_to_sid (unconfined_u) failed with errno=-22 [ 2534.038350] bio_check_eod: 3 callbacks suppressed [ 2534.038372] syz-executor.4: attempt to access beyond end of device [ 2534.038372] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2534.041296] buffer_io_error: 3 callbacks suppressed [ 2534.041311] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2534.063780] syz-executor.3: attempt to access beyond end of device [ 2534.063780] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2534.065614] Buffer I/O error on dev loop3, logical block 10, lost async page write 20:18:12 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2534.086964] syz-executor.1: attempt to access beyond end of device [ 2534.086964] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2534.088768] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 2534.111897] syz-executor.5: attempt to access beyond end of device [ 2534.111897] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2534.113626] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 2534.116553] syz-executor.2: attempt to access beyond end of device [ 2534.116553] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2534.118222] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2534.130840] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 20:18:12 executing program 0: syz_read_part_table(0x3, 0x0, 0x0) 20:18:12 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x1c}}, 0x2000c004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="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", 0x1d9}], 0x1) 20:18:12 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 48) [ 2534.177441] loop7: detected capacity change from 0 to 40 20:18:12 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 47) [ 2534.327254] loop4: detected capacity change from 0 to 40 [ 2534.330541] loop3: detected capacity change from 0 to 40 [ 2534.375698] syz-executor.3: attempt to access beyond end of device [ 2534.375698] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2534.378762] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2534.400045] syz-executor.4: attempt to access beyond end of device [ 2534.400045] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2534.401461] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2550.615761] loop7: detected capacity change from 0 to 40 [ 2550.622215] loop2: detected capacity change from 0 to 40 20:18:28 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 49) 20:18:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 48) 20:18:28 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 20:18:28 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 45) 20:18:28 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) recvmsg$unix(r1, &(0x7f0000000b00)={&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000640)=""/144, 0x90}, {&(0x7f0000000700)=""/141, 0x8d}, {&(0x7f00000007c0)=""/106, 0x6a}, {&(0x7f0000000840)=""/217, 0xd9}, {&(0x7f0000000940)=""/5, 0x5}, {&(0x7f0000000980)=""/163, 0xa3}], 0x6, &(0x7f0000000ac0)=[@cred={{0x1c}}], 0x20}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000001480)) openat(r4, &(0x7f0000000b80)='./file2\x00', 0x10000, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000001480)) openat(r3, &(0x7f0000000b40)='./file2\x00', 0x101000, 0xa0) chdir(&(0x7f0000000040)='./file0\x00') write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) 20:18:28 executing program 0: syz_read_part_table(0x4, 0x0, 0x0) 20:18:28 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x160, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x1c}}, 0x2000c004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="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", 0x1d9}], 0x1) 20:18:28 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x40, 0x0, 0x8, 0x8, 0x0, 0x2, 0xc0500, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x1, @perf_bp={&(0x7f00000000c0), 0x1e}, 0x84049, 0x4, 0x5, 0x7, 0x60000000000, 0x53, 0xc0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xe, 0xffffffffffffffff, 0x8) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2550.650248] loop5: detected capacity change from 0 to 40 [ 2550.672607] loop3: detected capacity change from 0 to 40 [ 2550.672871] loop4: detected capacity change from 0 to 40 [ 2550.681958] loop1: detected capacity change from 0 to 40 [ 2550.693092] syz-executor.5: attempt to access beyond end of device [ 2550.693092] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2550.693132] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 2550.707722] syz-executor.5: attempt to access beyond end of device [ 2550.707722] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2550.708774] Buffer I/O error on dev loop5, logical block 10, lost async page write 20:18:29 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2550.725177] syz-executor.4: attempt to access beyond end of device [ 2550.725177] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2550.726165] Buffer I/O error on dev loop4, logical block 10, lost async page write 20:18:29 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) 20:18:29 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 50) [ 2550.792099] loop7: detected capacity change from 0 to 40 [ 2550.818070] syz-executor.3: attempt to access beyond end of device [ 2550.818070] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2550.820207] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2550.834849] syz-executor.1: attempt to access beyond end of device [ 2550.834849] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2550.836745] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 2550.837998] loop5: detected capacity change from 0 to 40 20:18:29 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 46) [ 2550.896309] syz-executor.5: attempt to access beyond end of device [ 2550.896309] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2550.897425] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 2550.915840] loop2: detected capacity change from 0 to 40 [ 2550.918779] loop4: detected capacity change from 0 to 40 [ 2550.947109] syz-executor.2: attempt to access beyond end of device [ 2550.947109] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2550.948333] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2550.986951] syz-executor.4: attempt to access beyond end of device [ 2550.986951] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2550.988882] Buffer I/O error on dev loop4, logical block 10, lost async page write 20:18:50 executing program 0: syz_read_part_table(0x5, 0x0, 0x0) 20:18:50 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 51) 20:18:50 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 47) [ 2571.749205] loop4: detected capacity change from 0 to 40 [ 2571.759557] loop1: detected capacity change from 0 to 40 20:18:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 49) 20:18:50 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x160, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x1c}}, 0x2000c004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="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", 0x1d9}], 0x1) 20:18:50 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 20:18:50 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x8, 0x3) 20:18:50 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) recvmsg$unix(r1, &(0x7f0000000b00)={&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000640)=""/144, 0x90}, {&(0x7f0000000700)=""/141, 0x8d}, {&(0x7f00000007c0)=""/106, 0x6a}, {&(0x7f0000000840)=""/217, 0xd9}, {&(0x7f0000000940)=""/5, 0x5}, {&(0x7f0000000980)=""/163, 0xa3}], 0x6, &(0x7f0000000ac0)=[@cred={{0x1c}}], 0x20}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000001480)) openat(r4, &(0x7f0000000b80)='./file2\x00', 0x10000, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000001480)) openat(r3, &(0x7f0000000b40)='./file2\x00', 0x101000, 0xa0) chdir(&(0x7f0000000040)='./file0\x00') write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) [ 2571.792020] loop5: detected capacity change from 0 to 40 [ 2571.795567] loop2: detected capacity change from 0 to 40 [ 2571.796817] loop7: detected capacity change from 0 to 40 [ 2571.800003] loop3: detected capacity change from 0 to 40 [ 2571.841609] syz-executor.4: attempt to access beyond end of device [ 2571.841609] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2571.843535] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2571.875855] syz-executor.1: attempt to access beyond end of device [ 2571.875855] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2571.875899] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 2571.898112] syz-executor.3: attempt to access beyond end of device [ 2571.898112] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2571.898155] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2571.909969] syz-executor.5: attempt to access beyond end of device [ 2571.909969] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2571.910012] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 2571.912250] syz-executor.2: attempt to access beyond end of device [ 2571.912250] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2571.912518] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2571.930751] syz-executor.5: attempt to access beyond end of device [ 2571.930751] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2571.936577] Buffer I/O error on dev loop5, logical block 10, lost async page write 20:18:50 executing program 0: syz_read_part_table(0x6, 0x0, 0x0) 20:18:50 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 20:18:50 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) recvmsg$unix(r1, &(0x7f0000000b00)={&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000640)=""/144, 0x90}, {&(0x7f0000000700)=""/141, 0x8d}, {&(0x7f00000007c0)=""/106, 0x6a}, {&(0x7f0000000840)=""/217, 0xd9}, {&(0x7f0000000940)=""/5, 0x5}, {&(0x7f0000000980)=""/163, 0xa3}], 0x6, &(0x7f0000000ac0)=[@cred={{0x1c}}], 0x20}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000001480)) openat(r4, &(0x7f0000000b80)='./file2\x00', 0x10000, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000001480)) openat(r3, &(0x7f0000000b40)='./file2\x00', 0x101000, 0xa0) chdir(&(0x7f0000000040)='./file0\x00') write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) 20:18:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 