraise_type}]}) openat(r1, &(0x7f0000000680)='./file1\x00', 0x200, 0x100) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) r3 = syz_mount_image$msdos(&(0x7f0000000700), &(0x7f0000000740)='./file0\x00', 0x29, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000780), 0x0, 0x5}], 0x200000, &(0x7f0000000800)={[{@dots}, {@dots}, {@nodots}, {@dots}], [{@obj_user}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}, {@euid_eq}, {@measure}, {@uid_lt={'uid<', 0xee01}}]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000880)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000a80)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000000c80)={r4, r5, "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", "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"}) r6 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x800) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000000c0)=0x20002200) write(r2, &(0x7f0000000200)='E', 0x140000) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f00000006c0)={0x3, 0x5}) pread64(r1, &(0x7f0000001c80)=""/102, 0x66, 0xffff) 21:51:57 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) 21:51:57 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) openat$cgroup_type(r0, &(0x7f0000000180), 0x2, 0x0) r3 = socket(0x25, 0xa, 0x8001) truncate(&(0x7f0000000240)='./file0\x00', 0x5) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x400001, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) sendfile(r1, r3, &(0x7f00000001c0)=0xffffffff00000001, 0x800) 21:51:58 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2028.358822] loop7: detected capacity change from 0 to 39 [ 2028.387244] loop4: detected capacity change from 0 to 39 21:52:11 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) setxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f00000001c0)=@v3={0x3000000, [{0xffff, 0x7}, {0xffff, 0x80000000}], r2}, 0x18, 0x93d2014a1b901637) pipe(&(0x7f0000000000)={0xffffffffffffffff}) fcntl$setstatus(r3, 0x4, 0x42800) getdents64(r3, &(0x7f0000000340)=""/28, 0x1c) 21:52:11 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:52:11 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:52:11 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) openat(r1, &(0x7f0000000080)='./file0\x00', 0x8100, 0xc1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) 21:52:11 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:52:11 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) 21:52:11 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x900, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000180)={0x20, 0x1, 0x1, 0x81, 0xfb}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) fallocate(r1, 0x32, 0x9, 0x5) 21:52:11 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r3, r2, 0x0, 0xfffffdef) [ 2041.677481] loop4: detected capacity change from 0 to 39 [ 2041.680903] loop7: detected capacity change from 0 to 39 21:52:11 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000010000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2041.693767] loop6: detected capacity change from 0 to 39 [ 2041.701759] syz-executor.4: attempt to access beyond end of device [ 2041.701759] loop4: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 2041.702710] Buffer I/O error on dev loop4, logical block 31, lost async page write 21:52:11 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) 21:52:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001240)=ANY=[@ANYRESHEX=r0, @ANYRES16=r1, @ANYBLOB="150000000000000000000f0000001b000300", @ANYRES32=0x0, @ANYBLOB="28000f0080000000ffffffffffff0802110000000802110000000000000000000000000064000000"], 0x44}}, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000240)={{}, "90432b55614fa1497cf46d365eb0678f57410aa62638a245f195025ac8c7ca19628bec51f8f708d80939a0c3637494af16e08435d050ce4627341f58ff6ddcd9dbf15088e8c145cda788189039f656bd18feb0eb260756fc44ee0aa9f9f9363f7fbd859a2a1192c81e6a1966bb0b6584f96f2a78217d32fc8fd7760c5f03887cdc08cd8c1be58729388c698d3fc58501677a81007cd6f7f04ea4a3059c635bbe7031eca574a9a7d7c2880de1043610696ad3143b38ba37d1fa5190f85c1edf777352183551ad27779c4362069f2472dfcae051a1873cba23224d0d387c514e2aecad1528ec5a2730a81805dbdf8ccffe9002c7f089854fb9473e102134798e5c9397a11605ab26b8eaf920d964e2ebaf5ddfd10c33fe6562245d7203c3b00cbfd74d1ae0d58ca2cc652540ed695d40c71378b7a66271ca0c3a8d240ed6b44a9c98017167eb55570db6e3b6e2d2a0f0055d3ae7e29f00b19a38464edf9c34498e43e122b07388ec63a7ca9dcd65c5fcacd2434f59c66ee89d1406a35fa12c75183cc1dbcfaef817da9eb6cb18c964598d9badadd06fa796835fcf7c0c2a4b48ac12622e0e38fc9914114525cbd7b67cd430c445830287e4bff65f1e12f90f34205dcb70f8f60239e11c24050d37d16be992313b92a788cfb41ded9efd3b6bdf3a761462d1e3370b76e6ca0bbeef388ff518b7933a4e2311a62a690601b7ff02a396625b3a45d1b09b504d30662eecaf306337c8c0dde6d129337629a7c736bef683d7994634ee68780925c39f0780394b667ede1a259d9d0d08423152864ffc33e344fc642df2d1e2086d9e60a16b3009244e58d5c8574ab6e010e6a7f66e808049888f4931414a2d8ea67cac9004c3a1d04d8849e815cddef9aa2465942fde5f38be944750cf46f1d6b5c907d435db8bf9c1f7ac207c3e3f0fbe0eca86a63d347fec359591b5753e0b775fb602810961abc24d54158ff8dd031bef1fc40df6fb92b55e70959550032910c5d91d5e942e8f8843917628fec8b893316510c04e48f25fbe57782fb20841877bddc2c06d47b4f714dfa7db28591b8ad0a8214bf7ff26055c08e4f5fbd42f374b0b38c7696c76ab9e94f47da3abece1458c840e6323827c6c196e045e6e6c967dc9cc391689d7d4792083ef118bc6175d40f056aa26f87ba6ca754dce46260d1e10de564e8c35ab3585e97cab1820198ed2da2fc7c4a0c5645e81ee1035b000ea4b89e21dde5f1a94c24796a36f8b01a9405d9cc39aeeeb2d5dd68ae233033a978ec3d5f7f1d7f065f6b91adb817efac3a0bb1fd1748c6a28e2017789f422c6a0e16b76ac9b6f67ced496434fad855a56fceb4b104c43ce73c1dd02f2a0a8a0e954e4c1bac83fe10f25de7d326509cd6f67069376d1ef6b57f28a8e039d7e83acfbc96a4de9f59f2f2dff0eb211d7be93a5290b6d7fa9e3054cdb40ef399f4156a75e9d1f27c36b885f90c8b5f1334d49441a6ce7c637e6a494962d5ec0cff2ee7c5df0f8f554be0f14a13eb97b5b0b93b935ab748c9d39a65d588e65f855d2d64d787f4bc2dd8cb5f5ee87f3f8af2c0fd510e1f9e5ee91e57b579918fc65517fbcbf89602bfb68864145521744abdaa8b28247d8a0b6f860c9b1b00fad954fa0b1c096e72a19cd0553fb7398ea75358c1edebf08db36d45493e88afce4ee1d5b650bec28f6c3e540f13a4c2e6905096d964fecf6f523ffb00016e170de530207e600aeece199cb175bd7abe0ec4acd067e84c320f287d32960f4256e091ad3d5449ce21e7092e617776ec8cd135b8d4e32a1079fcdd52b35c1e3744cbe8937759527336c1842f7371bdcd31ef2558f611ab55499b1dd22db1ef4e0ccdf01f92667a2ae9b774e7b781abd94f516530057ff3cab38ea55121587445347fb02d6e95679a2f22884b2184e3880e88183267af798707f71c83a9599ebe95c2230fa37479c794d70908c26d9f8fa4505ddaadd04ca22ade3a76881f546a4c084da29a374eb98d0b0752f19e3b8c33bd6c4f38f91076abce0a5c0977ba0cababff893466b752c4c3d866c593d0f94a21dfd7df03695d2b0c8bc2744c1df4a81df6af054f6786cca550fb8c2f896b951fce0fd426483c449dbccc729ede6badfe426e25cc9537bb5f8e3edcae27bd0a6ed04dd7390636e57abdabbc919eff7bdefd9fc6ebaa84da20e34a400cc043322d118e03460e0377fafe6b5b9151dce73c7933fe345dc701dd993ec47b99b2746d5ac71612dfa19808ae2a66d03a8c132749afffb20698a952d8a84401496f6651fb9967c1261e6229c0b89fff38e28ba88c2d9ced995b79843dc509a2562a0db90707a3f52b4843f85573421bc0756bb15f7cc273bf4c21801a1b77d233400201c8f6ee2d82060256de91b8c72721ebb91a89a400811522d9a6c5bb5860394c269eb0869564c6e113bcf6be7b1d72891086f7d39afbff5fdac3042698a14f78e2db912a2d63d510d804e6f8173a8a567e74b81ae02fa6aee63a8d21a25617fa4541ab3013a895b56ebcc3780b26d78b4950a60427f7d8c641a911bac03651e61c3f84692bda69f42c50de4a416ae751176d41fc6340fcd18197bfd1190c1febbbe9499bd6709fc63a4acbc4c3cde0a3160a981b6fe0f19891271f91edccb75d48d01e9329d2708576b58c0462489e3b5ee572e2ba346ceff649443a5dbc7ad1b0f1823f4832d2f697565b76e8f062e7fdc8a97e1e2014ffb8e00d04fdf51fd6d0e154fcb64e72cad6d14b73ec1767bfb23f378c45c7b1389a91f0169c5f25b9f3fb72392d87890c3f5d501f4a07060b7f364234f06cf9adfa2c8f545dfab1c2e6eb24c8204d16cd9a514b238af2ed57c68575c878e6f0e0182b068533a36e37c2cdada12b56db74a9423404dbbef1b3e9ce8601f7666d699dc58267490470f95b212fb96d7522d552042d5dd8b4de7fdccb34d3c0b2a70f5517ecfdc3ad00071f27316844af858a8e5e1a4ebf84aa0e3e2a1f06311e3bef54692769ec70c85f7353e1d121a6c66c564cd3b130dd38965ad8970a3dbeaca178c0f588d4a57abb4cdce8b8f0cdbc57de51a4d59c3aa3a74ae4ffb69d0f44a08fc62ad710ab74c032c4eebc4dcfb81dade356ed3f8a08371070e117035ee7d5a38f155ccd5b8db9bb5b96f8b26439db095331ef5f8eeace3621885fc289010d4a0466f2756414bf0276da475048a0f1f36d7eab24d356731253bda8876c7e96e7b5c92d56caf4ef20bd63935a8ee947beb9e3ddac558f27424c71ae223089b52b7efd8c6514fb1852aa451b66ce5781168483fd74cb8d81805304caa56cd50da8663ab60f183db14b6df56237a5d37f143c1ff4385e037e7bc7322187fb4e7bb50b7fbc94c78eff5fd95a22bec6d39aac17d12290b40c11a0296809c90a6d180567f793e782b354c5ef41c2d497a2c8f2470b36f3bbf692189ed95bf9ed9f4dff9e32cde1bc265f909480d6372cd57efb5b9aee95014e8adadae04e9d4f685934cd8534a9f6e751173f041ae983d46e8b3f9377955b86dc9f2e3e413d1f5420244d8d8fabca609bcfb850d092a57f9863a58b5ff2e85c1287bbf4f867654869d200626c9044aa2754775063e70a3755783329b534ce8ab71e5849b96b0bc773e9bec0803cd20f7312c4859f35bb4cb9128b9e47936b107a5ea4df4588606c41bd95e8e1e8368e647ca52b2517cc2a7f5ee389c5b8ec7ff446b1367e493885fbaa2ac143979685c63c19686d88536ff7bdf9105b6b868b78cde5db51892c2061602e7f2a2711bd6742dfe2c58efbefbf2c32c5c058c5f290100ab302858ba6f7e0ef44ded3f3b305b959f71dfb8f682d9c09dcf2528bba5479afaab1e4631c29d812b5776f6d50c1eebcac11e563abce96187eb601e28d3239be3941c996254d2f70c8782d0006d3b987d73f1ee9773271d91329ca4f71ab80bf7efddfd7460f6e8e7c9c0b67a89ed7766832c81f82e64d38fd91e6a88bcaa8459e53b2dedfeae48d9ff700c2883602a5410c2d94e6c0c71bae100f17a04594ab14482836c896bd798e03bba82a22e128ec3f9e29525faf2c410dc54ea9a0c82a4da291966312252810e080bdcb90b1ba5480fd327044a58df86da916cdd812adb79aae02089b76ab75756066aede131301421fe0ad46f5f41be3e5b4933dba479a882263f9881566e8c4e896874dfe056cfaa858facb23f0d37d2ce7622edcfb7b7f0949fb2d390bc671b9d18b1a3dd3c25988c80db831b935563b6b7f00fb46c6752c527bb1269dbc6638c53743217b811dd96c5f27943aa7bc2413a22f6292d3d11cae3776c0b49704d5e09f02401185b62aa556415af97d11ad49e27369c7b505722068c7b3c26d9788ce0992f9bc5087d7974d6b2a88052542979f276440f67e2b71b51b1e54ab49ea7fb3600df57ba6fd97df2c3c38d970fc07baa1ded62143a4d69334601188d1526f75fe28288e34bcd8ebdb555eed45af1b64e9e90b73bf9cc4a65a03660e254fb899e09ca84ced45fabb1b1704e318e080d10d82f26889a27c226aeceee6041a74291fe2d57ca2545cd3587baf2c91b1689ace0f2473b6233e4494e5f5447b13b2bdae483568f3d27931b91649572208354a48f019255b75a9297dd6b0d36c67f8c2b1d0de1c45610c01a7e3fc5e152c3b55575dd47e069980544006e9198bafe7295b7959b0cf6084cbc3809da6f980904508a1eac37a2936cf3e541070dc8f0e1bd12015e9aa692def0ed022787f8a1600335132fe1a1e0ce47cdbe2f03235596b58af4b700567a2b436e4317e75895c1b442f8cf35b8e33a74daab8d4d4d8949692284718e96327ccd06d5db37f89de2a2e43b68c41039cc3d068e545fe182751679f3a07915473857d75a1861d3ce00e3e8ba0f065240e81789495189eb10aa3c2266f21f6b304dbd1872dfcab42c414f13a30780e38c77f08708c8fbd4f8cf94c7853b570e89372fa22de62fd91d18ac05c0fd006f5eb04a8549bbec788b7136d5bf15b353c22f02f71f2a4b920fb367d096b663eb96a84270edcc146aba379535cbacf266f944b8830da66466312160656f4d8ca196bb204df471f60cb0baa82ec74344c3226ef00e79966bc47fe0f0717e68b05fce4df159c8c98b134c16921aed240d7766d2488b783af1455e788ddeb832c8cb3af2974fb8b365456285e6b55b5331e00d475024717ca722ecb180069dd4c8b19dbef70a2caf54c3d837123ea943e53e840f7ee587e1a9885a75eb5a885b83313098ea3c220fb608cf0400c340757ee0cf33abdb17e0604a66bbc82a847b2d6cd46393be3100f4f0ab8b23d19c86534e724a2c4676dd23ec8a466e247fc1342358efd76602103a2a62bb22778a8ed2601b1062bbd47a4af4859b4965fb47b0db15e8ddd0e57f6cf2d5a0b1952761dba9b9cc2ffc62b6e72af36717877d060e254b439217d855579f920b06e3bbfe8bb334b14c84e367917a615549a9c01cfb9f56ba4c5c1caf5ceb51abfefd5343bfc120e8cc311ea91b4fc9a28b6f62ce8ea57dabd2b61c10f4f0b7f330227ac428d118f72aa129274c6e4ab310046192f5c44d002d912c7f449803a9c48164387a5b8f8dacfa32b3a7f524dc6c256d8be4c60ccbdd3c148a05ff1f10ffdf1289b2fe5c74072d5409684cca8347f992762d611b440d5669652eea93d0dd4c9b131160e8a269689a68f991d34e705f3961968c1aaf50bb9bd5bea661a1bf62c5f8d77c5cb0c7327e63e4082a46a4dd8690e11348339aab0c5e665a9fc1beb058"}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000440)=ANY=[], 0x24f) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r4, &(0x7f0000000200)='E', 0x140000) 21:52:11 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) [ 2041.778057] loop7: detected capacity change from 0 to 39 [ 2041.800347] loop4: detected capacity change from 0 to 39 21:52:11 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) 21:52:11 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:52:11 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') utime(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0xffff, 0x2}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) execve(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000400)=[&(0x7f0000000240)='vfat\x00', &(0x7f0000000280)='\x00', &(0x7f0000000540)='\x857\x04\xa6\x0e\xc4\xf6@\x18\x86\xfc\x7f\x16\x1d\xbf\x1a\xbe\x8a\xa3y\xfd}\x0f\xba|\xe70xN&[\x98\x19\xf6MI8\xc9\xf1V\x83!