50) 20:18:50 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 52) 20:18:50 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 48) 20:18:50 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x160, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x1c}}, 0x2000c004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="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", 0x1d9}], 0x1) 20:18:50 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) r2 = getpgrp(r1) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x20, 0x3, 0x4, 0x0, 0x0, 0x101, 0xe0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1020, 0xfff, 0x3, 0x9, 0x4, 0xff, 0xfc00, 0x0, 0x7, 0x0, 0xac}, r2, 0x0, 0xffffffffffffffff, 0x9) syz_open_procfs(r2, &(0x7f0000000040)='net/udp6\x00') [ 2572.117351] loop7: detected capacity change from 0 to 40 [ 2572.122216] loop1: detected capacity change from 0 to 40 [ 2572.139118] loop4: detected capacity change from 0 to 40 [ 2572.147849] loop3: detected capacity change from 0 to 40 [ 2572.161534] loop2: detected capacity change from 0 to 40 [ 2572.190917] loop5: detected capacity change from 0 to 40 20:18:50 executing program 0: syz_read_part_table(0x7, 0x0, 0x0) [ 2572.235510] syz-executor.4: attempt to access beyond end of device [ 2572.235510] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2572.237205] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2572.238762] syz-executor.3: attempt to access beyond end of device [ 2572.238762] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2572.240605] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2572.273557] syz-executor.2: attempt to access beyond end of device [ 2572.273557] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2572.273598] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2587.217327] loop7: detected capacity change from 0 to 40 [ 2587.237068] loop3: detected capacity change from 0 to 40 20:19:05 executing program 0: syz_read_part_table(0x8, 0x0, 0x0) 20:19:05 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x1c}}, 0x2000c004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="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", 0x1d9}], 0x1) 20:19:05 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 20:19:05 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 53) 20:19:05 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) recvmsg$unix(r1, &(0x7f0000000b00)={&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000640)=""/144, 0x90}, {&(0x7f0000000700)=""/141, 0x8d}, {&(0x7f00000007c0)=""/106, 0x6a}, {&(0x7f0000000840)=""/217, 0xd9}, {&(0x7f0000000940)=""/5, 0x5}, {&(0x7f0000000980)=""/163, 0xa3}], 0x6, &(0x7f0000000ac0)=[@cred={{0x1c}}], 0x20}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000001480)) openat(r3, &(0x7f0000000b80)='./file2\x00', 0x10000, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000001480)) openat(r2, &(0x7f0000000b40)='./file2\x00', 0x101000, 0xa0) chdir(&(0x7f0000000040)='./file0\x00') 20:19:05 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 51) 20:19:05 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000040)='./file0\x00', 0x97) 20:19:05 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 49) [ 2587.280824] loop5: detected capacity change from 0 to 40 [ 2587.282552] loop4: detected capacity change from 0 to 40 [ 2587.285611] loop1: detected capacity change from 0 to 40 [ 2587.296578] loop2: detected capacity change from 0 to 40 20:19:05 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 20:19:05 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 52) [ 2587.385251] syz-executor.5: attempt to access beyond end of device [ 2587.385251] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2587.386631] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 2587.394147] syz-executor.4: attempt to access beyond end of device [ 2587.394147] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2587.395362] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2587.400750] loop7: detected capacity change from 0 to 40 20:19:05 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) recvmsg$unix(r1, &(0x7f0000000b00)={&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000640)=""/144, 0x90}, {&(0x7f0000000700)=""/141, 0x8d}, {&(0x7f00000007c0)=""/106, 0x6a}, {&(0x7f0000000840)=""/217, 0xd9}, {&(0x7f0000000940)=""/5, 0x5}, {&(0x7f0000000980)=""/163, 0xa3}], 0x6, &(0x7f0000000ac0)=[@cred={{0x1c}}], 0x20}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000001480)) openat(r3, &(0x7f0000000b80)='./file2\x00', 0x10000, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000001480)) openat(r2, &(0x7f0000000b40)='./file2\x00', 0x101000, 0xa0) 20:19:05 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 54) 20:19:05 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x1c}}, 0x2000c004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="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", 0x1d9}], 0x1) [ 2587.510585] loop1: detected capacity change from 0 to 40 [ 2587.513464] loop4: detected capacity change from 0 to 40 [ 2587.524755] loop3: detected capacity change from 0 to 40 [ 2587.542905] syz-executor.4: attempt to access beyond end of device [ 2587.542905] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2587.544025] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2587.569097] syz-executor.2: attempt to access beyond end of device [ 2587.569097] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2587.569143] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2587.603085] syz-executor.3: attempt to access beyond end of device [ 2587.603085] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2587.604374] Buffer I/O error on dev loop3, logical block 10, lost async page write 20:19:21 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x1c}}, 0x2000c004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="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", 0x1d9}], 0x1) 20:19:21 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 20:19:21 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 53) 20:19:21 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) recvmsg$unix(r1, &(0x7f0000000b00)={&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000640)=""/144, 0x90}, {&(0x7f0000000700)=""/141, 0x8d}, {&(0x7f00000007c0)=""/106, 0x6a}, {&(0x7f0000000840)=""/217, 0xd9}, {&(0x7f0000000940)=""/5, 0x5}, {&(0x7f0000000980)=""/163, 0xa3}], 0x6, &(0x7f0000000ac0)=[@cred={{0x1c}}], 0x20}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000001480)) openat(r3, &(0x7f0000000b80)='./file2\x00', 0x10000, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000001480)) 20:19:21 executing program 0: syz_read_part_table(0xb, 0x0, 0x0) 20:19:21 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x101040, 0xa5) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x5, 0x100000000, 0x0, 0x7, 0x0, 0x0, {0x0, r2}}, 0x5) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) 20:19:21 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 55) 20:19:21 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 50) [ 2603.455824] loop5: detected capacity change from 0 to 40 [ 2603.473830] loop7: detected capacity change from 0 to 40 [ 2603.479002] loop4: detected capacity change from 0 to 40 [ 2603.479605] loop3: detected capacity change from 0 to 40 [ 2603.481434] loop2: detected capacity change from 0 to 40 [ 2603.487776] loop1: detected capacity change from 0 to 40 20:19:21 executing program 0: syz_read_part_table(0x18, 0x0, 0x0) [ 2603.522201] syz-executor.4: attempt to access beyond end of device [ 2603.522201] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2603.523241] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2603.540478] syz-executor.2: attempt to access beyond end of device [ 2603.540478] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2603.541497] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2603.543257] syz-executor.3: attempt to access beyond end of device [ 2603.543257] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2603.544275] Buffer I/O error on dev loop3, logical block 10, lost async page write 20:19:21 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 20:19:21 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) recvmsg$unix(r1, &(0x7f0000000b00)={&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000640)=""/144, 0x90}, {&(0x7f0000000700)=""/141, 0x8d}, {&(0x7f00000007c0)=""/106, 0x6a}, {&(0x7f0000000840)=""/217, 0xd9}, {&(0x7f0000000940)=""/5, 0x5}, {&(0x7f0000000980)=""/163, 0xa3}], 0x6, &(0x7f0000000ac0)=[@cred={{0x1c}}], 0x20}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000001480)) openat(r2, &(0x7f0000000b80)='./file2\x00', 0x10000, 0x0) 20:19:21 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="0000390034f8188c174b1af255dde13d404c2dc55222189cab5cdf3e85bed2c3cd487aa957e5a3b5301977f41d7a20f0472f5e4e407581d547aedb4b55753efd16fea0fd6832f76ed75e1426701b0ecd2d6a1a53da4fbe2ed20c3574a071f710cd1e38cc77ce1faa635182a8d45fa685c5971918baf16c5f5b8af65a69a47f80f9459c040008b94e0ba48910ab0d95767c5ccb2adf863c97144870623ce9046c52d94b264867fc020000000000000071341be16434139d5dacc187bc4f87d57cbc5c51c41eef80261ce65a2098b76750d56b11794581b20998f1fc1d9e87abf3355a8e7c0559101974468c79d19c612309cd3a71264fba0bb1f58538e8cbab3d848f42ecd8441a92ab85dc1214af9f82c93a7bbc9e3f363b74bf4177bc2a86ea158104fa01939b9b211f0b10a54271899ecca64355bb037638339e5c28b36d0a9db21b0fdf8225d9413f54351e27e53e2c8a7a36dafb98408868e1af2a43827d6f7974636212f552090000"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x164, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x1c}}, 0x2000c004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="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", 0x1d9}], 0x1) 20:19:21 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000001480)) r2 = accept(r1, 0x0, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) utimes(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)={{r4, r5/1000+60000}, {0x0, 0x2710}}) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000001480)) openat(r3, &(0x7f0000000080)='./file1\x00', 0x20001, 0x18) sendfile(r2, r1, 0x0, 0xfffffdef) 20:19:21 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 56) 20:19:21 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 54) 20:19:21 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 51) [ 2603.626490] loop5: detected capacity change from 0 to 40 [ 2603.644772] loop7: detected capacity change from 0 to 40 20:19:21 executing program 0: syz_read_part_table(0x64, 0x0, 0x0) [ 2603.660912] loop1: detected capacity change from 0 to 40 [ 2603.666744] loop3: detected capacity change from 0 to 40 [ 2603.678747] loop4: detected capacity change from 0 to 40 [ 2603.706466] syz-executor.3: attempt to access beyond end of device [ 2603.706466] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2603.706493] Buffer I/O error on dev loop3, logical block 10, lost async page write 20:19:22 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2603.715354] loop2: detected capacity change from 0 to 40 [ 2603.728053] syz-executor.4: attempt to access beyond end of device [ 2603.728053] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2603.728078] Buffer I/O error on dev loop4, logical block 10, lost async page write 20:19:22 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) recvmsg$unix(r1, &(0x7f0000000b00)={&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000640)=""/144, 0x90}, {&(0x7f0000000700)=""/141, 0x8d}, {&(0x7f00000007c0)=""/106, 0x6a}, {&(0x7f0000000840)=""/217, 0xd9}, {&(0x7f0000000940)=""/5, 0x5}, {&(0x7f0000000980)=""/163, 0xa3}], 0x6, &(0x7f0000000ac0)=[@cred={{0x1c}}], 0x20}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000001480)) 20:19:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 55) 20:19:22 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000001480)) sendfile(r3, r0, &(0x7f0000000040), 0x1) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000001480)) renameat(r4, &(0x7f0000000080)='./file1\x00', r0, &(0x7f00000000c0)='./file0\x00') 20:19:22 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 57) [ 2603.810100] loop7: detected capacity change from 0 to 40 [ 2603.826497] loop1: detected capacity change from 0 to 40 [ 2603.845157] loop3: detected capacity change from 0 to 40 [ 2603.859802] loop4: detected capacity change from 0 to 40 20:19:22 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 20:19:22 executing program 0: syz_read_part_table(0xfe, 0x0, 0x0) [ 2603.889767] syz-executor.3: attempt to access beyond end of device [ 2603.889767] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2603.890746] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2603.905254] syz-executor.4: attempt to access beyond end of device [ 2603.905254] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2603.906192] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2603.914194] loop5: detected capacity change from 0 to 40 [ 2603.941331] loop7: detected capacity change from 0 to 40 [ 2603.991767] syz-executor.5: attempt to access beyond end of device [ 2603.991767] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2603.993707] Buffer I/O error on dev loop5, logical block 10, lost async page write 20:19:37 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 58) [ 2619.648707] loop4: detected capacity change from 0 to 40 [ 2619.661529] loop7: detected capacity change from 0 to 40 20:19:37 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x164, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x1c}}, 0x2000c004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="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", 0x1d9}], 0x1) 20:19:37 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 56) 20:19:37 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 52) 20:19:37 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) recvmsg$unix(r1, &(0x7f0000000b00)={&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000640)=""/144, 0x90}, {&(0x7f0000000700)=""/141, 0x8d}, {&(0x7f00000007c0)=""/106, 0x6a}, {&(0x7f0000000840)=""/217, 0xd9}, {&(0x7f0000000940)=""/5, 0x5}, {&(0x7f0000000980)=""/163, 0xa3}], 0x6, &(0x7f0000000ac0)=[@cred={{0x1c}}], 0x20}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) 20:19:37 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 20:19:37 executing program 0: syz_read_part_table(0x300, 0x0, 0x0) 20:19:37 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) r1 = getpgrp(r0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x20, 0x3, 0x4, 0x0, 0x0, 0xfe, 0xe0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1460, 0xfff, 0x3, 0x9, 0x4, 0xff, 0xfc00, 0x0, 0x7, 0x0, 0xac}, r1, 0x0, 0xffffffffffffffff, 0x9) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) r3 = getpgrp(r2) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x20, 0x3, 0x4, 0x0, 0x0, 0x101, 0xe0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1020, 0xfff, 0x3, 0x9, 0x4, 0xff, 0xfc00, 0x0, 0x7, 0x0, 0xac}, r3, 0x0, 0xffffffffffffffff, 0x9) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) setpriority(0x2, r0, 0x8) r5 = getpgrp(r4) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x20, 0x3, 0x4, 0x0, 0x0, 0x47d8, 0x400e0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1020, 0xfff, 0x3, 0x5, 0x4, 0xfb, 0xfc00, 0x0, 0x7, 0x0, 0xac}, r5, 0x0, 0xffffffffffffffff, 0x9) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r6, 0x80086601, &(0x7f0000001480)) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x0, 0x4, 0x6, 0x9, 0x0, 0xa568, 0x48, 0x9, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffff965, 0x2, @perf_config_ext={0x1, 0x7}, 0x2180, 0x1ff, 0x9, 0xd, 0x0, 0xffff, 0xa2, 0x0, 0x5, 0x0, 0x6}, r5, 0xc, r6, 0xf) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x10) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) setsockopt$sock_timeval(r8, 0x1, 0x15, &(0x7f0000000180)={0x0, 0x2710}, 0x10) write$binfmt_aout(r8, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r8, r7, 0x0, 0xfffffdef) [ 2619.677240] loop3: detected capacity change from 0 to 40 [ 2619.696729] loop1: detected capacity change from 0 to 40 [ 2619.699791] syz-executor.4: attempt to access beyond end of device [ 2619.699791] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2619.700813] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2619.709352] loop2: detected capacity change from 0 to 40 [ 2619.721582] loop5: detected capacity change from 0 to 40 [ 2619.730227] loop0: detected capacity change from 0 to 1 20:19:38 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2619.750656] loop0: detected capacity change from 0 to 1 20:19:38 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 59) [ 2619.790433] syz-executor.2: attempt to access beyond end of device [ 2619.790433] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2619.791531] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2619.798300] syz-executor.3: attempt to access beyond end of device [ 2619.798300] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2619.800088] Buffer I/O error on dev loop3, logical block 10, lost async page write 20:19:38 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) recvmsg$unix(r1, &(0x7f0000000b00)={&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000640)=""/144, 0x90}, {&(0x7f0000000700)=""/141, 0x8d}, {&(0x7f00000007c0)=""/106, 0x6a}, {&(0x7f0000000840)=""/217, 0xd9}, {&(0x7f0000000940)=""/5, 0x5}, {&(0x7f0000000980)=""/163, 0xa3}], 0x6, &(0x7f0000000ac0)=[@cred={{0x1c}}], 0x20}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) [ 2619.815443] syz-executor.5: attempt to access beyond end of device [ 2619.815443] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2619.816497] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 2619.825868] loop7: detected capacity change from 0 to 40 [ 2619.859584] loop4: detected capacity change from 0 to 40 [ 2619.872819] loop1: detected capacity change from 0 to 40 [ 2619.940315] syz-executor.4: attempt to access beyond end of device [ 2619.940315] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2619.942085] Buffer I/O error on dev loop4, logical block 10, lost async page write 20:19:52 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 60) 20:19:52 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) recvmsg$unix(r1, &(0x7f0000000b00)={&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000640)=""/144, 0x90}, {&(0x7f0000000700)=""/141, 0x8d}, {&(0x7f00000007c0)=""/106, 0x6a}, {&(0x7f0000000840)=""/217, 0xd9}, {&(0x7f0000000940)=""/5, 0x5}, {&(0x7f0000000980)=""/163, 0xa3}], 0x6, &(0x7f0000000ac0)=[@cred={{0x1c}}], 0x20}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) 20:19:52 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = syz_open_dev$mouse(&(0x7f0000000240), 0xd93e, 0x20481) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x9, 0x3, &(0x7f0000000540)=[{&(0x7f0000000380)="149884c238f761614e5b506346a61f1789feaccc5591477b21a6750f51ed7f37afd2be96d8b8cdf98ac63169283eba9f2bf7a6a58ea97c768307f2533bd56c9f9cd64a0853315df69a63e970f4736ded20705bb98e84927e956d58b1de1cb6a37b9a8b15b1c4cc061f0bca98e6c59dcef9b5677c31a31247c24dc72ace7da4063ad7e4b4ea2999daf6588108920d0aa739ebc57813b4534583cf0729662965cadeee3010a7f622c237b431e16168523de7deeba205b284081736fe6bb64a40c980e30964adc0fa54b89a1bdd06e0443e0972fffdc5baa0d5c8", 0xd9, 0x7f}, {&(0x7f0000000480)="f84a91e36e09dab8345d742305cf400f1f5d104d80cb56916a7f6b9543b29d47be5b07fb0e6ffa58e9dbede1d533328449799850c5d9c81d8933981d4b92694a75d3b09e1383353efdb41bc32f18ce8714e412fb937e8997ec1d102f2bb4bbdcb14264041d7c1930c3d39f9234505230a990e9ac7e702759a4bc1853b5bd37e98234c40fcfde72b60bac0526df9b34c655e9be6bf8bb577fd321fd2f8754", 0x9e, 0x7}, {&(0x7f0000000f40)="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", 0x1000, 0x1}], 0x84000, &(0x7f00000005c0)={[{@numtail}, {@numtail}], [{@obj_type={'obj_type', 0x3d, '#-\xfb[$@\xa7'}}, {@smackfsdef={'smackfsdef', 0x3d, 'mountinfo\x00'}}, {@dont_measure}, {@measure}, {@uid_lt={'uid<', r2}}, {@uid_lt={'uid<', r3}}]}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000640)=[{{&(0x7f0000000280), 0x6e, &(0x7f0000000480)=[{&(0x7f0000000300)=""/188, 0xbc}, {&(0x7f00000003c0)}, {&(0x7f0000000400)=""/108, 0x6c}], 0x3, &(0x7f00000004c0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x158}}], 0x1, 0x10002, &(0x7f0000000680)={0x77359400}) mount$9p_fd(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f00000001c0), 0x80011, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}, {@access_any}, {@fscache}, {@access_any}, {@afid={'afid', 0x3d, 0x3f}}, {@cache_mmap}], [{@euid_gt={'euid>', r3}}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x64, 0x32, 0x53, 0x63, 0x36, 0x35, 0xa5], 0x2d, [0x62, 0x65, 0x34, 0x31], 