\x00\xf7\x9d@\xdaj\xa8\x8ah\x06!\xbb[\xad\xeb\v\xe2\xf3I\xb8\x83`\xb7T\xdd{\x02q\x16{\xa2\vkf\xba\xe6\xf1\xbd\x8d3\xe8\xd3@\xa9\x9b]\xc8\x8e\x99c\xf0xY\xdb\xcei,\xf3\x8e\x9dr\xba^\'\xd3\x06\xc8)\x9f\xa6.\xdd\x183\xcf,\x00\x8f\xcdvA\xc8\xef^\x95\xdf|\xd0\xdb%\xb1\x1c\xd3\xe4\f\x92\x84\x99\x13\xbed\xda\xa2@30b\xcb\xce|x\x1f/\xfd,\xd1:a\xf7A\xa2\x94\aM\n35\x8ef\xa8\xbd\xd4#\xf2\xa5\xe3\xfd\'W\xd1\xf4\x13S\xd9\xe27\xf5\xd95\xfa\xd6\xb8W\xe1\xc2ZA\xe3+\xc5\x00\x00\x00\x00\x00', &(0x7f0000000300)='*\x9a&#\\]\x00', &(0x7f0000000340)='\x00', &(0x7f0000000640)='\x88\x9c\xd7\xa9K\xfc\xf8\xc2\xb1\xdaO\xec\xc7<\xf6\n4\xf3\xaa\x8d>\xde\xa1t\xe1\xff\x1a\xc7X\x9c\x01\xc0\xda\xd8\x03|\x1f\xf7\x91\x12\xb3\x1b\xb3\xff\xc8\xd4o\x87\xc2\x19@y\xe1Wj\x1cs\xf9\x1ao)A\x9c\xd4{\x1263a\xcah\x9aL \t\xe9\xc4\x06\x0e\xc8M\xb9\x95\xdb\xd4\x15\x00F\x8fS\xe6\xaa\xebx\xf0\x89$\xddE\xf6\a', &(0x7f00000003c0)='vfat\x00'], &(0x7f0000000500)=[&(0x7f0000000440)='$;[]+].&!}@\xff$^)%(@+D', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='-,\'\xee']) write(r0, &(0x7f0000000200)='E', 0x140000) 21:52:11 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:52:11 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) 21:52:27 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:52:27 executing program 3: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0xdf, @bearer=@udp='udp:syz0\x00'}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') syz_io_uring_setup(0x60da, &(0x7f0000000080)={0x0, 0xae76, 0x1, 0x3, 0x3e}, &(0x7f0000003000/0x1000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x14, 0x0, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd=r1, 0xffffffffffffff01, 0x0, 0x8237, 0x0, 0x1, {0x0, r3}}, 0x2) r4 = open(&(0x7f0000000680)='\x00', 0x206002, 0x12a) openat(r4, &(0x7f00000006c0)='./file1\x00', 0x2, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xf, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x44}}, 0x0) vmsplice(r5, &(0x7f0000000640)=[{&(0x7f0000000400)="e8ff3608cb19c73dca6dde3eee6877a4b5a7dffe3483ac7ac8228743f445a6ac5a45c8b2fdda6d595a9cf08b9c6b799cb24d0b289602f2d3cea8863b25d5eb878199887bf33931208a16cf408fbbe2f0fc0c9d0078605a245d8dd7c58f1582f6ed1b58a3a284b05934473941aeb0e64cc57f8b29efc3581784640c70b162b18daddf6bad98094c3737347dbb2aac84319600b6d03d57d294520f46a65a22693bdccc972d3d6c590aad78465bdbc61f39a3db315e0274ac97d30a1344", 0xbc}, {&(0x7f00000004c0)="85639d57aa5881f743bf97037c9bca800d9ca6db10414433073cffc500391fab997244c0d59d91cc2ae23613d2359edaa0283c9795e8d14dc94a7a9acd19f4a371d9e4996b2e92f76d2e749d247d4c96dc4b2cc23ba63f0a1237b0b9d7af4035ddd13c40c327b61aa41339ce854664784886d9f2a3768cb44af567edaea315771295f00dd571a18d22428c2bb823836fc0df81f64758c2779f302d83c19d64eac40c8f01f60ba2509185f18249360d", 0xaf}, {&(0x7f0000000580)="cc1ccb3fdad9ece6c814e65391bc66447f05d533f424f1f8790f8d86c576843296dee18108d19761b1a2c66c81aefb9ee0340de9bd66d3df4f408555c5d6ad58eca946f75e2c1e76bf43c70b0270c0aefe058c59fdc43db8c16a3d8d4b", 0x5d}, {&(0x7f0000000600)="3ac3db5fe8120aebc89b3450f62bbc63fb", 0x11}], 0x4, 0xc) r7 = openat(r1, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r7, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r8, &(0x7f0000000200)='E', 0x140000) 21:52:27 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) 21:52:27 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) 21:52:27 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x10800, 0x0) r1 = open_tree(r0, &(0x7f00000000c0)='./file1\x00', 0x89000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r3, 0x4, 0x42800) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000280)={0x80000011}) mount_setattr(r1, &(0x7f0000000180)='./file0/file0\x00', 0x1000, &(0x7f00000001c0)={0x100000, 0x100002, 0x50000, {r3}}, 0x20) 21:52:27 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:52:27 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r3, r2, 0x0, 0xfffffdef) 21:52:27 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1f}}, './file1\x00'}) faccessat2(r1, &(0x7f0000000180)='./file1\x00', 0x100, 0x1300) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000440)=ANY=[], 0x24f) pipe(&(0x7f0000000000)={0xffffffffffffffff}) fcntl$setstatus(r3, 0x4, 0x42800) openat(r3, &(0x7f00000001c0)='./file1\x00', 0x800, 0x100) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r4, 0x331be000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c1042, 0x0) write(r5, &(0x7f0000000200)='E', 0x140000) [ 2057.964612] loop6: detected capacity change from 0 to 39 [ 2057.982528] loop4: detected capacity change from 0 to 39 [ 2058.001563] loop7: detected capacity change from 0 to 39 [ 2058.010325] syz-executor.4: attempt to access beyond end of device [ 2058.010325] loop4: rw=2049, sector=40, nr_sectors = 8 limit=39 21:52:27 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:52:27 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) r2 = fcntl$getown(r0, 0x9) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x500, 0x0) clone3(&(0x7f0000000400)={0x10000, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f00000001c0), {0xc}, &(0x7f0000000240)=""/106, 0x6a, &(0x7f00000002c0)=""/133, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2], 0x6, {r3}}, 0x58) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r4, &(0x7f0000000200)='E', 0x140000) 21:52:27 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="1b901e48393d12bbb246b3409e2806c50805982a95ba33e37c1db7a27b65c681b091898df49d24e3c824b8eafdffffffffffffbf86775c3a9f5786bffe1311db1a3fbedb589e7c16e527ac089bcc9d8a70d028f7f7ea3498684c0b7cf5527ce2c7f304d94c3415070d6a184d40573bfed2a2b2ae741c4f0ae1d7269f1adea5fb6831d94720c9d7850dfac898f7b15ae0167f595003ab5af6d87d8c10377e574e127802349b9e853c44128373c413ae2bc905867cd6942e4cc55ebd33f43b5902d7455afd67b60f4967320a1075a4d4570de625c9f02338da9a0bfd4e32b8810e82351e4612409fd4c2444fad3b34c8404bac692b9bc4e1e45704d6fd88e3f29965daa9106008", 0x0, 0x0, 0x0, 0x0, 0x0}) 21:52:27 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) 21:52:27 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:52:27 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x72737db5}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xf, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x44}}, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f00000000c0)={&(0x7f0000000080)=""/1, 0x1, 0x73a, 0xce}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) pipe(&(0x7f0000004600)={0xffffffffffffffff}) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r5, &(0x7f0000004740)={&(0x7f0000004640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000004700)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x4c}, 0x1, 0x0, 0x0, 0x4028810}, 0x40000) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xf, {@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x44}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[@ANYBLOB="880000004911026c341eb067d2ff186662e0d89606add941cef7ba6e218f5a526080300401e8b0161bdb82641e46b559215eff1308edef5079f579c18da3b44cfc567c08911bd83f54d08bef821a333a194b8226a452f74cd7493da05cc42126c1dca21841f89f4e80095fe341f2b82d469acf8f36cf40c6f007f3acbdaf563bd06866373b0d605d1dc6d4dbb3da9cb8e179b707fd535fe3d0a5f425b95227e7a12862336697f75a0ca892651a3d5a0cfab34ef5", @ANYRES16=r7, @ANYBLOB="000200000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="6c000f0080000000ffffffffffff08021100000008021100000010080000000000000000640007000105a4300560842503000c05dd36c52ca6bce3cc9ec24a79e811e83a4067a73bc9e159f4cfd23d61ca9dadaf925585b7cd5858d4cabe3d372b17e5fd4a5ce61fa65cdab3"], 0x88}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x19) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r6) sendmsg$NL80211_CMD_GET_WIPHY(r8, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x28, r9, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x70}, @void, @val={0xc, 0x99, {0x1, 0x59}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x1) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xf4, r7, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x40}, @void, @void}}, [@NL80211_ATTR_VENDOR_DATA={0xc8, 0xc5, "54418d03a40b49c6b6de21cb5d93d9effcf893802693271de4c92bf466e82ac8d1ef24696ca3a92a534aa1b95af445c43fb21da3a3be3fe8a71a2102fe5bf574f9465cbda71cac6c2639a8dbdbd8c9a0de506f529dad688f262aa53d7a4181c81e774c0896f625be9ca06d4fc633ac2cd2d685d25c9e1e41e0f894bb5baf3cc7767b20e181c526fc650eab2478216e67acb924e4856a73a90c3b5ff5aaa232eaad07778b34e89dfc749c8486d33e64964d973ab6c47c2c893d1f8a7e15620de0acabfe66"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004080) [ 2058.181013] loop4: detected capacity change from 0 to 39 21:52:27 executing program 3: io_setup(0x1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000ac0), r0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) 21:52:27 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x301000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2058.255836] loop7: detected capacity change from 0 to 39 [ 2058.290191] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2058.352764] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 21:52:28 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="55901e48393d12bbb246b3409e2806c50805982a95ba33e37c1db7a27b65c681b091898df49d24e3c824b8eafdffffffffffffbf86775c3a9f5786bffe1311db1a3fbedb579e7c16e527ac089bcc9d8a70d028f7f7ea3498684c0b7cf5527ce2c7f304d94c3415070d6a184d40573bfed2a2b2ae741c4f0ae1d7269f1adea5fb6831d94720c9d7850dfac898f7b15ae0167f595003ab5af6d87d8c10377e574e127802349b9e853c44128373c413ae2bc905867cd6942e4cc55ebd33f43b5902d7455afd67b60f4967320a1075a4d4570de625c9f02338da9a0bfd4e32b8810e82351e4612409fd4c2444fad3b34c8404bac692b9bc4e1e45704d6fd88e3f29965daa9106008", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:52:28 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="1b901e48393d12bbb246b3409e2806c50805982a95ba33e37c1db7a27b65c681b091898df49d24e3c824b8eafdffffffffffffbf86775c3a9f5786bffe1311db1a3fbedb589e7c16e527ac089bcc9d8a70d028f7f7ea3498684c0b7cf5527ce2c7f304d94c3415070d6a184d40573bfed2a2b2ae741c4f0ae1d7269f1adea5fb6831d94720c9d7850dfac898f7b15ae0167f595003ab5af6d87d8c10377e574e127802349b9e853c44128373c413ae2bc905867cd6942e4cc55ebd33f43b5902d7455afd67b60f4967320a1075a4d4570de625c9f02338da9a0bfd4e32b8810e82351e4612409fd4c2444fad3b34c8404bac692b9bc4e1e45704d6fd88e3f29965daa9106008", 0x0, 0x0, 0x0, 0x0, 0x0}) 21:52:28 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) 21:52:28 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2058.527005] loop7: detected capacity change from 0 to 39 21:52:41 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) 21:52:41 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x10008, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) 21:52:41 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="55901e48393d12bbb246b3409e2806c50805982a95ba33e37c1db7a27b65c681b091898df49d24e3c824b8eafdffffffffffffbf86775c3a9f5786bffe1311db1a3fbedb589e7c16e527ac089bcc9d8a72d028f7f7ea3498684c0b7cf5527ce2c7f304d94c3415070d6a184d40573bfed2a2b2ae741c4f0ae1d7269f1adea5fb6831d94720c9d7850dfac898f7b15ae0167f595003ab5af6d87d8c10377e574e127802349b9e853c44128373c413ae2bc905867cd6942e4cc55ebd33f43b5902d7455afd67b60f4967320a1075a4d4570de625c9f02338da9a0bfd4e32b8810e82351e4612409fd4c2444fad3b34c8404bac692b9bc4e1e45704d6fd88e3f29965daa9106008", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:52:41 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f4ffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:52:41 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000440)=ANY=[], 0x24f) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) 