0x2d, [0x62, 0x37, 0x36, 0x64], 0x2d, [0x37, 0x38, 0x36, 0x63], 0x2d, [0x66, 0x36, 0x38, 0x32, 0x30, 0x36, 0x35, 0x61]}}}, {@appraise_type}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@euid_gt={'euid>', r4}}]}}) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180)=@v3={0x3000000, [{0x3df6, 0x80000001}, {0x19c, 0x100}], 0xee01}, 0x18, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000040)={0x8000, 0x6, 0x0, 0x9, 0x401}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r6, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r6, r5, 0x0, 0xfffffdef) [ 2634.414073] loop5: detected capacity change from 0 to 40 20:19:52 executing program 0: syz_read_part_table(0x480, 0x0, 0x0) 20:19:52 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 20:19:52 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="0000390034f8188c174b1af255dde13d404c2dc55222189cab5cdf3e85bed2c3cd487aa957e5a3b5301977f41d7a20f0472f5e4e407581d547aedb4b55753efd16fea0fd6832f76ed75e1426701b0ecd2d6a1a53da4fbe2ed20c3574a071f710cd1e38cc77ce1faa635182a8d45fa685c5971918baf16c5f5b8af65a69a47f80f9459c040008b94e0ba48910ab0d95767c5ccb2adf863c97144870623ce9046c52d94b264867fc020000000000000071341be16434139d5dacc187bc4f87d57cbc5c51c41eef80261ce65a2098b76750d56b11794581b20998f1fc1d9e87abf3355a8e7c0559101974468c79d19c612309cd3a71264fba0bb1f58538e8cbab3d848f42ecd8441a92ab85dc1214af9f82c93a7bbc9e3f363b74bf4177bc2a86ea158104fa01939b9b211f0b10a54271899ecca64355bb037638339e5c28b36d0a9db21b0fdf8225d9413f54351e27e53e2c8a7a36dafb98408868e1af2a43827d6f7974636212f552090000"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x164, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x1c}}, 0x2000c004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="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", 0x1d9}], 0x1) 20:19:52 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 57) 20:19:52 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 53) [ 2634.438981] loop7: detected capacity change from 0 to 40 [ 2634.444911] loop0: detected capacity change from 0 to 2 [ 2634.469356] loop2: detected capacity change from 0 to 40 [ 2634.475878] loop3: detected capacity change from 0 to 40 20:19:52 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240), &(0x7f0000000280), 0x2, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = creat(&(0x7f00000000c0)='./file2\x00', 0x22) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) signalfd4(r2, &(0x7f0000000180)={[0x3]}, 0x8, 0x80000) openat(r3, &(0x7f0000000080)='./file0\x00', 0x2, 0x0) [ 2634.490435] loop0: detected capacity change from 0 to 2 [ 2634.490967] loop4: detected capacity change from 0 to 40 20:19:52 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2634.497975] loop1: detected capacity change from 0 to 40 [ 2634.577088] syz-executor.4: attempt to access beyond end of device [ 2634.577088] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2634.577135] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2634.587939] loop5: detected capacity change from 0 to 40 [ 2634.592521] loop7: detected capacity change from 0 to 40 20:19:52 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 58) [ 2634.624643] syz-executor.5: attempt to access beyond end of device [ 2634.624643] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2634.625600] Buffer I/O error on dev loop5, logical block 10, lost async page write 20:19:52 executing program 0: syz_read_part_table(0x500, 0x0, 0x0) 20:19:52 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) 20:19:53 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x1c}}, 0x2000c004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="02b2dccad213e1e6cf54b7a797f8f22a47f25b7658fb110b2e76f95b0f318b8fa745e6ffba4414d29a42bfab524bc5bffb17decc4540a6f00b9772f5f9789a9525790df8d989b23530d0a1398f2ad734c7ff47961be476ffeec81efa3d3aa64b8ea329261dfc2e1047a68670f0e5950d6a5414956bddd09e101b5b66e5742fe843413e065e3b86a242b37bc58c68153a45015f6f1ea67762c302e461e0c84bbb7f8d464f5a72d9fad56dac0c5028a4012a93dbc7da640786e3c9898cdd8fe091b166bfcd66e6257abc923ceaf90e994deded3fe8a59c2105f5caf366d32170ef51299dbf441bc3cddda352a2e07375fb44e75fed8082f3e960015d9bcddb0c834feda68d113a9a9fc0d1c30153685caf43b176219b666d74e67b6192cfd8a561c6c4aadcc80ed8c469bc41b028f1db515d699e45ad3379f9b1edb8de4bb2f8615d6716297baac7e45073fcecf31e51ec78c40edd78f245bced04414f849fb961fbbe79ff2ed7c48ec1b5331f9755d7094986fc8da198ce4a12f9ddfb43e565bc4fed618da9a693d03c3e7ec4b3014dfc022103e277c1b12efb03ef8b197f3a931f6cbe238cf8a4e7639b409b4586f66da41b94eed69d52ba9fde5aa1ee774d4e626932dc3511b10ae3bc3e8688a7a83b0467dfbf9295174739", 0x1d9}], 0x1) 20:19:53 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 61) [ 2634.710683] loop0: detected capacity change from 0 to 2 [ 2634.711399] syz-executor.2: attempt to access beyond end of device [ 2634.711399] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2634.712347] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2634.720749] loop7: detected capacity change from 0 to 40 [ 2634.731242] loop0: detected capacity change from 0 to 2 [ 2634.765722] loop3: detected capacity change from 0 to 40 [ 2634.816802] syz-executor.3: attempt to access beyond end of device [ 2634.816802] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2634.817814] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2634.822904] loop4: detected capacity change from 0 to 40 [ 2634.852760] syz-executor.4: attempt to access beyond end of device [ 2634.852760] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2634.853744] Buffer I/O error on dev loop4, logical block 10, lost async page write 20:20:08 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 62) 20:20:08 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) 20:20:08 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) recvmsg$unix(r1, &(0x7f0000000b00)={&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000640)=""/144, 0x90}, {&(0x7f0000000700)=""/141, 0x8d}, {&(0x7f00000007c0)=""/106, 0x6a}, {&(0x7f0000000840)=""/217, 0xd9}, {&(0x7f0000000940)=""/5, 0x5}, {&(0x7f0000000980)=""/163, 0xa3}], 0x6, &(0x7f0000000ac0)=[@cred={{0x1c}}], 0x20}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) 20:20:08 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 54) 20:20:09 executing program 0: syz_read_part_table(0x600, 0x0, 0x0) 20:20:09 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x1c}}, 0x2000c004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="02b2dccad213e1e6cf54b7a797f8f22a47f25b7658fb110b2e76f95b0f318b8fa745e6ffba4414d29a42bfab524bc5bffb17decc4540a6f00b9772f5f9789a9525790df8d989b23530d0a1398f2ad734c7ff47961be476ffeec81efa3d3aa64b8ea329261dfc2e1047a68670f0e5950d6a5414956bddd09e101b5b66e5742fe843413e065e3b86a242b37bc58c68153a45015f6f1ea67762c302e461e0c84bbb7f8d464f5a72d9fad56dac0c5028a4012a93dbc7da640786e3c9898cdd8fe091b166bfcd66e6257abc923ceaf90e994deded3fe8a59c2105f5caf366d32170ef51299dbf441bc3cddda352a2e07375fb44e75fed8082f3e960015d9bcddb0c834feda68d113a9a9fc0d1c30153685caf43b176219b666d74e67b6192cfd8a561c6c4aadcc80ed8c469bc41b028f1db515d699e45ad3379f9b1edb8de4bb2f8615d6716297baac7e45073fcecf31e51ec78c40edd78f245bced04414f849fb961fbbe79ff2ed7c48ec1b5331f9755d7094986fc8da198ce4a12f9ddfb43e565bc4fed618da9a693d03c3e7ec4b3014dfc022103e277c1b12efb03ef8b197f3a931f6cbe238cf8a4e7639b409b4586f66da41b94eed69d52ba9fde5aa1ee774d4e626932dc3511b10ae3bc3e8688a7a83b0467dfbf9295174739", 0x1d9}], 0x1) 20:20:09 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 59) [ 2650.702414] loop4: detected capacity change from 0 to 40 20:20:09 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000480)=[{&(0x7f0000000180)="21906689a8f9e38a7b96b402e7dfb73b5b3b79abc763a92cff18c6fe4e066b99b94d063c1eb61ae7eaf230e2c4aab83f91e88d74f15b12a35f0e6c4b0f5b7f43142c5968779760c547ee3486c08e6b37cb48ef5b9c698e65589f5032013896592679be9c3d3e0e5f231b30bd28000787a4ed3035ff4a60325a2d8f5e3d32178c2945e6bcb49fc72d22070da7732adcc762b247bf39165a445cf858772f0b96367a7547f5b10b019a8a5c52628b6aa0ba8881fa269fcc1f03c65e", 0xba, 0x8}, {&(0x7f0000000080)="2439cfe7eed45d0aaaa23b6a054c7ffc1e1596e238f88d948aa5c9415c885e68750274e8f935944b354ffbcec20860cef5093a7805a6f953a6", 0x39, 0x1000}, {&(0x7f0000000240)="a792c91fabd5bff2e0e62657241201e1cfd4a007e80662ab409d05691331b7ad1bc89da6c44df4c8b05a7742bb2e3477bd89ebcd6dcef67ad240834c7958d5194d77d20b1ff4c36a47807fe24597adb3a53c8ff463fd95439b70bf5b236ad1d8c54855c49b99a9c3e8113c944c207943e775a433a5b12dca471de0de970e25aaf1ea82ecc75ca18db149c13a914412c43f606e5f6446b73af43cdd4e171de8a9036666231cd6c97d", 0xa8, 0x6}, {&(0x7f0000000300)="4a9912e89dc0e879ef80f8e8a40185094fe1158acbd3760814d76c799d760c149401d399ba1b5deabe6a51716e8e134e7881c3b54ee2cb066e6ca4d296feaceadd86e4d06db7c51a544fca362308a3c81ef093bb50995f196a05efd70f506fe84f6a23761b6ea191d6ca60df1ba15eeb2c3eeac7652d682a9bcf5bbfd4eccb2541b4ceb6f10967827f29c2fb713933b09075f4e9e6c7f54d5b9b7062ee3361bc1a71df17df341fa20be85fcd3904d5fd375c9e1f1a70f9b1982b7a27fab65ee47d9f29f282c3b35fa712ef7dd64d9926b6629d908b1e97e2108ef2d6206f7f9b9a9b4dfc254cd5c9ed9c0cc9054fbe9d7a3cd7c133a753", 0xf7, 0xffffffffffffff37}, {&(0x7f0000000400)="456df5cc7bbb26fc7e749859e100ab9388d82048c1dc18371780007048eeb53f4f2b75bd26010666520a8406c7bbf3d149a19ac7dc236b9232952e38d0415a0db1981d", 0x43, 0x1000}, {&(0x7f00000000c0)="1073f4e08e91e56b", 0x8, 0xfffffffffffffff9}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) rmdir(&(0x7f0000000040)='./file1\x00') [ 2650.732679] loop7: detected capacity change from 0 to 40 [ 2650.743115] loop0: detected capacity change from 0 to 3 [ 2650.747547] loop2: detected capacity change from 0 to 40 [ 2650.759005] loop1: detected capacity change from 0 to 40 [ 2650.764446] loop0: detected capacity change from 0 to 3 [ 2650.768878] loop3: detected capacity change from 0 to 40 [ 2650.776775] loop5: detected capacity change from 0 to 16383 [ 2650.792962] syz-executor.4: attempt to access beyond end of device [ 2650.792962] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2650.793007] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2650.896218] syz-executor.3: attempt to access beyond end of device [ 2650.896218] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2650.898046] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2650.901055] FAT-fs (loop5): invalid media value (0xe1) [ 2650.901908] FAT-fs (loop5): Can't find a valid FAT filesystem 20:20:09 