21:52:41 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fb}], 0x80004, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee01}}, './file0/file0\x00'}) write(r1, &(0x7f0000000200)='E', 0x1) 21:52:41 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r3, r2, 0x0, 0xfffffdef) [ 2072.274070] loop6: detected capacity change from 0 to 39 [ 2072.303532] loop7: detected capacity change from 0 to 39 21:52:42 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) acct(0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000013c0)=ANY=[@ANYBLOB="440000005583a10f7d30ef33b04b98765372b03c85011e5d03bb47b3523a57bf992982380749fec8fe3e34b22d0ac6eafa5330e3b6ab0b435e78b60dbec24e13868d766298678d6185", @ANYRES16=r3, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="28000f0080000000ffffffffffff0802110000000802110000000000000000000000000064000000"], 0x44}}, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) statx(r1, &(0x7f0000001540)='./file0\x00', 0x100, 0x80, &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {r4}}, './file0\x00'}) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[], 0x24f) r5 = syz_io_uring_complete(0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000017c0)={{}, 0x0, 0x16, @inherit={0x80, 0x0}, @devid}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000003c0)={{}, 0x0, 0x0, @inherit={0x70, &(0x7f0000001580)=ANY=[@ANYBLOB="01000000001206000000000000000000040000000000000000000000000000001a000000000000003f000000000000000500000000000000fffbff0dc31dc9ffbf070000000000000000000000000000030000ba3261d8f9f97200000000000600000000000000e5c55a4b7f122deb67df9b61dd89b55746e02e05c3d1eebac61b395f0816f98b7519126c383aa785ac426d7023879d1993c59102a63948ecaef997ba023fe4c25400"/184]}, @devid}) ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f00000000c0)) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r6, &(0x7f0000000340)="0272fd7344d06a6745", 0x9) [ 2072.403558] loop4: detected capacity change from 0 to 39 21:52:53 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="1b901e48393d12bbb246b3409e2806c50805982a95ba33e37c1db7a27b65c681b091898df49d24e3c824b8eafdffffffffffffbf86775c3a9f5786bffe1311db1a3fbedb589e7c16e527ac089bcc9d8a70d028f7f7ea3498684c0b7cf5527ce2c7f304d94c3415070d6a184d40573bfed2a2b2ae741c4f0ae1d7269f1adea5fb6831d94720c9d7850dfac898f7b15ae0167f595003ab5af6d87d8c10377e574e127802349b9e853c44128373c413ae2bc905867cd6942e4cc55ebd33f43b5902d7455afd67b60f4967320a1075a4d4570de625c9f02338da9a0bfd4e32b8810e82351e4612409fd4c2444fad3b34c8404bac692b9bc4e1e45704d6fd88e3f29965daa9106008", 0x0, 0x0, 0x0, 0x0, 0x0}) 21:52:53 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001340)={0x4f0, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4d1, 0xf, {@wo_ht={{}, {}, @device_a, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @val, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void, [{0xdd, 0x83, "e6cff18830f67646769c89b204294be14f705c666bdb2a6a5e79491a9129180c8c1cad3ef8107cada71adf6c95d55a30812f21f18ef55ffc5b633711f3276496ef25c03514e41d67d68dae44aa8e5fb7972fac7ae5e4943231e82402d6a97c3ddb8c8f83d8e15c54dc625274f315b5d0a920e619b792a7457e17c5c9ad46c1352ecdab"}, {0xdd, 0x49, "ff4e7118c7fbbccb57933f98a88c96b9208ae2dd3706d160bd598ce14fd29079274040de92d1bdf992f20b48992fbaa90497ff5d497eed7c02b1a87593ae17c4a713ab222bc552089c"}, {0xdd, 0xe1, "065f2f565d35fa9f174cd8406dd535b7aa58a6841e5ab28eb73fc5c51cb2d97536a910945bcbe965d698ea56a4aa26d0ae59e3a23018acfb0c5f95f180cba24dbac400add86af737a074c663b890342e65574d0cbc0bd28ba44e56b3881c236463fa6592d2b4b743bca93418a7f199e6b195657670100518e86130bcb554b320acf0084862f1df3241c2e01ed30cf6f4e785bcc244aaf83f1a682ba608bb931509dbf049ce30e0653b7ee3af6e508f0851b4a0f00100652639e429bad9a3e56f1f762500c57bd7c4d6367fd04c17043b69fa6a487314860e552a1ad9379554b99b"}, {0xdd, 0x7b, "3235816017cd35df2d2c3b81ee147e833f2800a8f902a1e6256001d62a248190f2a4486812fb5b17fab14267e21dccd6ba42b28feec4d7abdc4875f24eb15f6aeacbbad3a29ceb6ebe35f8e43965e1f3dc0ce0e022841389344dd7add04ea1aaa2323f0bbc12541f3aa9cc183c255be050b4cc78e47a316edbd276"}, {0xdd, 0xfd, "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"}, {0xdd, 0x52, "7cb9164a54e3c5bcba9e43108a21a2742b237198916c34034543376d336082e356d6b83fa582e66bd6128302b4c501159ec24db99fd018691cd80dedeade69a88bc0ea85102edeaaa9a4bc3551e2a9a85f1d"}, {0xdd, 0xc6, "c990b05e1a60d6f83b3bba94be21afb8076907e9fb2f79d6304660561a10f2754cfe68e9c1e304e87596ad7bbd3447ce4a48e89f97ea7ed82d36721123a973e416133cd2dc52aa282bbf2ebe957b2774d352b9ba513a3edf9ed63b96a8262ee379ab9c61220601c44c233a2b7ffbb7289346e29f13caaf75b3e65ec14a01e8ab7415af995b2a5822c5aab3d05dbd2d8cc119d93ec3aa9c4b6ca592764e0e8b84622c01f526763bb2ec8fdd7805ed06b667662c2615a2754479f1454237fbc9da42a89c6797e6"}, {0xdd, 0x52, "d202df16ee2c6b33081f7204792f526cc663d632e39820c706f9f40b5f5aaf8414a3bf40f48dc55ce36d895682da052604c589db75b6fef4a90f198477327f2089aebf4521a7f36c49b736f2d88aaecbfcb6"}]}}]]}, 0x4f0}}, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r2, 0x50009401, &(0x7f0000000240)={{}, "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"}) 21:52:53 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:52:53 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000440)=ANY=[], 0x24f) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) 21:52:53 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:52:53 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) 21:52:53 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x1, 0x100) lseek(r2, 0x9909, 0x2) mkdir(&(0x7f0000000180)='./file1\x00', 0x168) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f00000000c0)={0xf211, 0x7f, 0x0, 0xffffff00, 0x1, [0xffffff00, 0x20, 0x80000000, 0x7]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) 21:52:53 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r3, r2, 0x0, 0xfffffdef) [ 2084.116895] loop6: detected capacity change from 0 to 39 [ 2084.141855] loop7: detected capacity change from 0 to 39 [ 2084.153905] loop4: detected capacity change from 0 to 39 21:52:53 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) 21:52:53 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="5ffca2cc9dfd4e862fd43e35da958f990da8c3033be91de0cd74a8fbe1668b9c8467a02d11e0e096d1352211c0c1705b1ca6d82a14058d6837b3ae6112140818bee02e52a282167218ade4b62fe77ad6dd629a8499ed619e3d96949c27cd39ce4549e31618c4ad35a349f6b86145bf30df9a716da0eeb461432afdfb0f5f07f118739fefb6a4a8b6284734016a6e11d6d0e4ba1d376ad2e42e8cfc1d3c7a6eb8768fa23d7cf7a61a071ac043eaf8050a85a2a84780f2c9b7ac47ee082e506129f2af18e0c1945fdcc6eaffdfae01be961b5a4357"]) chdir(&(0x7f0000000140)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) r4 = syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000400)='./file0\x00', 0x7f, 0x5, &(0x7f0000001580)=[{&(0x7f0000001840)="8efa6d5f0bea30ae538d5e2aa350e3a55ee863c7940d221ec99ae31d1f5ea4c3b49330b82248e6133add3e168fa7f18f5d3ad9d0d40b497adbdfb44c3df49644ee21c0e05c6a652737c26abc65c2ce514e8ea2271318ea363ad4790db6d4443e16fa3bb0dbe94eaa6fc81071a2c0f924a069131dd35680ecf396db77abd52284a8d2360c347b272b8e4d5b248570eef1b505fdbfade5c8a7fe932da7cd04de68f6da45cbfd5583a1f75fe51162276649937d1a3d0ab599a16b4aa6d5536c9c1f36579d0478c59d6742e647a9285ebd8a8d91d83d1d3ad2abcebef1aa18c4ec183d611d0183db079dcde74e4dd865e8c78e916f308ed7c3e4ff93749db2c2452bbb7909569e53cc30d2bdd4f9c5f4f3e73cd8f61983500000000000000000", 0x11e}, {&(0x7f00000004c0)="969e13e906afd415a7f973c6985b9779fc8ef8067a3fe028541a864eff2c79959422aaf5de6ef0c9fc936a986b123ef00b0243c9580f923d5cfcd640a981c4", 0x3f, 0x400}, {&(0x7f0000000500)="9b285cc423d5287a885a46b8ce5992e9d261496f196467f8d72358ec92aeef", 0x1f, 0x3}, {&(0x7f0000000540)="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", 0x1000, 0x7}, {&(0x7f0000001540)="cf47a768ceaf52565d7411d261ee011a509163a19e23bc2c66ff397a38265165d7e28cb1b2302500d1f2119ebed579cf0f2a27", 0x33, 0xffffffffffff7fff}], 0x142000, &(0x7f0000001740)={[{'\']-:%\x00'}, {'\'{]/\xa9^%@'}, {'#.@\\'}, {'vfat\x00'}, {'\tbj\x00\x00\x00\x00e|_\xb1O\xc241\x98\x13\x17\xd7p}\xa9\xa0a\x9b\x8bW>\xfe\xfc\x80\\\xa7\xc3\xe8\xf0{\x0fI G\x8a\xcc\xa3X\x01\xf8\x93\x82\xa0\xabV\x8e\xedD\x1c\xdc\x8f\xd4X\bf\x1c\xb73\xf3,.\x88\xf1r\x7fT\xee\x0f\x94_\xf0\xa3,\x93k\xa5\xba\x00\xd4\x9dw=\xda\x04E\v\xc2H\x1d\x82\xe7\xa0\x97-\xeb\x83\xe3\x1d\xe8b\x06\a\xd5P\x02\xda\xa1~\xa8\x03\xdd\x89\xba\xd8!V\x16/\xff\xb2\xddB\xfd'}, {'huge=within_size'}, {'#{'}, {}], [{@uid_eq={'uid', 0x3d, r3}}, {@fsname={'fsname', 0x3d, '@,#'}}]}) openat(r4, &(0x7f0000001680)='./file0\x00', 0x20081, 0x8) syz_mount_image$tmpfs(0xfffffffffffffffc, &(0x7f0000000080)='./file0\x00', 0x2, 0x1, &(0x7f0000000180)=[{&(0x7f00000000c0), 0x0, 0x1f}], 0x10002, &(0x7f0000000300)={[{@huge_advise}, {@huge_within_size}, {@huge_within_size}, {@huge_advise}], [{@uid_eq={'uid', 0x3d, r1}}, {@fowner_eq={'fowner', 0x3d, r2}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x62, 0x63, 0x129797fe5196f21f, 0x36, 0x63, 0x65, 0x31], 0x2d, [0x39, 0x37, 0x0, 0x38], 0x2d, [0x34, 0x39, 0x61, 0x64], 0x2d, [0x30, 0x32, 0x34, 0x31], 0x2d, [0x37, 0x62, 0x36, 0x0, 0x66, 0x62, 0x64, 0x36]}}}, {@obj_role={'obj_role', 0x3d, 'vfat\x00'}}]}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r5, &(0x7f0000000200)='E', 0x140000) [ 2084.257761] syz-executor.4: attempt to access beyond end of device [ 2084.257761] loop4: rw=0, sector=40, nr_sectors = 4 limit=39 21:52:54 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:52:54 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000440)=ANY=[], 0x24f) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) 21:52:54 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:52:54 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:52:54 executing program 3: chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2000000, 0x11, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) fcntl$setstatus(r2, 0x4, 0x42800) ioctl$CDROMREADMODE1(r2, 0x530d, &(0x7f0000000240)={0x0, 0x2, 0xff, 0x4, 0x0, 0x4}) write(r1, &(0x7f0000000200)='E', 0x140000) 21:52:54 executing program 5: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) 21:52:54 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xf, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x44}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xf, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x44}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000000c0)={0x0, r4, 0x100, 0x3, 0xaf, 0x9}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x340, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000002c0)={0x0, 0x1, 0x94, 0x7}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r7, &(0x7f0000000200)='E', 0x140000) [ 2084.495741] loop4: detected capacity change from 0 to 39 [ 2084.500858] loop7: detected capacity change from 0 to 39 21:53:09 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x105000, 0x0) mount_setattr(r0, &(0x7f0000000240)='./file0\x00', 0x1100, &(0x7f0000000280)={0x8, 0x100074, 0x40000}, 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x200, 0x190, 0x8}, 0x18) openat(r2, &(0x7f0000000180)='./file1\x00', 0x200, 0xe) 21:53:09 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x2, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:53:09 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r3, r2, 0x0, 0xfffffdef) 21:53:09 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) 21:53:09 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) 21:53:09 executing program 5: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) 21:53:09 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1601000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:53:09 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xf, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x44}}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x158, r3, 0x100, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x91c}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xdd}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x41}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10000}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1bd6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xacb1}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb0d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}]}]}, 