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 63) 20:20:09 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) 20:20:09 executing program 0: syz_read_part_table(0x700, 0x0, 0x0) 20:20:09 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x1c}}, 0x2000c004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="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", 0x1d9}], 0x1) 20:20:09 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) recvmsg$unix(r1, &(0x7f0000000b00)={&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000640)=""/144, 0x90}, {&(0x7f0000000700)=""/141, 0x8d}, {&(0x7f00000007c0)=""/106, 0x6a}, {&(0x7f0000000840)=""/217, 0xd9}, {&(0x7f0000000940)=""/5, 0x5}, {&(0x7f0000000980)=""/163, 0xa3}], 0x6, &(0x7f0000000ac0)=[@cred={{0x1c}}], 0x20}, 0x0) [ 2651.032600] syz-executor.2: attempt to access beyond end of device [ 2651.032600] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2651.034593] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2651.035289] loop7: detected capacity change from 0 to 40 [ 2651.061884] loop4: detected capacity change from 0 to 40 [ 2651.073148] loop1: detected capacity change from 0 to 40 20:20:09 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 60) [ 2651.087692] loop0: detected capacity change from 0 to 3 [ 2651.126460] loop0: detected capacity change from 0 to 3 [ 2651.171585] loop0: unable to read partition table [ 2651.173846] loop0: partition table beyond EOD, truncated [ 2651.191543] syz-executor.4: attempt to access beyond end of device [ 2651.191543] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2651.193290] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2651.279887] loop3: detected capacity change from 0 to 40 [ 2651.381032] syz-executor.3: attempt to access beyond end of device [ 2651.381032] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2651.383685] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2651.605581] loop5: detected capacity change from 0 to 16383 [ 2651.617463] FAT-fs (loop5): Unrecognized mount option "./file0" or missing value 20:20:26 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 55) 20:20:26 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="601c6d6b646f7366d8a02b0008dc2be41d7c62ce9922ad0307efff000100044000200091567c9e0e6a92af77b013f7f809772a087a334dc6c430cc6b1f845ef04f3c5b7d40ea1806f08ec489e80cb4fbcb23c1b412e94da7ba161ceb76d78a852f8825120286d95a5500aa94389661881c3593398033c1dd1e3ac05aa87c75997c5307f3b353edb576284aa621ac524ffc274ff16e578ccad49f7d3b35c38a6281835b9a5fd7", 0xa6}, {0x0, 0x0, 0x27fd}], 0x1d0c40, &(0x7f0000000680)=ANY=[@ANYRESDEC=r0, @ANYBLOB="76591933de7288e9232a57dbda0df37fd600a61f64e7d789225e9c39830e6a961ce3ff482f1df10ed53b8a7b00e1a1af99af37557187eacb61dab05f46a264d38dd768d6074a959e27b8c1bcd5c1dfa686915a06542b4819bcbbf97696079ede0d2a6ee7d27ded7af494b0cf25f730788f2a18359c3d722fd5f5541b19", @ANYBLOB="116d581b1a0f3f116d1cee0e9dfd7242b7cccb24303d9616afb9decb7feb38d28c9b329066247f0e0dbb09e4795a4392082c0cc5f9efa66055f85e977e6e99a729d1173c1ac78eb7b01445164ad9803232b701ff0d945d5fce10e34655b9ea5e7418bb3acf74585f7f9d32c1f5074d2e000000000000029775c95e6c75b5d97e0448888635200df93432e4b29e5d09aa8bd01313310fd7ae1eb13f3c716639f645c4c5c52001267a98afc2e2ca273f547dfa1aba1057940648850fd4ff084d2c7ec4cb354254d750358bb1d6274a18748723566d6445cadce3d02b59503732f5b7d463d4704b6e744e", @ANYRES32, @ANYBLOB="942316f379c6c85383f9ef96b76b667b39c3881912262fc03d86e0167c37a961bc067f271331974677d03ca030f788e38a7be19640384e4d0da04eb82c3539c23d4cfe3b39049899c9222a6061720a41d84007392608245a87454d7aa856fe62dad1ab0501a0a351a42bc91ca47e0445be9e9dfff0f103ee1e4387101a18b7d10df0d88e23b568176e34effbebd94878260a6b0ebc81052060bf356949d3cb66c5c7039db605d0cfa513e0b3b0a0d8615b788199675ed4d2988ffdcff8a8f56010207b1b8aa133f904560dfa7e4b2d1afa7cd641cabb9b288e3ec41ad7"]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) accept$unix(r1, &(0x7f0000000040), &(0x7f00000000c0)=0x6e) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) 20:20:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 61) 20:20:26 executing program 0: syz_read_part_table(0xb00, 0x0, 0x0) 20:20:26 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 64) 20:20:26 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="0000390034f8188c174b1af255dde13d404c2dc55222189cab5cdf3e85bed2c3cd487aa957e5a3b5301977f41d7a20f0472f5e4e407581d547aedb4b55753efd16fea0fd6832f76ed75e1426701b0ecd2d6a1a53da4fbe2ed20c3574a071f710cd1e38cc77ce1faa635182a8d45fa685c5971918baf16c5f5b8af65a69a47f80f9459c040008b94e0ba48910ab0d95767c5ccb2adf863c97144870623ce9046c52d94b264867fc020000000000000071341be16434139d5dacc187bc4f87d57cbc5c51c41eef80261ce65a2098b76750d56b11794581b20998f1fc1d9e87abf3355a8e7c0559101974468c79d19c612309cd3a71264fba0bb1f58538e8cbab3d848f42ecd8441a92ab85dc1214af9f82c93a7bbc9e3f363b74bf4177bc2a86ea158104fa01939b9b211f0b10a54271899ecca64355bb037638339e5c28b36d0a9db21b0fdf8225d9413f54351e27e53e2c8a7a36dafb98408868e1af2a43827d6f7974636212f552090000"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x1c}}, 0x2000c004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="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", 0x1d9}], 0x1) 20:20:26 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:20:26 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) [ 2668.648793] loop7: detected capacity change from 0 to 40 [ 2668.654236] loop1: detected capacity change from 0 to 40 [ 2668.655035] loop3: detected capacity change from 0 to 40 [ 2668.659672] loop2: detected capacity change from 0 to 40 [ 2668.664463] loop0: detected capacity change from 0 to 5 [ 2668.677612] loop0: detected capacity change from 0 to 5 [ 2668.681842] loop4: detected capacity change from 0 to 40 [ 2668.694612] loop5: detected capacity change from 0 to 39 [ 2668.766605] syz-executor.3: attempt to access beyond end of device [ 2668.766605] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2668.766654] Buffer I/O error on dev loop3, logical block 10, lost async page write 20:20:27 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) 20:20:27 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:20:27 executing program 0: syz_read_part_table(0x1800, 0x0, 0x0) [ 2668.876153] loop7: detected capacity change from 0 to 40 20:20:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 62) [ 2668.920771] syz-executor.2: attempt to access beyond end of device [ 2668.920771] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2668.922543] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2668.944515] syz-executor.4: attempt to access beyond end of device [ 2668.944515] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2668.946205] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2668.956538] loop0: detected capacity change from 0 to 12 20:20:27 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) [ 2669.002012] loop1: detected capacity change from 0 to 40 [ 2669.003501] loop0: detected capacity change from 0 to 12 [ 2669.006674] loop3: detected capacity change from 0 to 40 20:20:27 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x1c}}, 0x2000c004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="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", 0x1d9}], 0x1) [ 2669.075171] loop7: detected capacity change from 0 to 40 20:20:27 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 65) [ 2669.115624] syz-executor.3: attempt to access beyond end of device [ 2669.115624] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2669.117310] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2669.168884] loop4: detected capacity change from 0 to 40 20:20:27 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 56) 20:20:27 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0x0) [ 2669.226366] loop7: detected capacity change from 0 to 40 [ 2669.316640] syz-executor.4: attempt to access beyond end of device [ 2669.316640] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2669.318351] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2669.379384] loop2: detected capacity change from 0 to 40 [ 2669.429922] syz-executor.2: attempt to access beyond end of device [ 2669.429922] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2669.430969] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2669.510500] loop5: detected capacity change from 0 to 39 [ 2669.517121] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2669.517905] Buffer I/O error on dev loop5, logical block 0, async page read [ 2669.518477] loop5: unable to read partition table [ 2669.519858] loop5: partition table beyond EOD, truncated 20:20:41 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 63) 20:20:41 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x148) openat(r3, &(0x7f0000000080)='./file0\x00', 0x2001, 0x8a) 20:20:41 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 57) 20:20:41 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 66) 20:20:41 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x1c}}, 0x2000c004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="02b2dccad213e1e6cf54b7a797f8f22a47f25b7658fb110b2e76f95b0f318b8fa745e6ffba4414d29a42bfab524bc5bffb17decc4540a6f00b9772f5f9789a9525790df8d989b23530d0a1398f2ad734c7ff47961be476ffeec81efa3d3aa64b8ea329261dfc2e1047a68670f0e5950d6a5414956bddd09e101b5b66e5742fe843413e065e3b86a242b37bc58c68153a45015f6f1ea67762c302e461e0c84bbb7f8d464f5a72d9fad56dac0c5028a4012a93dbc7da640786e3c9898cdd8fe091b166bfcd66e6257abc923ceaf90e994deded3fe8a59c2105f5caf366d32170ef51299dbf441bc3cddda352a2e07375fb44e75fed8082f3e960015d9bcddb0c834feda68d113a9a9fc0d1c30153685caf43b176219b666d74e67b6192cfd8a561c6c4aadcc80ed8c469bc41b028f1db515d699e45ad3379f9b1edb8de4bb2f8615d6716297baac7e45073fcecf31e51ec78c40edd78f245bced04414f849fb961fbbe79ff2ed7c48ec1b5331f9755d7094986fc8da198ce4a12f9ddfb43e565bc4fed618da9a693d03c3e7ec4b3014dfc022103e277c1b12efb03ef8b197f3a931f6cbe238cf8a4e7639b409b4586f66da41b94eed69d52ba9fde5aa1ee774d4e626932dc3511b10ae3bc3e8688a7a83b0467dfbf9295174739", 0x1d9}], 0x1) 20:20:41 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) recvmsg$unix(r1, &(0x7f0000000b00)={&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000640)=""/144, 0x90}, {&(0x7f0000000700)=""/141, 0x8d}, {&(0x7f00000007c0)=""/106, 0x6a}, {&(0x7f0000000840)=""/217, 0xd9}, {&(0x7f0000000940)=""/5, 0x5}, {&(0x7f0000000980)=""/163, 0xa3}], 0x6, &(0x7f0000000ac0)=[@cred={{0x1c}}], 