0x158}}, 0x20008000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r5, &(0x7f0000000200)='E', 0x140000) [ 2099.353714] loop6: detected capacity change from 0 to 39 [ 2099.387104] loop7: detected capacity change from 0 to 39 21:53:09 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2099.418160] loop4: detected capacity change from 0 to 39 21:53:09 executing program 5: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) 21:53:09 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:53:09 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) 21:53:09 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="55901e48393d12bbb246b3409e2806c50805982a95ba33e37c1db7a27b65c681b091898df49d24e3c824b8eafdffffffffffffbf86775c3a9f5786bffe1311db1a3fbedb589e7c16e527ac089bcc9d8a70d028f7f7ea3498684c0b7cf5527ce2c7f304d94c3415070d6a184d40573bfed2a2b2ae741c4f0ae1d7269f1adea5fb6831d94720c9d7850dfac898f7b15ae0167f595003ab5af6d87d8c10377e574e127802349b9e853c44128373c413ae2bc905867cd6942e4cc55ebd33f43b5902d7455afd67b60f4967320a1075a4d4570de625c9f02338da9a0bfd4e32b8810e82351e4612409fd4c2444fad3b34c8404bac692b9bc4e1e45704d6fd88e3f29965daa9106008", 0x0, 0x6, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:53:09 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x11000, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140000) 21:53:09 executing program 5: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="1b901e48393d12bbb246b3409e2806c50805982a95ba33e37c1db7a27b65c681b091898df49d24e3c824b8eafdffffffffffffbf86775c3a9f5786bffe1311db1a3fbedb589e7c16e527ac089bcc9d8a70d028f7f7ea3498684c0b7cf5527ce2c7f304d94c3415070d6a184d40573bfed2a2b2ae741c4f0ae1d7269f1adea5fb6831d94720c9d7850dfac898f7b15ae0167f595003ab5af6d87d8c10377e574e127802349b9e853c44128373c413ae2bc905867cd6942e4cc55ebd33f43b5902d7455afd67b60f4967320a1075a4d4570de625c9f02338da9a0bfd4e32b8810e82351e4612409fd4c2444fad3b34c8404bac692b9bc4e1e45704d6fd88e3f29965daa9106008", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2099.639832] loop7: detected capacity change from 0 to 39 21:53:09 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x193442, 0x111) write(r2, &(0x7f0000000200)='E', 0x140000) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x125402, 0x0) 21:53:09 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2099.820598] loop4: detected capacity change from 0 to 39 21:53:22 executing program 5: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) 21:53:22 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x7, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:53:22 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) 21:53:22 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4401000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:53:22 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) r0 = open$dir(&(0x7f0000000080)='./file1/file0\x00', 0x21c940, 0x80) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x62202, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) open$dir(&(0x7f0000000180)='./file1/file0\x00', 0x40, 0xb) write(r1, &(0x7f0000000200)='E', 0x140000) 21:53:22 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x490800, 0x0) pread64(r3, &(0x7f0000000240)=""/217, 0xd9, 0xb28) write(r2, &(0x7f0000000200)='E', 0x140000) 21:53:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x220411, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xf, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x44}}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000600)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000340)={{}, 0x0, 0x10, @inherit={0x60, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000300000000000078551f000101720000000000f8ffffffffffffff000000000000070003000000000000005b00000000000000ffffffff0000000000100000000000000400000000000000030000000000001236"]}, @devid=r5}) ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, &(0x7f00000000c0)={{r3}, {@val={r5}, @max}}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) fcntl$setstatus(r6, 0x4, 0x42800) r7 = eventfd(0x8000) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000180)={0x200c}) 21:53:22 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r3, r2, 0x0, 0xfffffdef) [ 2112.593289] loop6: detected capacity change from 0 to 39 [ 2112.596534] loop7: detected capacity change from 0 to 39 21:53:22 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, 0x0, 0x1c5042, 0x0) write(r1, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) [ 2112.645103] loop4: detected capacity change from 0 to 39 [ 2112.649882] syz-executor.6: attempt to access beyond end of device [ 2112.649882] loop6: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 2112.651477] Buffer I/O error on dev loop6, logical block 31, lost async page write [ 2112.652156] loop7: detected capacity change from 0 to 39 [ 2112.674850] syz-executor.6: attempt to access beyond end of device [ 2112.674850] loop6: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 2112.676536] Buffer I/O error on dev loop6, logical block 31, lost async page write 21:53:22 executing program 3: fstatfs(0xffffffffffffffff, &(0x7f0000000180)=""/74) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) openat(r1, &(0x7f0000000080)='./file0\x00', 0x418080, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x410000, 0xa1) write(r2, &(0x7f0000000200)='E', 0x140000) 21:53:22 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c02000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:53:22 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, 0x0, 0x1c5042, 0x0) write(r1, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) [ 2112.742841] loop7: detected capacity change from 0 to 39 21:53:22 executing program 5: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) 21:53:22 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x9, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:53:22 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x185140, 0x4) chdir(&(0x7f0000000080)='./file0\x00') write(r0, &(0x7f0000000200)='E', 0x140000) 21:53:22 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r3, r2, 0x0, 0xfffffdef) 21:53:22 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) statx(r2, &(0x7f0000000180)='./file0\x00', 0x400, 0x7ff, &(0x7f0000000240)) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) [ 2112.923423] loop4: detected capacity change from 0 to 39 [ 2112.930433] loop6: detected capacity change from 0 to 39 [ 2112.985159] syz-executor.6: attempt to access beyond end of device [ 2112.985159] loop6: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 2112.986737] Buffer I/O error on dev loop6, logical block 31, lost async page write [ 2113.003619] syz-executor.6: attempt to access beyond end of device [ 2113.003619] loop6: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 2113.005317] Buffer I/O error on dev loop6, logical block 31, lost async page write 21:53:37 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r3, r2, 0x0, 0xfffffdef) 21:53:37 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, 0x0, 0x1c5042, 0x0) write(r1, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) 21:53:37 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) openat(r0, &(0x7f00000000c0)='./file1\x00', 0x2400, 0x75) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[], 0x24f) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x115000, 0x102) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x6, 0x0) fcntl$setpipe(r4, 0x407, 0x5) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000003a96828207332ac88a08b3ef2bd16f528a09a16dd395ad72c91", @ANYRES16=r5, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="28000f0080000000ffffffffffff0802110000000802110000000000000000000000000064000000"], 0x44}}, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000180)={0x9, 0x71, 0x6a37}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r6, &(0x7f0000000200)='E', 0x140000) 21:53:37 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) 21:53:37 executing program 3: r0 = clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace(0x10, r0) tkill(r0, 0x33) getpriority(0x1, r0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x48000, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x6, 0x100040) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4010, r1, 0x0) openat(r2, &(0x7f0000000080)='./file0\x00', 0x181403, 0x80) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) 21:53:37 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:53:37 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0xd, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:53:37 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) openat(r0, &(0x7f0000000080)='./file0\x00', 0x12800, 0x82) write(r1, &(0x7f0000000200)='E', 0x140000) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file0\x00', 0x6ca00, 0x88) [ 2127.829023] loop4: detected capacity change from 0 to 39 [ 2127.830674] loop7: detected capacity change from 0 to 39 [ 2127.864421] syz-executor.4: attempt to access beyond end of device [ 2127.864421] loop4: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 2127.865216] loop6: detected capacity change from 0 to 39 [ 2127.865446] Buffer I/O error on dev loop4, logical block 31, lost async page write 21:53:37 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) write(r1, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) [ 2127.928512] syz-executor.6: attempt to access beyond end of device [ 2127.928512] loop6: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 2127.930482] Buffer I/O error on dev loop6, logical block 31, lost async page write 21:53:37 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) openat(r0, &(0x7f0000000080)='./file0\x00', 0x20000, 0x13) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) 21:53:37 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) 21:53:37 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0xe, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) [ 2127.990897] syz-executor.6: attempt to access beyond end of device [ 2127.990897] loop6: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 2127.992593] Buffer I/O error on dev loop6, logical block 31, lost async page write 21:53:37 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2127.996317] loop7: detected capacity change from 0 to 39 21:53:37 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x40000, 0x98) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[], 0x24f) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) 21:53:37 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r3, r2, 0x0, 0xfffffdef) [ 2128.126777] loop4: detected capacity change from 0 to 39 21:53:37 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="55901e48393d12bbb246b3409e2806c50805982a95ba33e37c1db7a27b65c681b091898df49d24e3c824b8eafdffffffffffffbf86775c3a9f5786bffe1311db1a3fbedb589e7c16e527ac089bcc9d8a70d028f7f7ea3498684c0b7cf5527ce2c7f304d94c3415070d6a184d40573bfed2a2b2ae741c4f0ae1d7269f1adea5fb6831d94720c9d7850dfac898f7b15ae0167f595003ab5af6d87d8c10377e574e127802349b9e853c44128373c413ae2bc905867cd6942e4cc55ebd33f43b5902d7455afd67b60f4967320a1075a4d4570de625c9f02338da9a0bfd4e32b8810e82351e4612409fd4c2444fad3b34c8404bac692b9bc4e1e45704d6fd88e3f29965daa9106008", 0x0, 0x600, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) [ 2128.240652] loop6: detected capacity change from 0 to 39 [ 2128.263256] syz-executor.6: attempt to access beyond end of device [ 2128.263256] loop6: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 2128.265050] Buffer I/O error on dev loop6, logical block 31, lost async page write [ 2128.280309] syz-executor.6: attempt to access beyond end of device [ 2128.280309] loop6: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 2128.282243] Buffer I/O error on dev loop6, logical block 31, lost async page write 21:53:50 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="55901e48393d12bbb246b3409e2806c50805982a95ba33e37c1db7a27b65c681b091898df49d24e3c824b8eafdffffffffffffbf86775c3a9f5786bffe1311db1a3fbedb589e7c16e527ac089bcc9d8a70d028f7f7ea3498684c0b7cf5527ce2c7f304d94c3415070d6a184d40573bfed2a2b2ae741c4f0ae1d7269f1adea5fb6831d94720c9d7850dfac898f7b15ae0167f595003ab5af6d87d8c10377e574e127802349b9e853c44128373c413ae2bc905867cd6942e4cc55ebd33f43b5902d7455afd67b60f4967320a1075a4d4570de625c9f02338da9a0bfd4e32b8810e82351e4612409fd4c2444fad3b34c8404bac692b9bc4e1e45704d6fd88e3f29965daa9106008", 