0x20}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) 20:20:41 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:20:41 executing program 0: syz_read_part_table(0x2000, 0x0, 0x0) [ 2683.617443] loop1: detected capacity change from 0 to 40 [ 2683.617480] loop4: detected capacity change from 0 to 40 [ 2683.621001] loop0: detected capacity change from 0 to 16 [ 2683.635223] loop7: detected capacity change from 0 to 40 [ 2683.647444] loop0: detected capacity change from 0 to 16 [ 2683.662729] loop3: detected capacity change from 0 to 40 [ 2683.668895] syz-executor.4: attempt to access beyond end of device [ 2683.668895] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2683.670282] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2683.673198] loop2: detected capacity change from 0 to 40 [ 2683.682400] loop5: detected capacity change from 0 to 40 20:20:42 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:20:42 executing program 0: syz_read_part_table(0x6400, 0x0, 0x0) 20:20:42 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 67) [ 2683.801519] syz-executor.3: attempt to access beyond end of device [ 2683.801519] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2683.803548] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2683.812029] syz-executor.5: attempt to access beyond end of device [ 2683.812029] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2683.814030] Buffer I/O error on dev loop5, logical block 10, lost async page write 20:20:42 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) recvmsg$unix(r1, &(0x7f0000000b00)={&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000640)=""/144, 0x90}, {&(0x7f0000000700)=""/141, 0x8d}, {&(0x7f00000007c0)=""/106, 0x6a}, {&(0x7f0000000840)=""/217, 0xd9}, {&(0x7f0000000940)=""/5, 0x5}, {&(0x7f0000000980)=""/163, 0xa3}], 0x6, &(0x7f0000000ac0)=[@cred={{0x1c}}], 0x20}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) [ 2683.882762] loop1: detected capacity change from 0 to 40 [ 2683.888600] loop0: detected capacity change from 0 to 50 [ 2683.916064] loop0: detected capacity change from 0 to 50 [ 2683.922651] loop4: detected capacity change from 0 to 40 20:20:42 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 64) [ 2683.955563] loop7: detected capacity change from 0 to 40 20:20:42 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000500)=[{&(0x7f0000000380)="7fe7117b0e4e264a653c4750acfc88eb3c55af820078fe2152f009ea3ec34e431af9b0f749b3c22b27ff1b1988c85da570f1a473eaa74db2cd5d2a5527df964d8fce7085f3b3838be8d568d25d2b648108c17cc5144e6f29abbf6069ec0c185bfd8eded5b7e7da0a34ab61958088d1688dc75ef5819936d2905b46fc7893510cde823300fb5de5372ad1f282b30167646d3d2e0ce1f2c624e08a48c0af64ad476c8f8f8147111d83a4ccc11930a7f4b56341895792648780aa6b710790e7678750e2aedb8f8db1f47083f1fefaec17eb4aa6314d81a236a666", 0xd9, 0xffffffff}, {&(0x7f0000000180)="af7a4839be87735df5d11c10328a0bb5e31f6e1673e8c2b85e58b12f294a152b78e28e471dd872ef7da21e13e1e90f1aab22a6e9b502d6102513b3cbda43490e2b226bc96b49051af38b642a35479691ab462cec622d63ca2888e7f7d468e73e3d904d5666f852c226209b2b7722affb021bd9eefaf31b275806469ed64532f8d9aa1c55ee3ccda5bfc250", 0x8b, 0xf2c9}, {&(0x7f0000000480)="f2297a5486089626f071b4a0be1c1b77387b910561abff9b2710cbc4037260c72f96fed96f214ffa84c258f6513b2921bbf4b8fdcb990c3bb9c5b92166f97c3168af", 0x42, 0x2}], 0x1080008, &(0x7f0000000240)=ANY=[@ANYRES64, @ANYBLOB="88dddbb24cb59b4fdba716b2b4e70558b4a4054001d37ec96cc5258d1caf41d1798ee2b1b735a947c31dc35f3815a79442efbc1209ecc9ac7308323c23e43e687b36ebbe33164530e804415152e286952c7c75d9c2b812df6628152d0b398b576d112317be0f95900a88adb61807aec20f0df5d37c4b7e6eccf5f95e4879c73bb7a1ddc961adf1889e3a01594af03aeba7", @ANYBLOB="d89c39e04d78298dfdf0db0143438e7b89d194286e415e68704d79a8eee2e9a5053589a39e132fec3669dad94761cbadc23f2bf0e0d42856309433f55fc9f9d51c428075ccfa78841eac946e2c0332b4f8e19115cdb1ffecf0700f4cc55bd5e3ce29daabdf370a3dc2d0667f29e580732c7e03d2"]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) 20:20:42 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x1c}}, 0x2000c004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="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", 0x1d9}], 0x1) [ 2684.036215] syz-executor.4: attempt to access beyond end of device [ 2684.036215] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2684.037926] Buffer I/O error on dev loop4, logical block 10, lost async page write 20:20:42 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:20:42 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 58) [ 2684.056612] loop3: detected capacity change from 0 to 40 [ 2684.074857] loop5: detected capacity change from 0 to 264192 20:20:42 executing program 0: syz_read_part_table(0x8004, 0x0, 0x0) [ 2684.182736] loop0: detected capacity change from 0 to 64 [ 2684.189407] syz-executor.3: attempt to access beyond end of device [ 2684.189407] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2684.191300] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2684.207954] loop2: detected capacity change from 0 to 40 [ 2684.233238] loop1: detected capacity change from 0 to 40 [ 2684.306703] syz-executor.2: attempt to access beyond end of device [ 2684.306703] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2684.308733] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2684.930402] loop5: detected capacity change from 0 to 264192 20:20:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 65) 20:20:59 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) recvmsg$unix(r1, &(0x7f0000000b00)={&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000640)=""/144, 0x90}, {&(0x7f0000000700)=""/141, 0x8d}, {&(0x7f00000007c0)=""/106, 0x6a}, {&(0x7f0000000840)=""/217, 0xd9}, {&(0x7f0000000940)=""/5, 0x5}, {&(0x7f0000000980)=""/163, 0xa3}], 0x6, &(0x7f0000000ac0)=[@cred={{0x1c}}], 0x20}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) 20:20:59 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) creat(&(0x7f00000000c0)='./file0\x00', 0x2) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = syz_open_dev$vcsa(&(0x7f0000000040), 0x2, 0x40) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000080)=[r0, r2, r1, 0xffffffffffffffff, r1, r3], 0x6) 20:20:59 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:20:59 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 59) 20:20:59 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x1c}}, 0x2000c004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="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", 0x1d9}], 0x1) 20:20:59 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 68) 20:20:59 executing program 0: syz_read_part_table(0xfeff, 0x0, 0x0) [ 2700.932837] loop7: detected capacity change from 0 to 40 [ 2700.965042] loop5: detected capacity change from 0 to 40 [ 2700.970772] loop4: detected capacity change from 0 to 40 [ 2700.987675] loop2: detected capacity change from 0 to 40 [ 2700.999792] loop1: detected capacity change from 0 to 40 [ 2701.000110] loop3: detected capacity change from 0 to 40 [ 2701.002848] loop0: detected capacity change from 0 to 127 [ 2701.021671] loop0: detected capacity change from 0 to 127 [ 2701.067033] syz-executor.5: attempt to access beyond end of device [ 2701.067033] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2701.068792] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 2701.075112] syz-executor.4: attempt to access beyond end of device [ 2701.075112] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2701.076674] Buffer I/O error on dev loop4, logical block 10, lost async page write 20:20:59 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) recvmsg$unix(r1, &(0x7f0000000b00)={&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000640)=""/144, 0x90}, {&(0x7f0000000700)=""/141, 0x8d}, {&(0x7f00000007c0)=""/106, 0x6a}, {&(0x7f0000000840)=""/217, 0xd9}, {&(0x7f0000000940)=""/5, 0x5}, {&(0x7f0000000980)=""/163, 0xa3}], 0x6, &(0x7f0000000ac0)=[@cred={{0x1c}}], 0x20}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) [ 2701.111708] syz-executor.3: attempt to access beyond end of device [ 2701.111708] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2701.113819] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2701.127904] syz-executor.2: attempt to access beyond end of device [ 2701.127904] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2701.127948] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2701.146046] syz-executor.5: attempt to access beyond end of device [ 2701.146046] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2701.146088] Buffer I/O error on dev loop5, logical block 10, lost async page write 20:20:59 executing program 0: syz_read_part_table(0xfffe, 0x0, 0x0) 20:20:59 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:20:59 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 69) [ 2701.222527] loop7: detected capacity change from 0 to 40 20:20:59 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x9}}, './file1\x00'}) sendfile(r3, r1, 0x0, 0xfffffdee) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f0000000180)={0x0, 0xfb, 0x4b, 0x7, 0x1f, "2e87f4bcba81e0ce0df741f0bd37387b", "f68a02d829860a2b65bb86f10b236d6a269a8e0710dd54dc13bd4163507605aa9e6a21f9bc05f609c176116aff395f3063770503cf89"}, 0x4b, 0x0) 20:20:59 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 60) 20:20:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 66) [ 2701.326292] loop4: detected capacity change from 0 to 40 [ 2701.346015] loop0: detected capacity change from 0 to 127 [ 2701.369877] loop1: detected capacity change from 0 to 40 [ 2701.375755] loop5: detected capacity change from 0 to 40 [ 2701.413522] syz-executor.4: attempt to access beyond end of device [ 2701.413522] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2701.415346] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2701.418165] loop3: detected capacity change from 0 to 40 [ 2701.427958] loop2: detected capacity change from 0 to 40 [ 2701.518537] syz-executor.3: attempt to access beyond end of device [ 2701.518537] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2701.520394] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2701.554461] syz-executor.2: attempt to access beyond end of device [ 2701.554461] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2701.556187] Buffer I/O error on dev loop2, logical block 10, lost async page write 20:21:14 