0x0, 0x700, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:53:50 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r3, r2, 0x0, 0xfffffdef) 21:53:50 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x80880, 0x100) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) openat(r0, &(0x7f00000000c0)='./file1\x00', 0x20200, 0x5) 21:53:50 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) write(r1, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) 21:53:50 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:53:50 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) 21:53:50 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x101842, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) 21:53:50 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x200000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xf, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x44}}, 0x0) sync_file_range(r0, 0x8, 0x1, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = openat$incfs(r2, &(0x7f0000000180)='.pending_reads\x00', 0x101100, 0x24) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xf, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x44}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4, {0x2}}, './file2\x00'}) fcntl$setstatus(r2, 0x4, 0x42800) openat(r2, &(0x7f0000000080)='./file0\x00', 0x8000, 0x124) chdir(&(0x7f0000000140)='./file0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x165042, 0xfe) write(r6, &(0x7f0000000200)='E', 0x140000) [ 2140.792779] loop4: detected capacity change from 0 to 39 [ 2140.810630] loop7: detected capacity change from 0 to 39 [ 2140.853500] loop6: detected capacity change from 0 to 39 21:53:50 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x0, 0x0, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="1b901e48393d12bbb246b3409e2806c50805982a95ba33e37c1db7a27b65c681b091898df49d24e3c824b8eafdffffffffffffbf86775c3a9f5786bffe1311db1a3fbedb589e7c16e527ac089bcc9d8a70d028f7f7ea3498684c0b7cf5527ce2c7f304d94c3415070d6a184d40573bfed2a2b2ae741c4f0ae1d7269f1adea5fb6831d94720c9d7850dfac898f7b15ae0167f595003ab5af6d87d8c10377e574e127802349b9e853c44128373c413ae2bc905867cd6942e4cc55ebd33f43b5902d7455afd67b60f4967320a1075a4d4570de625c9f02338da9a0bfd4e32b8810e82351e4612409fd4c2444fad3b34c8404bac692b9bc4e1e45704d6fd88e3f29965daa9106008", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2140.903443] syz-executor.6: attempt to access beyond end of device [ 2140.903443] loop6: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 2140.905097] Buffer I/O error on dev loop6, logical block 31, lost async page write 21:53:50 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1}, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x7f, 0x4, &(0x7f0000001480)=[{&(0x7f0000000280)="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", 0x1000, 0x6}, {&(0x7f0000001280)="ca1ccb712f2a7aaf435e22d4015736f18fa179a7b7c0a564408ee5a5d6be773c276df78f25fbd50043aafd4e2f925ca42d76064c49e9613e9c04cd9f5492096a653e4553ed5c6c58205f5578bf83bfb0cc824abc8af67eb17a9357403f2be18747914422cd6cf8075a1a582f72c2d0df44b4c13150f84fd8042e260956abe01741bfa69e0b944b7642622097d4bef1b20a72d8877c9e612af6d52db7393f6f23984b86215d750e69fc13d56e4e1bb5b4977e1e8e941bcd6395363e027c8e8629741e", 0xc2, 0x4f2e}, {&(0x7f0000001380)="edad90cb5120297189e52a44b0e4072292ff81b2fbb967047944965695575412a7df21bd259760989ddb76434e912dba0d44094f8268edbef681aedd7f93658129e6e6decc92fcb51e142a64aa1fe350eb008686b04d02cedfabb38ffcd7c2bb24a99059e843789bd6151dba018e66ea403c19f5cbfea04a039d1457a9f5ec5accbdb9ffb535b09e27dd2f6de9ad139f48aae3bbec7bd7a77ebb18bb3575827344bc66a7ac182032dde193efc00e3d69a9c0275bf2500b47fa83e39a2f", 0xbd}, {&(0x7f0000001440)="16733f1f0458bed26cee7210f5a2f32552d0c2ac3d9bf915b08a1adf4bf80362c7b3b725a279268f62", 0x29, 0x4}], 0x800, &(0x7f0000001500)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @void}}}, {@mode={'mode', 0x3d, 0x3}}, {@huge_never}, {@uid={'uid', 0x3d, r1}}, {@huge_within_size}, {@huge_advise}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42c03, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) [ 2140.922515] syz-executor.6: attempt to access beyond end of device [ 2140.922515] loop6: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 2140.924212] Buffer I/O error on dev loop6, logical block 31, lost async page write [ 2140.928336] loop4: detected capacity change from 0 to 39 21:53:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) recvfrom$unix(r0, &(0x7f0000000080)=""/114, 0x72, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) 21:53:50 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:53:50 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x0, 0x0, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) 21:53:50 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x900, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:53:50 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) write(r1, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) [ 2141.037648] loop7: detected capacity change from 0 to 39 [ 2141.040832] syz-executor.4: attempt to access beyond end of device [ 2141.040832] loop4: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 2141.042032] Buffer I/O error on dev loop4, logical block 31, lost async page write 21:53:50 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x0, 0x0, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) 21:53:50 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r3, r2, 0x0, 0xfffffdef) [ 2141.112720] loop6: detected capacity change from 0 to 39 [ 2141.132382] syz-executor.6: attempt to access beyond end of device [ 2141.132382] loop6: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 2141.133540] Buffer I/O error on dev loop6, logical block 31, lost async page write [ 2141.141051] syz-executor.6: attempt to access beyond end of device [ 2141.141051] loop6: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 2141.142271] Buffer I/O error on dev loop6, logical block 31, lost async page write 21:54:02 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(0xffffffffffffffff, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) 21:54:02 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r3, r2, 0x0, 0xfffffdef) 21:54:02 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="55901e48393d12bbb246b3409e2806c50805982a95ba33e37c1db7a27b65c681b091898df49d24e3c824b8eafdffffffffffffbf86775c3a9f5786bffe1311db1a3fbedb589e7c16e527ac089bcc9d8a70d028f7f7ea3498684c0b7cf5527ce2c7f304d94c3415070d6a184d40573bfed2a2b2ae741c4f0ae1d7269f1adea5fb6831d94720c9d7850dfac898f7b15ae0167f595003ab5af6d87d8c10377e574e127802349b9e853c44128373c413ae2bc905867cd6942e4cc55ebd33f43b5902d7455afd67b60f4967320a1075a4d4570de625c9f02338da9a0bfd4e32b8810e82351e4612409fd4c2444fad3b34c8404bac692b9bc4e1e45704d6fd88e3f29965daa9106008", 0x0, 0xd00, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:54:02 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce03000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:54:02 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(r0, &(0x7f0000000100)='./file1\x00', 0x711bc0, 0x50) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) 21:54:02 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:54:02 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r1, &(0x7f0000000240)={{0x108, 0x81, 0x0, 0x18e, 0x1f8, 0x100, 0x22b, 0x5}, "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", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x91f) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) 21:54:02 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140000) openat(r0, &(0x7f0000000080)='./file0/file0\x00', 0x311881, 0x8) [ 2152.803840] loop4: detected capacity change from 0 to 39 [ 2152.812490] loop7: detected capacity change from 0 to 39 21:54:02 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2152.835090] loop6: detected capacity change from 0 to 39 21:54:02 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) openat(r1, &(0x7f00000007c0)='./file0\x00', 0x400000, 0x101) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) write$binfmt_script(r0, &(0x7f0000000780)={'#! ', './file1', [{0x20, '$!^,&\x9d'}, {0x20, 'vfat\x00'}, {0x20, '{'}, {0x20, 'vfat\x00'}, {0x20, 'nl80211\x00'}], 0xa, "e88f09f5ca7fa2332d"}, 0x32) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xf, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x44}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) fcntl$setstatus(r5, 0x4, 0x42800) recvfrom$unix(r5, &(0x7f0000000800)=""/196, 0xc4, 0x40000000, &(0x7f0000000900)=@file={0x1, './file0\x00'}, 0x6e) pwritev(r3, &(0x7f0000000080)=[{&(0x7f0000000240)="dedcb0aa283d66d4151197ee660dfc991dd7022acbbb19155fdd857b5b548037731eb0a4bd4ec2401a0a9099e83f6c056f1766adc8250ff8da3f5d58897df91fb0157bcb5295c9f1d608a0949a9edcef458db969809e7f872d5186c810b483c4dec5c47ef7f02709192e37fea2e844ec3639802e7cad257eab9934b15e8f8ab19ff26fd0a65c8bdfbe4fc98c0c92182417bce7de61fdf3196bb2a11ae03964cc", 0xa0}, {&(0x7f0000000300)="81418a506b829276d5ec1bb7e6519e5a621ce284d1fe78d93f4faf25bfc068271de0d358b171d18da44a878239e1440ccb870d0d600de6ef4854911bbb01de654ce0867ed62df11c2d6aa35a6a6b3ca63736ff93a247cc521d3d04bd36973859ef7eabf350e0f4a8e9d121c2e6f2e48330a117e38243b4553f91ef9ce56d6677af64f784d669088c6c0cdb1f1c1b55d04f6e77b8f07a5e5b1440e6e0b58b1be21821f4430ff26998ae84b82ed37690fa2363cc33a20f7dddd1e11ff69efe683896785651007da5c9f744812c809126d78b86ac80e0977350", 0xd8}, {&(0x7f0000000400)="ae684b58c1f24f7a5edab8c19b79926ee98e5e0c1a4f30383fd9ff6bdd0020d3a8cd7d12f7ceba99a9ff908dec7bda416ff91f903b2546a76f2ff40c061651b79fa8e9e980dfa93f79844695a94ef673c12e5d030ee9b5c3df415df3b9b54ff87f9a0e4d5755863368a4e4f344c3f1f74900da2fa54adf0b074a1049f3ea7014c88f2a33a37fdace4c517ae112e4af6a69a9ad179d1037432c60ec2bfc2a301b7183d0", 0xa3}, {&(0x7f00000004c0)="9529da302ba54da73210afdf24a56eba1ce89c288a561ee17fc9d7476f055299d313f5d168d7c63fd67d20cb5bcb6605e700ab7db7839be2fac1590db0273a2361c9a149b4a76c44dedeb8137501930351916cb1de0321244cc5b9a09e42cb95da48ed9bea270d39d135a81d80b20589185f73391a151924f68c8e99a4dad86de4f92915e2a000789ffdc3ee5a367c776c3a21d7511755fc305d054dbfe40e32166db1885e2b0aa8ff96a4d5e26a17fc8dcebe241e7a4708de81256120cdd4b54640a39d912680c548671c9657f52cb952794dd457860e24fd55c39dc6b3b1e7d52f7689dd861ee00527fa", 0xeb}, {&(0x7f00000005c0)="95c0625fa04bca53216193d52a2a12d4357ee38ff59d327ad046b2b35552c8dd6171f8a28ae8161aeea1394dccb0be89f14e409abfc919a6838884da334283153c899866b63c9ebaf4044493b3b703b5bbe4b0db518b725f6d6d03bda84bf13357db3a444be4fd0ae6fd337bc3267aedb1f8fad568d6b96a6f2dff6ce2d4f66e91390c92", 0x84}, {&(0x7f0000000680)="463b4e1fb1eb343863cb277e5b6f66a3b3c49edd256005299efe3b3a179c3993bf71e297959bc25792ccf4cebe3b9e7c1a0f9a7e5ddd9774966f95df974e48fcafbdd34cadfef02ea35d6777eba977e6baf4d977c70f846d3a1c05ed851aa2096e27a199f03499a94ec3e653fc79de614301e8666c4fe32d01d9f78e445f6a96e49d7097a5d0e403ae633e00dce3e6e174a217d55503872d20beea41c3d15391eb2f1f3f324d63a02032e7a461476edc5adee098824ea6df64d4d15948e5cf120c91f49c4c6a5d7626951757e5b8311eb19fa46fad3c61cfa1c5f328dc3c3eb76f8a9d88744178e0db1eed051574768a4ab2180de25be8cbe8", 0xf9}], 0x6, 0x8000, 0x8001) write(r2, &(0x7f0000000200)='E', 0x140000) [ 2152.887682] syz-executor.6: attempt to access beyond end of device [ 2152.887682] loop6: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 2152.888585] Buffer I/O error on dev loop6, logical block 31, lost async page write 21:54:02 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2152.914437] syz-executor.6: attempt to access beyond end of device [ 2152.914437] loop6: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 2152.916055] Buffer I/O error on dev loop6, logical block 31, lost async page write 21:54:02 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe003000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:54:02 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) openat(r1, &(0x7f00000000c0)='./file1\x00', 0x1310c0, 0x30) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) 21:54:02 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0, 0x0}) 21:54:02 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(0xffffffffffffffff, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) 21:54:02 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0xe00, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) [ 2153.023867] loop4: detected capacity change from 0 to 39 [ 2153.027943] loop7: detected capacity change from 0 to 39 21:54:02 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') statfs(&(0x7f0000000080)='./file2\x00', &(0x7f0000000240)=""/193) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140000) 21:54:02 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r3, r2, 0x0, 0xfffffdef) 21:54:02 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(0xffffffffffffffff, &(0x7f0000000240)="e1dcec45f6f9a9aa85dd271e195f7edbf074d43cb5efb85be0847c81666620124074ef2158dcb9c6449fc89641c486892eaea178d7f82bd4fafdaab9761ba45b398f10660e2e167f147bae8a0c35864d7423c6d57c2718e8750485b19dc586ee3a659241b9aa9e44ee5666356804382cc3403127e7ef0fe1e41a88417917d67760194063eb197459d9877fcd15c8c3bfa297da43c687fdd3eb486590ebdc6aec3731feea35c1f6b3a4040103a198c79177f15079025153e66be7fea70226b3ebb696b5b7d1999506f069b57b984412e0e012e8815e07d564180e82ce95b14069231dd68a5441fb1a8d9c241bc7108863ab", 0xf1) 21:54:02 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x14) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r2 = timerfd_create(0x9, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) 21:54:02 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2153.129580] loop6: detected capacity change from 0 to 39 21:54:02 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe203000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2153.163994] loop7: detected capacity change from 0 to 39 [ 2153.173877] loop4: detected capacity change from 0 to 39 [ 2153.195128] syz-executor.6: attempt to access beyond end of device [ 2153.195128] loop6: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 2153.196867] Buffer I/O error on dev loop6, logical block 31, lost async page write [ 2153.219518] syz-executor.6: attempt to access beyond end of device [ 2153.219518] loop6: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 2153.221185] Buffer I/O error on dev loop6, logical block 31, lost async page write [ 2153.237567] syz-executor.4: attempt to access beyond end of device [ 2153.237567] loop4: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 2153.239283] Buffer I/O error on dev loop4, logical block 31, lost async page write 21:54:15 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x2000, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:54:15 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0, 0x0}) 21:54:15 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r3, r2, 0x0, 0xfffffdef) 21:54:15 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, 0x0, 0x0) 21:54:15 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) r1 = dup(r0) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c, 0x0) sendmsg$sock(r1, &(0x7f0000001780)={&(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x0, 0x0, 0x3, 0x0, {0xa, 0x4e24, 0x3, @remote, 0x1}}}, 0x80, &(0x7f0000001640)=[{&(0x7f0000000240)="2604c8e969b2b533f1eea615392d7bb05379f2b6feaf3a4740fa1fb88a5e48ef1d7ce13e69dfbed080b187d7478aa578804117df646e18e33f09fdbb27d39e60741a8e2594cfb424cd94233cf0f126f99e27b1435342072be5b064fe408de99ef19b7a628ef3f346d0004f2b4b289f872588894057419d366937", 0x7a}, {&(0x7f00000002c0)="f500044b823f51b354867b983fe7699dd9f6804effc4d8bb13f098e24639f5f1d0229fb1cc0ba4e4ce783ad0a87eef43ea04cd8a16a3c774390a9f03010cb083f6ec80967f996f03ba3e2b9cad27fd4ef41184204615c884c46cf239d64efaefc2a64f9a3c91f590495f0960", 0x6c}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="04d0ca6647eea5ef122e2648011f065e94f6d2846eca045cb23212883498d603846b0fa121341be481480b0dc41557ade27abd7e1cb045f6349fe98cd33f1b1f5181e4448a21a0ed2634991cc9e4c68595f97e36c07285c3d0c0944bf66547263b9ead9df7b7dcc1d635cdeaef041fda3b008e59616937f816ad93304b1181ccc87e83971eaa86cdac0ba05c0285f9bc64782363340b212a1ead59b299084e724d3ec3a26f6e418ede6aed17a21e01101d3fbb9d5dd8c35fba102a52d1cfdeb6f339cb37", 0xc4}, {&(0x7f0000001440)="bc524927f15468fd506af645f18e25b997edbfbc598fc14524341301ce0daf9f30125818b99d2c73c9b695c06660d6a77b839560ed05dbcb6ab3a60901b3b5ca3ba7b06e69311fed3d4377c3190777b38a03c353444160be958035d4cb5fb71632560500c2d3c9f0c466c4696e22540ae2671729449d7dee6750b2764983aaec3d533bda310c5c0fd0594b6a63bc8fe4e3e09558e7d729715e973c304d198d2471f62c5a97b36db2", 0xa8}, {&(0x7f0000001500)="98e7756290e2374e07c60a81d0d46a2b2f38b1fc041a1048430e79bf2be81586af01a9a889029df65b19168f0827b2eb00420edbc154ea91a2ecee5ee1278563ce75529b0c99783a8bb628b8b1686fe08325b50d363154bc8077aae75fe96d02efd26a5e6e4d50ffcc70cfd8ee03ed26f74034ce648a54a0ea464404ab40cf0388aa0c7f0748790308581fec802b9f5fd68d8f5cbe6c4f3a7c1a609dcf0585b3929076cb915cf8eab488b2b7034bad705ae9ad3b5e9a7c74303c40ca6db2d49b5e0faa5c7a19d314c8a907646e78ef07f67efd4f161fb2eadab29493ae2839548341b0ca98912d6669017a0d", 0xec}, {&(0x7f0000001600)="ed423ce72a5ae83f92c86a700bc248f91f75b3c5364cac38adf665d307713699568eba1b9046112a435bcbdb612fb2", 0x2f}], 0x7, &(0x7f00000016c0)=[@txtime={{0x18, 0x1, 0x3d, 0x3f}}, @txtime={{0x18, 0x1, 0x3d, 0x7fff}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0xc000000000000000}}, @timestamping={{0x14, 0x1, 0x25, 0x7f}}, @txtime={{0x18, 0x1, 0x3d, 0x1000}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x1c}}], 0xc0}, 0x800) connect$inet6(r1, &(0x7f00000017c0)={0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c) chdir(&(0x7f0000000140)='./file0\x00') r3 = accept(r2, 0x0, &(0x7f0000001800)) sendmsg$inet(r3, &(0x7f0000003dc0)={&(0x7f0000001840)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10, &(0x7f0000003c80)=[{&(0x7f0000001880)="09f0af086d41f262e80f67d24b5a38cebffe86eea1c6d5696bbf498d8c72ebce65d57b2d240eb06d5755a4cb99b412d7e08e60fe62ce425637f77a0540429ccf9b21674abf8cf20649b49bb55dac93d709ca2fa0427ecdebd46bdb69a3b13870ca2ec4cbd8fb02c5b00e2573ad295487f949cac87f65c6702df5d6354674942be0735d6538c8d45d87c9072c76458e1eea4e703babd9517f3b4ed90694be6e1691060464cd095e1b7627bc119432d70c2efc8a1cfd199836ebe19307169522f6678bb414c9ae17f242b605f2c911b40a735dfff1483e7c5498070d", 0xdb}, {&(0x7f0000001980)="d99942e331bafc5b4d08f99325e786203e1c446328", 0x15}, {&(0x7f00000019c0)="ee81b2419c841035fdf137364928c1c62f23551c556cd8e37291abe1deb3f693393296b674f127ec457f13c4a9c6bea54e7f76ebc69206907b44ed5255a6cd84e43dfdb413111ad3312c387e5e66841560d3cd0289d7fd2bf724825324b3f72fe7dbb484123532d2dccf17d437e175dedcdd9531e5f53cb77ae2782e9d3c", 0x7e}, {&(0x7f0000003e00)="81c2002445259703071b8df8f202d4e80721f88e6762adde96a6eeee7394260a1145b223ef6c090df88ff611b834ca4f0544719b863e42b5d4e998773bfe24981937066ece3cd88ea2e7902c3d6c24c3e41fe3d4cbc1116a3944fc6a317ec47951158c4cb5290125d90850719c1179603d082ca69fbf61f372eb78684e81305c133429f008b6cc44b9d68bf615f369b8d2109e47e963f822c97a63ea7091b2603d9f464870c5c83f41887577312e071d667dedaff829d440c9cea63ba146514c4697c3f9ac456dac26bb0e4ef311288118a450708b8e9460801677d221a5d5001fbaec8a6c7d1d070015325b91f5e992cfea", 0xf2}, {&(0x7f0000001b40)="906aa09cce9dc3d9a84a48489cdfbe72682885e0b7f35bc14a6b4d4ad667cbbdfa376fe4957c8b5ac0452a20ff9bfdceaaff7c79b70d38ad00862c54c5e067819cffe017c3be97543702b5247020db3f3777b37f03ad64503700e94927", 0x5d}, {&(0x7f0000001bc0)="f7905f87ecb259aca33395f1daf5181b40563c4baca261a3f95221", 0x1b}, {&(0x7f0000001c00)="b9c3fab71f1028798c1d7663f89b8ce2333b5d2e778478f0dd3657e0", 0x1c}, {&(0x7f0000001c40)="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", 0x1000}, {&(0x7f0000002c40)="f87b6d21d268725e688abde5f2d3bfd591d775957cff0feb407c79a2852f72615e5ffa0c548b8b6280dbb2613049a32043ff2de3184c09c0f698d44a7b5a42131c2681e212b83c7f0f1e8ad0466417dd982e52fe305cf75add90eab6dc1b8c0bc87de1b2bf3b1f29657160c44676dd3cf3b5bc2db0ae01ff97eaa8693975e42bc3c3bffabe11dff5101e79ad8c03bc13eb2676eb67d5ae662957d44d541d23b5ae1aa2d5c67606c49bd7bf2e303e268cc920fad87d03ee0535fea2d3bbbed3ab877137c8afa844009eac342443627600be5330d82bbc60ca038ae071365f4f9dcabd7323a67d42bed3dd60ca696e8a51729bb77a3c05866929bdf70cfc608cbe114eb4258c4e56ff1459e2a217ab77e4314c0ebb4f94973b002abd8979f6d1d32fb564b49f24ae7ec686aef3a370b24c47f4d7e838c3c3eec9aee826d433ff6805ea208103ee4c79ee511dfc6753c80a326c51a099d273d1676ddad289dc87b0d4b2ac9cf3324e73a0fa378f3c882052a44d68e6199f3bc1161a09f42fe93be3f7acbb0c4edd37fb17792dd426441c788b2f4b3cfe729e6772aef8824f0149163e0d1c1670f53ed996ec24156823199366f63d51666ca1e443a82e87d2aa9bfaac3cf22591cfe3c6c075bf50d130993dfdc641b010a2ce108a7a178b8a0505ec70f0cc6fc0ff279f9fe9759599811c52a42cdee81483ebc9ae5dbdddda57f53cf8b0afe52ae3a004007ef15ada1d905881631e7e176edb79c930e116946c4acea668224eab2453060e7f3613d6bba6783ceab53eca59f61617e7184825e03d36edff5785a052b029a96003a688e24dcbb7c83e73cfe692237dbdbaf9dbccecc186a08d24090c31db5c2553cda548b219874948289b031e8ef0199cbcbeafe97eb29f5abd72a501bb9dc87c393ed2097ee32490d458579e2d93ecc3a92e6957399f0c125ef43bf1ae85fd7f3fe666dfe144910b4c72674f1b6980a20030f42fe11047a9fc8c86950656a46d74fdb0e68eb0696aa2d392cf7ab069def9c5b65c5c01bdc000c2ef98df2f0328a48e4619f112e6dc33456f6651f77337c9b3bc37cb6d4702a55e1b4787a16d8bed1c00e4bf5df3882ce818e9d602a252ad18aec818c9b92bcd275b6f7a25fe5525790a6d0821d7414d0b0cef5690eef06d7226587135b00e5bbc0d17caf478b282b6b032afd1a47a948a26bcd9e7a16c000714a05e1a6cedcbc125e6a67c605fd1a452b11d0d955cddb9a047310619aeccc3771ce2ceecfee74d4a81e4149e0d402d71fb3072898793813594ca6985ee506d3d3a0f6903a593c2a5d18c7fb1e92bfcf7738aa5f1acac31680d591c60cf081c6e16b494f12dff7fc1dbf016a010df885046d42f792ec29bc748ac215f989c5e3893de3b6b75b8800b8de6f4de3e053de22fe78c4df9bf7261560b8d288677a5d75d57fe2efd4d298348fc3d1c889fedcc509ec2aa98691200008b30cff45e98b7fa90fb4f1819fcccdea94bc2f223deb2ebc5de0a693b70f56cf9f43d89df2b7ef6ddf9ee46014c32ab8e40058489ef8f79fd9e139822dfa8d7c627b2568cdaacec2b60818aa4772b2abc58d9fb471d986c22c239ea05399d9eb0d75e76f43eee2158862fe307020ca655b03c2d858869ef58cc842bc941436099cc2de633216aa7e930ca0f27e6315f3d2b6d2c7632ba09f2d7a777757a54c94e4939aac4f8e9b9f92b3315b6b86243697e6f2d7451ce879efedc1ac8029d4fcb09b35dce8f72cff8738936a0679d83e5749d99d76f68b77603cb40ce101e3921d3b8876c6f941bcef39eacedfa640fdc080d676ddd85b9a2e80a7b70b4789fb17de01db9931dad60e56ba724efa807562f9e44f10e7f46abf965f2ecabcb468e132abbb7da3a0eed839f0b2b2a08d49bfd1ce11726446f09c4d6228b70b383a30277cf3746265be644a0b9f73e27307834b3a0728dbe6b491ee8ae72bc60012d5faa8613f5e5b036dbed061160a917c4ae2c83effeabf7432fc77cee14f1633644a1a9a0ace1db2409dbe0e7d6590e55117eaf9de3541a798eab5e994ea20b47de976d348bd319245fc573399b61fb46aea80b4e16a907c68e8710ce56ff944a822d3bf0ec6db0568bfcc467138481646a17f48a3f8ba34282fa1cb7d6fb67ed6b63ed0614aa77207aa95f0274e1abb8d2bce38464e21fc0bfa04bdd5607bd2b3cd71583dbf4394d931609fa319068b5528ec0a60adaf1dcd9142d42ec375428b5c73ba22aa25d81166f1e72f739b23a6c5130f89a09229a3a7c5f7d8c811362c3839387ef839b6d37c1234b0fb8b0c1c08a17bd0396c41d90dc09cbf73eb261472811382a884f67993702aa3f9b0a4def51ce65c5e1ab8f4145287707cda20c02380baf6df588f03275c9c920c07fa33cc82b982f25de7938a2fdbf90ad1f3507680b8a49cf7f7afa1850d5c4785f6320d9df8accf8f5db5d4acaacd73a11d3a4249c493c38018ef6728f12dbfd544586afb2c35adbc67ddbb6c505aa731e4e92514a16f5e774d40c912102e93538935a98da20c01e9d4ec8f11eda563e2ff4f27c80dc6e1ddc4af3d55703409a713c9a6a4c67516392372aaddf0c98815c7268af5d4f18d9d364650fb595e0701dc8c54f9eaa0ae119604d563e2e91305b85f2f4be9f8db5d81639e66a5ae19b5d1b6f2bf0710ca8268478b332d8c4ae6a2ea1dd44abdab1f7aa883801f973fe94e1ff8b1a20b8703349cc8b23ae76852a1d78aa09a89fd4cf2e2e4c70527fdc699f28e35031f3dcfe4cc654013a7da463811b0c0071bf8a0c231af1993be6c02554e9a7da9848b4199e63a98b0d36c6a5be0ea7edd5707c2ed1c8645b2b55effec0ff28149bf4337c30567360a3033e3499e6304f5ea43500d058bb9e9b5fb8c92fcc42ee2e6a106002806b2b6fa5f47c162bc8cc65f3da42fc143b2bb93b5284de9dfdca978675e46bd204a4ae02d5e4f369d55a39d502ba1d34ee14f2901ae6c68a5d3a9ddabc1c565e82c78b90485d882cb355b35581019309ac59b2103ce82d41d6782282ac7597b684c4c0619fc799f385aecc6646f6ba9a82ae63682d63bcbc61834e86cc8ed1bfb67bee30c7274aa93a2d44c315f24ab8ebfe1ae728c0976ea9a3a3b2c26f09aa8dc9fdd3923f2d23bc6b3fb58f4a360eea9f10f32d65230c33ca040