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 67) 20:21:14 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) recvmsg$unix(r1, &(0x7f0000000b00)={&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000640)=""/144, 0x90}, {&(0x7f0000000700)=""/141, 0x8d}, {&(0x7f00000007c0)=""/106, 0x6a}, {&(0x7f0000000840)=""/217, 0xd9}, {&(0x7f0000000940)=""/5, 0x5}, {&(0x7f0000000980)=""/163, 0xa3}], 0x6, &(0x7f0000000ac0)=[@cred={{0x1c}}], 0x20}, 0x0) [ 2715.978994] loop3: detected capacity change from 0 to 40 [ 2715.979054] loop0: detected capacity change from 0 to 1024 20:21:14 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 61) 20:21:14 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 70) 20:21:14 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x1c}}, 0x2000c004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="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", 0x1d9}], 0x1) 20:21:14 executing program 0: syz_read_part_table(0x80000, 0x0, 0x0) 20:21:14 executing program 1: chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:21:14 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000140)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = syz_open_dev$mouse(&(0x7f00000001c0), 0x80000001, 0x84080) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$incfs(r1, &(0x7f0000000240)='.pending_reads\x00', 0x202000, 0x81) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000380)={0x1, 0x2, 0x1000, 0x5c, &(0x7f0000000280)="0865299751124253a5353cb0d26f1a87f3a6758c7e5ecf16cbaef7429fbd0733aa10f76fd79ebe6d15ed44731bdeea073b0a1fb66e64ac87120e70b10b9f251c5f2197e8a8f89e0ac0e7d95b5bbed76bf6e0bf3aaa136d6fdac97366", 0x6d, 0x0, &(0x7f0000000300)="8929b5e16e8d402f9aa65cbb27a7d9108ceb3754b343726dc8897b96bbfccf177ef37dc5d1a8f620b904df651c67de9bfd8b7df7b89bccdcdb7c1eb133b938731210a0484b6194a8d9e5321d1ffc59f6a874cd1a07e077106dc9394fd4939851281786532a17f745cdb9379e38"}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x701002, 0x0) accept$unix(r4, &(0x7f0000000080), &(0x7f0000000180)=0x6e) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000001480)) writev(r5, &(0x7f00000004c0)=[{&(0x7f0000000400)="c2bf4a50b0c6509b16024ab20a30c2a9b6663c6a7b941fb7c18ce5b18d50ea30c44222673279d36136bab4e256", 0x2d}, {&(0x7f0000000440)="548886423e362bfd72ef22bcb005dcab9100517146190d316159482ab1a0", 0x1e}, {&(0x7f0000000480)="09b0d29870ebb18023e2f9a50393b6389202af29dbdba5ec0439d1baf8113fa7fbc1158b3059cf3a8c751837f5a83754b255", 0x32}], 0x3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r6, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r6, r3, 0x0, 0xfffffdef) [ 2716.004374] FAT-fs (loop5): bogus number of reserved sectors [ 2716.004790] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2716.011455] loop7: detected capacity change from 0 to 40 [ 2716.015151] loop0: detected capacity change from 0 to 1024 [ 2716.040318] syz-executor.3: attempt to access beyond end of device [ 2716.040318] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2716.041163] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2716.043993] loop4: detected capacity change from 0 to 40 [ 2716.053986] loop2: detected capacity change from 0 to 40 20:21:14 executing program 0: syz_read_part_table(0x200000, 0x0, 0x0) 20:21:14 executing program 1: chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:21:14 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x1c}}, 0x2000c004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="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", 0x1d9}], 0x1) 20:21:14 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 68) [ 2716.248042] syz-executor.4: attempt to access beyond end of device [ 2716.248042] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2716.250114] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2716.257622] syz-executor.2: attempt to access beyond end of device [ 2716.257622] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2716.259419] Buffer I/O error on dev loop2, logical block 10, lost async page write 20:21:14 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) [ 2716.311854] loop0: detected capacity change from 0 to 4096 20:21:14 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 62) [ 2716.346698] loop0: detected capacity change from 0 to 4096 20:21:14 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 71) [ 2716.418359] loop7: detected capacity change from 0 to 40 [ 2716.430197] loop2: detected capacity change from 0 to 40 [ 2716.474145] loop3: detected capacity change from 0 to 40 20:21:14 executing program 0: syz_read_part_table(0x1000000, 0x0, 0x0) [ 2716.516092] loop4: detected capacity change from 0 to 40 20:21:14 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) [ 2716.567440] syz-executor.4: attempt to access beyond end of device [ 2716.567440] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2716.569142] Buffer I/O error on dev loop4, logical block 10, lost async page write 20:21:14 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 72) [ 2716.640609] syz-executor.3: attempt to access beyond end of device [ 2716.640609] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2716.642845] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2716.662640] syz-executor.2: attempt to access beyond end of device [ 2716.662640] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2716.664979] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2716.683950] loop7: detected capacity change from 0 to 40 [ 2716.690731] loop0: detected capacity change from 0 to 32768 [ 2716.702190] loop4: detected capacity change from 0 to 40 [ 2716.724650] loop0: detected capacity change from 0 to 32768 [ 2716.740385] syz-executor.4: attempt to access beyond end of device [ 2716.740385] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2716.742120] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2716.877469] FAT-fs (loop5): Unrecognized mount option "./file0" or missing value [ 2730.303912] loop5: detected capacity change from 0 to 40 [ 2730.304825] loop3: detected capacity change from 0 to 40 20:21:28 executing program 1: chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:21:28 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000040)) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) 20:21:28 executing program 0: syz_read_part_table(0x2000000, 0x0, 0x0) 20:21:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 69) 20:21:28 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x1c}}, 0x2000c004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="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", 0x1d9}], 0x1) 20:21:28 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 73) [ 2730.313027] loop0: detected capacity change from 0 to 65536 20:21:28 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:21:28 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 63) [ 2730.332527] loop4: detected capacity change from 0 to 40 [ 2730.334214] loop2: detected capacity change from 0 to 40 [ 2730.348888] loop0: detected capacity change from 0 to 65536 [ 2730.354958] syz-executor.5: attempt to access beyond end of device [ 2730.354958] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2730.355817] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 2730.376035] loop7: detected capacity change from 0 to 40 [ 2730.382917] syz-executor.4: attempt to access beyond end of device [ 2730.382917] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2730.384248] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2730.394671] syz-executor.2: attempt to access beyond end of device [ 2730.394671] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2730.395790] Buffer I/O error on dev loop2, logical block 10, lost async page write 20:21:28 executing program 0: syz_read_part_table(0x3000000, 0x0, 0x0) [ 2730.434724] syz-executor.3: attempt to access beyond end of device [ 2730.434724] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 20:21:28 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = dup2(r0, r1) r3 = openat(r2, &(0x7f0000000040)='./file0\x00', 0x8000, 0x81) pwritev(r3, &(0x7f0000001480)=[{&(0x7f0000000080)="458144401c6d9c67beabadca40b04901a3c89081209eb1862de89952229b93421693aa4df0a4a3ba9c", 0x29}, {&(0x7f0000000240)="e09fa6e8855437500d3dbec18898657fdc0a1d365f5b44023282b80a8fbc72a78c7ac09ab046bb0c13d7649858189cede535318d181215f63ee69b88d347f98d703a6d2b46ec5bc4eb3f9f8fca8d0b29396a2329c105a4a1f544cff60416b44d6ee5ac66eaf36270e745bcd79dfc92af0a62af49e3bd2c50b4fb5a955a157bd1e4e4e7597978", 0x86}, {&(0x7f0000000300)="beffedbe4dc09a23069c4c54306c5782c2d964b666cc58ad45971eae8222798126375d92b359c0b3e3b14aeb35ee759ecc6d0f75733f012289de9e40b3ac275cd43209e086a30e1c5654226c2402a9aa4c10bd55ace2b66b8868159fcc7666282ee71eba6b0646bdddf63955340904cfd7186add229dd63bb57af414c0487c12bf5d0010ee53bb7a2f555bc6daf4140bbc7e123ed29d06a337e1dc4c1919eb2023bc942790255f3e16878ea099e6a55755d09e8512f5d88b682a98d65bcd594976cabb109d0f7f74c534b68c117fc268c663d16bb41e4b28b1", 0xd9}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000000180)="11056df4045c19bef3e20165b409ba785218494fda93160128d305581c01cffc7ded6ae1ae904ece481af1d6d5d1f09752ae84ba107ccb0c232af62b7aa2ce95f93b3508cf01984ed21c", 0x4a}, {&(0x7f0000001400)="53f1b6669ba6a66897e246fda60d468352e1f518de97c8e846faf6d96dc7e277fa144af00ae7c6fd02ae0fcf3a1ed39145a66ec38d6d4fb529c5676505510822b24a149d82ebdf85a2d05d57dffa428afe49ba5ca759444fbdb132b92c08d57ee0331e0d1b12f5ad646c7a3d8ca1de652669c6e25f765cf331b6", 0x7a}], 0x6, 0x9, 0x1f) [ 2730.434769] Buffer I/O error on dev loop3, logical block 10, lost async page write 20:21:28 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 74) [ 2730.497178] loop0: detected capacity change from 0 to 98304 [ 2730.510534] loop0: detected capacity change from 0 to 98304 [ 2730.529622] loop4: detected capacity change from 0 to 40 [ 2730.535735] loop5: detected capacity change from 0 to 40 [ 2730.571205] syz-executor.5: attempt to access beyond end of device [ 2730.571205] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2730.573198] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 2730.588854] syz-executor.5: attempt to access beyond end of device [ 2730.588854] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2730.590701] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 2730.592099] syz-executor.4: attempt to access beyond end of device [ 