884a89c0024bd917999216d7cfbe00520981bb2d56653caa840149510dd0cb2b71b0b7016f0db63f8f8fb00f90bd782917d24aea61f3d816383e2716211c87f8482af3872567a2e497feed098d7cc37fdea8a5b1ad041efe804589cef0a53985ee9b59f46dee802f34d252902394607cf8704dadd61167fab571a6aa31c98b5149c7f95d4f9f4bf66ae687817d4732f844e9029e78085b0c0c9dbb82006d416d1f2d0ca852886b0f04031daaac1b3e7405ff7696d0e88045ad3db610340edff2ff87e2068798e46e4c49fcc6c19b09c285a30f3e0744b5b5e4e90ec9948e53826dc7640a1f61a904b43aeb38b2c4931588ad8a8f014e8ab9831aeaf58142e78e7dc13c3e940c264bf5d5b060151dea5b6ff2e31d5011d318f0e7a20f8971b987554e1e83df914ca50d25d8c401985ac87864a3abc87435a40629824e4493dcb5e90caeb02a859ba25c705fe7e6283880a90a6c92a0c9261ee6fd3d878727015eb1789ee05a6dd77b68ec36744dddfc3148dbb7d03a2093ef1f20d255217d53b3b4bb85a4e3d051abde0f0019af37a3deb146cd850729554782fde35ba0503de3fe550109413f02aa53de00680ed6cc7f014eee405b0e2c202751eced87558395c24cac96d11bc8ada3ec744375e79c202ea16b20f7d6c1f61ca8b2a29a6b68b5844b08f76a8ffdca3bcd6bda0eefb3aba276f80ecfaa92acc3470ef8a044fcbddce218f2db4d54a4a60caa23406e094bede97ae4598a32b9123191768849f657144d0eee750f04ef8b658245b26dbdeae689e9ad33c14fcf21069cc35e3bd376ef68ff4c8868417ed7f8fbbe14f88f35aa9c6d8d5a2b94ce78aeb113148678c0cb22da6eee79d0cfa0fdc50d3587791ad07c95e54597086b8ca24d344508f96de20fdd16ede060136edf307312a9966b960fa5f7a8bbf689da05152136373ffc09a4ddf2fcba0ded36700760d873d00c8ca416be0d502d92ffedad011d385cab1a6b335c3edb3d50f279e21081f7c28c161ffa72a839068e2f4a86a60d0138d5e817febac043dd2cdca43a2ff9dd53ad9e96d980ffc59c0a67e74f7c37405cd2c8bf2f5a873aa996bfe0e1bb13deb8f2ad5378f9db5b92f1d25c1cee22206108d3dffff28d4de88ef31ef86301821c8bfa138b16233ab4e9d89a3f16c405e01bb25a83f90edcc5f3fa1c4f5f87f1416c1469f8009b0311d489c2ee7cf0fc770cf6e6cb019980678aa4291ec6210ee1d8c3be302a80c182d1a7530d4e7eff1ede58eef07576923c058155764eccafd161d295ab959b2394663cf11d7506ef5f8f6834bfc08d445e430a29ecfb597eb7d8f666477ebc12d8f4ea73f78e97d9c281851b94611be4db968f2661eadf0979a586c23b7d7cc2ba5c81d4df038dd5ab8747abb4ee5309e4e48d3f6435edb0dfea2cb5acf5d4159b501acfffea8027b15202afa02ab0027fffe8685f5e5303cf6e11a6ff7a68a36ac0e89cce7900a7748b4f59ea4a05940936de46af92c5be409faa3ef0f7d95f340537a5b192ce7a47a0c6f30ae5a62104e0a734644e0687a19292aa595393a189993b0904efa474af2e4e3d5cc34defa7b7d133e63eeb0a4864e661db248bdc3979bc45af97002755f615c29cb52985b11e473998bfbc3ce9f568328c3436c6516d1c2e18d47aa026b0dad1d233fddca27c6f38af227d86250a1bd5b219fc1212d6f1bb4cf181c23f830bc0c535f89ce279f2af713d1610e492fe1b00e9f814405838cc5ab6f3d8776ba553e9296ddce6292bb247e1bd24413186eda35d9a4983bef9a250aa6d1dacd99efaa899bfe202c1d01230c85e50344e06296dad7aed956fdd85696c86afbee9c955033e5596045d4adabd4060d3239a9b49cc92831c12288164ecbc940e9438a798e9c14ba67c10a961d5ab702227d637a0740abb323b6cd7f6b0ab9e535a6a41b1f4e09e4d48397a2cb428ce5d775c81c737382ee0d17a13fe12086f5c031c34d6646862745b3c88b4a8b1292ca3401990e8cfefde7f89b886405cb5ac589c4ffc2b9b110cba4b795b8da0c5cc0c4b2ac2d27d370fb12c3f4db5a02ef4932be0e6e75b9a639cb70010717e00639af3314beb45f77b6e99dd0ffde02c24ff3d81ee80877c3429d1adaf0b2756c53a49f150e9744cf243131a49374ed10ca3a97636be2091f89c8de8d69dba1924f6a34fe67954ac88e6ed45d7a0d8a210e1b9599a8a7992567414964f604875f04535bbf4c27ff11fe2963219ee3b260c6a7b3640282f9c6800af67f59ada6d63e8b0ee549ecdd6d70686d0994c65c321742a85d7cb241d2b2213d5274503bf6db17c11413c6d93f91e20d64895c4c042e8b6a66c014ccc2817bfb0b380e7c6afebad5b35de3db7967982e24a47672b70cd7a4324869ee0f4bf26ce2cc456d4573eeb46a94fcf3c9aa5f5448e4b221564fa5a888786205ceec78260158ca0aa6759799dcc1b7327d3dd48fcafa781a56669b0c5ddf104dba899a5c375bfaa2d062a57601e22c74dcd91360fc67385c77d86152bc394d750ef6ea25bc97ba4d50606cf8f3850aa32a4df8e4935d82f7c48a80264051c61e19f02d99cb704c6e986b3dfc46a748", 0x1000}, {&(0x7f0000003c40)="eace0f0f66410ed6bfa89952e205cd7391e487a0b9b6f674de158d9adc2792026fa41b89007f81a4d87b", 0x2a}], 0xa, &(0x7f0000001a40)=[@ip_retopts={{0xc4, 0x0, 0x7, {[@noop, @ra={0x94, 0x4}, @end, @timestamp_addr={0x44, 0x4, 0xdf, 0x1, 0xb}, @generic={0x89, 0x7, "014e65ae89"}, @timestamp={0x44, 0x18, 0xeb, 0x0, 0x3, [0x7, 0x5a68, 0x3, 0x7, 0x3ff]}, @lsrr={0x83, 0x13, 0xaa, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast1, @loopback]}, @generic={0x94, 0x2}, @cipso={0x86, 0x63, 0x2, [{0x7, 0x5, "d5028d"}, {0x0, 0x3, "bd"}, {0x7, 0x7, "6c7a45c5be"}, {0x5, 0x11, "80300b42806fa4fcb05be0fd0ef72a"}, {0x0, 0x12, "b9ad796c6eeae59ea03bb97b0c914de6"}, {0x2, 0x12, "986f9dc08a3f37fa3946091e63e8872f"}, {0x2, 0xb, "afc698db89ebf87dd8"}, {0x0, 0x7, "de0eaba87b"}, {0x2, 0x7, "cdcf5fb4c5"}]}, @timestamp={0x44, 0x10, 0xbd, 0x0, 0x2, [0x3, 0x2, 0x6]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @multicast2}}}], 0xe8}, 0x81) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r4, &(0x7f0000000200)='E', 0x140000) 21:54:15 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000180)={0x400000, 0x0, 0x4}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) pipe(&(0x7f0000000000)={0xffffffffffffffff}) fcntl$setstatus(r3, 0x4, 0x42800) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f00000001c0)='vfat\x00', &(0x7f0000000240)='./file1\x00', 0xffffffffffffffff) 21:54:15 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe402000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:54:15 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) write(r0, &(0x7f0000000240)="c105bfe16dcc20984fb25dff1fcfcc0cae9d737ff3036f773207e0249172b6dcc7f5bf94cc92bcf7784fad0d27caea0d9ef42393db8a7ae019c4affb4299bece22d07b4e8eab05fd60df8504714c1c7b8813af46b54939837883c0e85c91948f8bf9b7168c3d9e870f00c36be283ec17045a3725d8df7a19b02785aa35c0d75482bcc05484ecb747385ebafb2631c1550908d1f77c04558fac51322d22c1b3293a5d5dbe41cfa8a9e6f55c1072ad6f1209b6bb0efd2cc5dfba09b3866cf986dd4c", 0xc1) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x713480, 0x197) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1cd042, 0x18) write(r2, &(0x7f0000000200)='E', 0x140000) [ 2166.148655] loop6: detected capacity change from 0 to 39 [ 2166.156803] loop7: detected capacity change from 0 to 39 [ 2166.160377] loop4: detected capacity change from 0 to 39 [ 2166.169332] syz-executor.6: attempt to access beyond end of device [ 2166.169332] loop6: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 2166.170249] Buffer I/O error on dev loop6, logical block 31, lost async page write [ 2166.188173] syz-executor.6: attempt to access beyond end of device [ 2166.188173] loop6: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 2166.189121] Buffer I/O error on dev loop6, logical block 31, lost async page write 21:54:15 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x83, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="1b901e48393d12bbb246b3409e2806c50805982a95ba33e37c1db7a27b65c681b091898df49d24e3c824b8eafdffffffffffffbf86775c3a9f5786bffe1311db1a3fbedb589e7c16e527ac089bcc9d8a70d028f7f7ea3498684c0b7cf5527ce2c7f304d94c3415070d6a184d40573bfed2a2b2ae741c4f0ae1d7269f1adea5fb6831d9", 0x0, 0x0, 0x0, 0x0, 0x0}) 21:54:15 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0xfdfd, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:54:15 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec01000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:54:29 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec02000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:54:29 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, 0x0, 0x0) 21:54:29 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r3, r2, 0x0, 0xfffffdef) 21:54:29 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x1000000, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:54:29 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) pipe(&(0x7f0000001440)={0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x42800) readlinkat(r0, &(0x7f0000001300)='./file1\x00', &(0x7f0000001340)=""/175, 0xaf) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) r2 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000001580)={'ip6gretap0\x00', &(0x7f0000001400)=@ethtool_rxfh_indir={0x39, 0x3, [0x3, 0x6, 0x800]}}) pread64(r2, &(0x7f0000000240)=""/4096, 0x1000, 0x1f) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[], 0x24f) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='attr/fscreate\x00') pipe(&(0x7f0000000000)={0xffffffffffffffff}) fcntl$setstatus(r5, 0x4, 0x42800) ioctl$GIO_UNISCRNMAP(r5, 0x4b69, &(0x7f0000001480)=""/223) openat(r4, &(0x7f00000001c0)='./file0\x00', 0x380, 0xc1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000001240)='./file0\x00', &(0x7f0000001280), &(0x7f00000012c0), 0x2, 0x1) write(r6, &(0x7f0000000200)='E', 0x140000) 21:54:29 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mkdir(&(0x7f0000000080)='./file0\x00', 0x181) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140000) 21:54:29 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x83, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="1b901e48393d12bbb246b3409e2806c50805982a95ba33e37c1db7a27b65c681b091898df49d24e3c824b8eafdffffffffffffbf86775c3a9f5786bffe1311db1a3fbedb589e7c16e527ac089bcc9d8a70d028f7f7ea3498684c0b7cf5527ce2c7f304d94c3415070d6a184d40573bfed2a2b2ae741c4f0ae1d7269f1adea5fb6831d9", 0x0, 0x0, 0x0, 0x0, 0x0}) 21:54:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xf, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x44}}, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r2, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8050}, 0x4000000) r3 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(r3, &(0x7f0000000340)='./file0/file0\x00', 0x40, 0x4e) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) r6 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000500)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x9, 0x9, 0xff, 0x3f, 0x0, 0x1, 0x1010, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x100, 0x4, @perf_config_ext={0x9, 0x1}, 0x4, 0x0, 0x7, 0x9, 0xfffffffffffffff8, 0x0, 0x2, 0x0, 0x9, 0x0, 0x2}, 0x0, 0xb, r6, 0x2) write(r5, &(0x7f0000000200)='E', 0x140000) 21:54:29 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa03000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2179.344267] loop7: detected capacity change from 0 to 39 21:54:29 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x83, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="1b901e48393d12bbb246b3409e2806c50805982a95ba33e37c1db7a27b65c681b091898df49d24e3c824b8eafdffffffffffffbf86775c3a9f5786bffe1311db1a3fbedb589e7c16e527ac089bcc9d8a70d028f7f7ea3498684c0b7cf5527ce2c7f304d94c3415070d6a184d40573bfed2a2b2ae741c4f0ae1d7269f1adea5fb6831d9", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2179.356018] loop6: detected capacity change from 0 to 39 [ 2179.361689] loop4: detected capacity change from 0 to 39 21:54:29 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="55901e48393d12bbb246b3409e2806c50805982a95ba33e37c1db7a27b65c681b091898df49d24e3c824b8eafdffffffffffffbf86775c3a9f5786bffe1311db1a3fbedb589e7c16e527ac089bcc9d8a70d028f7f7ea3498684c0b7cf5527ce2c7f304d94c3415070d6a184d40573bfed2a2b2ae741c4f0ae1d7269f1adea5fb6831d94720c9d7850dfac898f7b15ae0167f595003ab5af6d87d8c10377e574e127802349b9e853c44128373c413ae2bc905867cd6942e4cc55ebd33f43b5902d7455afd67b60f4967320a1075a4d4570de625c9f02338da9a0bfd4e32b8810e82351e4612409fd4c2444fad3b34c8404bac692b9bc4e1e45704d6fd88e3f29965daa9106008", 0x0, 0x2000000, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) [ 2179.411532] syz-executor.6: attempt to access beyond end of device [ 2179.411532] loop6: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 2179.413285] Buffer I/O error on dev loop6, logical block 31, lost async page write [ 2179.429223] syz-executor.6: attempt to access beyond end of device [ 2179.429223] loop6: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 2179.430856] Buffer I/O error on dev loop6, logical block 31, lost async page write 21:54:29 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0xc5, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="1b901e48393d12bbb246b3409e2806c50805982a95ba33e37c1db7a27b65c681b091898df49d24e3c824b8eafdffffffffffffbf86775c3a9f5786bffe1311db1a3fbedb589e7c16e527ac089bcc9d8a70d028f7f7ea3498684c0b7cf5527ce2c7f304d94c3415070d6a184d40573bfed2a2b2ae741c4f0ae1d7269f1adea5fb6831d94720c9d7850dfac898f7b15ae0167f595003ab5af6d87d8c10377e574e127802349b9e853c44128373c413ae2bc905867cd6942e4cc55ebd33f43b5902d7455afd67", 0x0, 0x0, 0x0, 0x0, 0x0}) 21:54:29 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, 0x0, 0x0) 21:54:29 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) pidfd_getfd(r1, r0, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x2, @empty, 0x1}, 0x1c) write(r0, &(0x7f0000000200)='E', 0x140000) [ 2179.533629] loop7: detected capacity change from 0 to 39 21:54:41 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0xc5, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="1b901e48393d12bbb246b3409e2806c50805982a95ba33e37c1db7a27b65c681b091898df49d24e3c824b8eafdffffffffffffbf86775c3a9f5786bffe1311db1a3fbedb589e7c16e527ac089bcc9d8a70d028f7f7ea3498684c0b7cf5527ce2c7f304d94c3415070d6a184d40573bfed2a2b2ae741c4f0ae1d7269f1adea5fb6831d94720c9d7850dfac898f7b15ae0167f595003ab5af6d87d8c10377e574e127802349b9e853c44128373c413ae2bc905867cd6942e4cc55ebd33f43b5902d7455afd67", 0x0, 0x0, 0x0, 0x0, 0x0}) 21:54:41 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:54:41 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140000) accept(r0, &(0x7f0000000340)=@xdp, &(0x7f00000003c0)=0x80) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x4, 0x1, &(0x7f0000000240)=[{&(0x7f0000000180)="c459934c43716303453e11c4fbe47fda422df61ffcabf605320e05a7a6a9132461cc324add2bed28fec78b12ce49a93f735a90eeee1c4e121927a86cd29da6053a5b320d39a7f77753389610afa4b32a822457da7e737f33d98add3e147d", 0x5e, 0x59}], 0x30a443, &(0x7f0000000280)={[{@nonumtail}, {@shortname_winnt}, {@uni_xlateno}, {@shortname_winnt}, {@utf8no}, {@shortname_mixed}, {@fat=@quiet}], [{@appraise_type}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@dont_measure}, {@fsmagic={'fsmagic', 0x3d, 0xa12}}]}) 21:54:41 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) open(&(0x7f0000000080)='./file1\x00', 0x80000, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) 21:54:41 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') pipe(&(0x7f0000000000)={0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x42800) r1 = openat(r0, &(0x7f00000000c0)='./file1\x00', 0x101442, 0x18c) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[], 0x24f) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) 21:54:41 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000240), 0x0) 21:54:41 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="55901e48393d12bbb246b3409e2806c50805982a95ba33e37c1db7a27b65c681b091898df49d24e3c824b8eafdffffffffffffbf86775c3a9f5786bffe1311db1a3fbedb589e7c16e527ac089bcc9d8a70d028f7f7ea3498684c0b7cf5527ce2c7f304d94c3415070d6a184d40573bfed2a2b2ae741c4f0ae1d7269f1adea5fb6831d94720c9d7850dfac898f7b15ae0167f595003ab5af6d87d8c10377e574e127802349b9e853c44128373c413ae2bc905867cd6942e4cc55ebd33f43b5902d7455afd67b60f4967320a1075a4d4570de625c9f02338da9a0bfd4e32b8810e82351e4612409fd4c2444fad3b34c8404bac692b9bc4e1e45704d6fd88e3f29965daa9106008", 0x0, 0x6000000, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:54:41 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r3, r2, 0x0, 0xfffffdef) [ 2191.385742] loop6: detected capacity change from 0 to 39 [ 2191.397686] loop7: detected capacity change from 0 to 39 [ 2191.409884] syz-executor.6: attempt to access beyond end of device [ 2191.409884] loop6: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 2191.410763] Buffer I/O error on dev loop6, logical block 31, lost async page write [ 2191.420852] loop4: detected capacity change from 0 to 39 [ 2191.422526] syz-executor.6: attempt to access beyond end of device [ 2191.422526] loop6: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 2191.423451] Buffer I/O error on dev loop6, logical block 31, lost async page write 21:54:41 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x7000000, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) 21:54:41 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000240), 0x0) 21:54:41 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x24f) sendfile(r3, r2, 0x0, 0xfffffdef) [ 2191.481473] syz-executor.4: attempt to access beyond end of device [ 2191.481473] loop4: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 2191.483262] Buffer I/O error on dev loop4, logical block 31, lost async page write [ 2191.499556] ------------[ cut here ]------------ [ 2191.500386] WARNING: CPU: 1 PID: 10885 at fs/ext4/file.c:611 ext4_file_write_iter+0xe2a/0x19b0 [ 2191.501702] Modules linked in: [ 2191.502227] CPU: 1 PID: 10885 Comm: syz-executor.3 Not tainted 6.5.0-rc2-next-20230721 #1 [ 2191.503320] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2191.504387] RIP: 0010:ext4_file_write_iter+0xe2a/0x19b0 [ 2191.505110] Code: 02 84 c0 74 08 3c 03 0f 8e 81 0b 00 00 41 8b 5f 20 31 ff 83 e3 08 89 de e8 53 d7 9b ff 85 db 0f 85 ef fc ff ff e8 a6 db 9b ff <0f> 0b e9 e3 fc ff ff e8 9a db 9b ff 48 8b 54 24 70 48 b8 00 00 00 [ 2191.507412] RSP: 0018:ffff88804453fc28 EFLAGS: 00010212 [ 2191.508128] RAX: 0000000000002c69 RBX: 0000000000000000 RCX: ffffc900027db000 [ 2191.509083] RDX: 0000000000040000 RSI: ffffffff81b0d53a RDI: 0000000000000005 [ 2191.510038] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 2191.511043] R10: 0000000000000000 R11: 0000000000000001 R12: fffffffffffffff5 [ 2191.512051] R13: ffff888047c82e70 R14: ffff88804453fdb0 R15: ffff88804453fe00 [ 2191.513049] FS: 00007febcf887700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 2191.517440] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2191.518231] CR2: 0000001b2c528000 CR3: 000000000f1b4000 CR4: 0000000000350ee0 [ 2191.519183] Call Trace: [ 2191.519543] [ 2191.519854] ? __warn+0xe6/0x340 [ 2191.520354] ? ext4_file_write_iter+0xe2a/0x19b0 [ 2191.521028] ? report_bug+0x2fe/0x400 [ 2191.521559] ? handle_bug+0x3c/0x70 [ 2191.522092] ? exc_invalid_op+0x18/0x50 [ 2191.522642] ? asm_exc_invalid_op+0x1a/0x20 [ 2191.523266] ? ext4_file_write_iter+0xe2a/0x19b0 [ 2191.523904] ? ext4_file_write_iter+0xe2a/0x19b0 [ 2191.524559] ? ext4_file_write_iter+0xe2a/0x19b0 [ 2191.524776] loop7: detected capacity change from 0 to 39 [ 2191.525235] ? lock_acquire+0x141/0x4c0 [ 2191.526207] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 2191.526883] ? lock_is_held_type+0x9f/0x120 [ 2191.527507] ? lock_is_held_type+0x9f/0x120 [ 2191.528123] vfs_write+0x97d/0xda0 [ 2191.528623] ? __pfx_vfs_write+0x10/0x10 [ 2191.529216] ? __fget_files+0x267/0x480 [ 2191.529812] ksys_write+0x122/0x250 [ 2191.530338] ? __pfx_ksys_write+0x10/0x10 [ 2191.530478] loop6: detected capacity change from 0 to 39 [ 2191.530892] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2191.531951] do_syscall_64+0x3f/0x90 [ 2191.532471] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 2191.533237] RIP: 0033:0x7febd2332b19 [ 2191.533771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2191.536045] RSP: 002b:00007febcf887188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2191.537045] RAX: ffffffffffffffda RBX: 00007febd2446020 RCX: 00007febd2332b19 [ 2191.537970] RDX: 0000000000140000 RSI: 0000000020000200 RDI: 0000000000000006 [ 2191.538877] RBP: 00007febd238cf6d R08: 0000000000000000 R09: 0000000000000000 [ 2191.539809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2191.540741] R13: 00007ffdf1ec602f R14: 00007febcf887300 R15: 0000000000022000 [ 2191.541699] [ 2191.542045] irq event stamp: 1141 [ 2191.542494] hardirqs last enabled at (1151): [] __up_console_sem+0x78/0x80 [ 2191.543593] hardirqs last disabled at (1162): [] __up_console_sem+0x5d/0x80 [ 2191.544695] softirqs last enabled at (702): [] irq_exit_rcu+0x93/0xc0 [ 2191.545769] softirqs last disabled at (689): [] irq_exit_rcu+0x93/0xc0 [ 2191.546806] ---[ end trace 0000000000000000 ]--- 21:54:41 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x3, 0x22000) sendfile(r1, r0, &(0x7f00000001c0)=0x5, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x5c7040, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) listxattr(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)=""/56, 0x38) 21:54:41 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:54:41 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0xc5, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="1b901e48393d12bbb246b3409e2806c50805982a95ba33e37c1db7a27b65c681b091898df49d24e3c824b8eafdffffffffffffbf86775c3a9f5786bffe1311db1a3fbedb589e7c16e527ac089bcc9d8a70d028f7f7ea3498684c0b7cf5527ce2c7f304d94c3415070d6a184d40573bfed2a2b2ae741c4f0ae1d7269f1adea5fb6831d94720c9d7850dfac898f7b15ae0167f595003ab5af6d87d8c10377e574e127802349b9e853c44128373c413ae2bc905867cd6942e4cc55ebd33f43b5902d7455afd67", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2191.589451] syz-executor.6: attempt to access beyond end of device [ 2191.589451] loop6: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 2191.590372] Buffer I/O error on dev loop6, logical block 31, lost async page write [ 2191.603188] syz-executor.6: attempt to access beyond end of device [ 2191.603188] loop6: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 2191.604125] Buffer I/O error on dev loop6, logical block 31, lost async page write 21:54:41 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000240), 0x0) 21:54:41 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440e31f00f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x24f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) 21:54:41 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x9000000, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) [ 2191.773254] loop4: detected capacity change from 0 to 39 [ 2191.780223] FAT-fs (loop4): Directory bread(block 9) failed [ 2191.781103] FAT-fs (loop4): Directory bread(block 10) failed [ 2191.781844] FAT-fs (loop4): Directory bread(block 11) failed [ 2191.782764] FAT-fs (loop4): Directory bread(block 12) failed [ 2191.783533] FAT-fs (loop4): Directory bread(block 13) failed [ 2191.784399] FAT-fs (loop4): Directory bread(block 14) failed [ 2191.785492] FAT-fs (loop4): Directory bread(block 15) failed [ 2191.786387] FAT-fs (loop4): Directory bread(block 16) failed [ 2191.787330] FAT-fs (loop4): Directory bread(block 17) failed [ 2191.789105] FAT-fs (loop4): Directory bread(block 18) failed [ 2191.878281] syz-executor.4: attempt to access beyond end of device [ 2191.878281] loop4: rw=2049, sector=3660, nr_sectors = 4 limit=39 [ 2191.883043] syz-executor.4: attempt to access beyond end of device [ 2191.883043] loop4: rw=2049, sector=3660, nr_sectors = 4 limit=39 [ 2191.884738] Buffer I/O error on dev loop4, logical block 915, lost async page write [ 2191.885889] syz-executor.4: attempt to access beyond end of device [ 2191.885889] loop4: rw=2049, sector=3668, nr_sectors = 4 limit=39 [ 2191.887685] Buffer I/O error on dev loop4, logical block 917, lost async page write [ 2191.905310] syz-executor.4: attempt to access beyond end of device [ 2191.905310] loop4: rw=2049, sector=3660, nr_sectors = 4 limit=39 [ 2191.907017] Buffer I/O error on dev loop4, logical block 915, lost async page write VM DIAGNOSIS: 21:54:41 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=ffff88806cf3fd80 RCX=ffffffff8141aded RDX=ffff888043f40000 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000003 RSP=ffff888019967810 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffed100d9e7fb1 R13=ffff88806cf3fd88 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff814cb0eb RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fb57e60c700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f9210487547 CR3=000000001c5aa000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff82521360 RDI=ffffffff87f8b860 RBP=ffffffff87f8b820 RSP=ffff88804453f5b8 R8 =0000000000000004 R9 =0000000000000010 R10=0000000000000010 R11=0000000000000001 R12=0000000000002710 R13=0000000000000020 R14=fffffbfff0ff175e R15=dffffc0000000000 RIP=ffffffff825213b5 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007febcf887700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2c528000 CR3=000000000f1b4000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0000000000ffff0000000000ffffffff XMM02=7463656a6e695f31313230385f7a7973 XMM03=00007f2bd0c9d7c800007f2bd0c9d7c0 XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000