2730.592099] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2730.593999] Buffer I/O error on dev loop4, logical block 10, lost async page write 20:21:43 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:21:43 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x43, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) openat(r1, &(0x7f0000000080)='./file1\x00', 0x242081, 0x83) 20:21:43 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 75) 20:21:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 70) 20:21:43 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x1c}}, 0x2000c004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="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", 0x1d9}], 0x1) 20:21:43 executing program 0: syz_read_part_table(0x4000000, 0x0, 0x0) 20:21:44 executing program 1: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:21:44 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 64) [ 2745.694049] loop5: detected capacity change from 0 to 40 [ 2745.705879] loop4: detected capacity change from 0 to 40 [ 2745.717612] loop1: detected capacity change from 0 to 40 [ 2745.737532] loop7: detected capacity change from 0 to 40 [ 2745.744801] loop2: detected capacity change from 0 to 40 [ 2745.758425] loop3: detected capacity change from 0 to 40 [ 2745.760637] loop0: detected capacity change from 0 to 131072 [ 2745.786943] loop0: detected capacity change from 0 to 131072 [ 2745.830554] syz-executor.4: attempt to access beyond end of device [ 2745.830554] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2745.832393] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2745.873205] syz-executor.3: attempt to access beyond end of device [ 2745.873205] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2745.875505] Buffer I/O error on dev loop3, logical block 10, lost async page write 20:21:44 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x101000, 0x10) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) r1 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r3 = syz_io_uring_setup(0x76e7, &(0x7f0000000340), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000280), &(0x7f00000003c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r0, 0x0, &(0x7f0000000240)="9941c53abac210a9c060d0015cebd1659c213debd7e8f77cee248b75840eda9b2247276b7db612c87168d5cb1561bcbcc204c627555fdb9db4a47a6a8ad4563dea4e07901d64b0aec08c80d6fedb7c82d692ef2dd709fee70d060bda871efa1528e33cc0443af25a4c43e546a6b7f56af310e39bdf1da4316be1183555fb5078120c62f33de52e3ac1c677dbcfb2177616c673bd3db721524f49cc9ecaebaec95f6f84a7ab5a3ebd4e0c993e7a033ac39038e48d4ae72cb3e4e8129996ee33603b7e2f552ad92cc1cc1128a031ba", 0xce, 0x8080, 0x1, {0x0, r2}}, 0x10000) 20:21:44 executing program 1: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:21:44 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) [ 2745.934220] syz-executor.2: attempt to access beyond end of device [ 2745.934220] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2745.937925] Buffer I/O error on dev loop2, logical block 10, lost async page write 20:21:44 executing program 0: syz_read_part_table(0x5000000, 0x0, 0x0) 20:21:44 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 71) 20:21:44 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 76) 20:21:44 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, 0x0, 0x2000c004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="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", 0x1d9}], 0x1) [ 2746.032673] loop1: detected capacity change from 0 to 40 [ 2746.035710] loop5: detected capacity change from 0 to 40 [ 2746.066997] loop0: detected capacity change from 0 to 163840 [ 2746.072241] loop7: detected capacity change from 0 to 40 [ 2746.089895] loop3: detected capacity change from 0 to 40 [ 2746.090745] loop0: detected capacity change from 0 to 163840 [ 2746.104231] loop4: detected capacity change from 0 to 40 20:21:44 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 65) 20:21:44 executing program 1: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) [ 2746.214564] syz-executor.3: attempt to access beyond end of device [ 2746.214564] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2746.216522] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2746.219760] syz-executor.4: attempt to access beyond end of device [ 2746.219760] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2746.221726] Buffer I/O error on dev loop4, logical block 10, lost async page write 20:21:44 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:21:44 executing program 0: syz_read_part_table(0x6000000, 0x0, 0x0) [ 2746.303683] loop2: detected capacity change from 0 to 40 [ 2746.326555] loop1: detected capacity change from 0 to 40 20:21:44 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file1\x00', 0x8, 0x2, &(0x7f0000000200)=[{&(0x7f00000000c0)="201c6d6b646f7366d8ce95d07dca42c6e440002000f801", 0xffffffffffffff3d}, {0x0, 0xffffffffffffff06, 0x2800}], 0x1210041, &(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRES64=r0]) chdir(&(0x7f0000000140)='./file0\x00') mknodat$null(r1, &(0x7f0000000040)='./file0\x00', 0x2000, 0x103) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) 20:21:44 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="0000390034f8188c174b1af255dde13d404c2dc55222189cab5cdf3e85bed2c3cd487aa957e5a3b5301977f41d7a20f0472f5e4e407581d547aedb4b55753efd16fea0fd6832f76ed75e1426701b0ecd2d6a1a53da4fbe2ed20c3574a071f710cd1e38cc77ce1faa635182a8d45fa685c5971918baf16c5f5b8af65a69a47f80f9459c040008b94e0ba48910ab0d95767c5ccb2adf863c97144870623ce9046c52d94b264867fc020000000000000071341be16434139d5dacc187bc4f87d57cbc5c51c41eef80261ce65a2098b76750d56b11794581b20998f1fc1d9e87abf3355a8e7c0559101974468c79d19c612309cd3a71264fba0bb1f58538e8cbab3d848f42ecd8441a92ab85dc1214af9f82c93a7bbc9e3f363b74bf4177bc2a86ea158104fa01939b9b211f0b10a54271899ecca64355bb037638339e5c28b36d0a9db21b0fdf8225d9413f54351e27e53e2c8a7a36dafb98408868e1af2a43827d6f7974636212f552090000"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, 0x0, 0x2000c004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="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", 0x1d9}], 0x1) 20:21:44 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 77) [ 2746.375421] loop7: detected capacity change from 0 to 40 [ 2746.421752] syz-executor.2: attempt to access beyond end of device [ 2746.421752] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2746.423534] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2746.433394] loop0: detected capacity change from 0 to 196608 [ 2746.507872] loop4: detected capacity change from 0 to 40 [ 2746.628719] syz-executor.4: attempt to access beyond end of device [ 2746.628719] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2746.631025] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2746.754139] loop5: detected capacity change from 0 to 32767 [ 2746.759595] FAT-fs (loop5): Unrecognized mount option "01777777777777777777777" or missing value [ 2762.655371] loop4: detected capacity change from 0 to 40 20:22:00 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 72) 20:22:00 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) statx(r0, &(0x7f0000000040)='./file0\x00', 0x4000, 0x80, &(0x7f0000000240)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) 20:22:00 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 78) 20:22:00 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 66) 20:22:00 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:22:00 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:22:00 executing program 0: syz_read_part_table(0x7000000, 0x0, 0x0) 20:22:01 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, 0x0, 0x2000c004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="02b2dccad213e1e6cf54b7a797f8f22a47f25b7658fb110b2e76f95b0f318b8fa745e6ffba4414d29a42bfab524bc5bffb17decc4540a6f00b9772f5f9789a9525790df8d989b23530d0a1398f2ad734c7ff47961be476ffeec81efa3d3aa64b8ea329261dfc2e1047a68670f0e5950d6a5414956bddd09e101b5b66e5742fe843413e065e3b86a242b37bc58c68153a45015f6f1ea67762c302e461e0c84bbb7f8d464f5a72d9fad56dac0c5028a4012a93dbc7da640786e3c9898cdd8fe091b166bfcd66e6257abc923ceaf90e994deded3fe8a59c2105f5caf366d32170ef51299dbf441bc3cddda352a2e07375fb44e75fed8082f3e960015d9bcddb0c834feda68d113a9a9fc0d1c30153685caf43b176219b666d74e67b6192cfd8a561c6c4aadcc80ed8c469bc41b028f1db515d699e45ad3379f9b1edb8de4bb2f8615d6716297baac7e45073fcecf31e51ec78c40edd78f245bced04414f849fb961fbbe79ff2ed7c48ec1b5331f9755d7094986fc8da198ce4a12f9ddfb43e565bc4fed618da9a693d03c3e7ec4b3014dfc022103e277c1b12efb03ef8b197f3a931f6cbe238cf8a4e7639b409b4586f66da41b94eed69d52ba9fde5aa1ee774d4e626932dc3511b10ae3bc3e8688a7a83b0467dfbf9295174739", 0x1d9}], 0x1) [ 2762.677000] loop7: detected capacity change from 0 to 40 [ 2762.681075] loop1: detected capacity change from 0 to 40 [ 2762.708072] loop5: detected capacity change from 0 to 40 [ 2762.718606] loop2: detected capacity change from 0 to 40 [ 2762.725048] syz-executor.4: attempt to access beyond end of device [ 2762.725048] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2762.726016] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2762.727608] loop3: detected capacity change from 0 to 40 20:22:01 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) [ 2762.749210] loop0: detected capacity change from 0 to 229376 [ 2762.766622] syz-executor.5: attempt to access beyond end of device [ 2762.766622] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2762.767761] Buffer I/O error on dev loop5, logical block 10, lost async page write 20:22:01 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 79) 20:22:01 executing program 7: chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) [ 2762.793436] loop0: detected capacity change from 0 to 229376 [ 2762.802012] loop1: detected capacity change from 0 to 40 [ 2762.833501] loop4: detected capacity change from 0 to 40 20:22:01 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x88a80, 0x1) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) r3 = dup2(r2, r1) openat(r3, &(0x7f0000000080)='./file0\x00', 0x410102, 0x108) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2762.862476] syz-executor.3: attempt to access beyond end of device [ 2762.862476] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2762.864524] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2762.869371] syz-executor.2: attempt to access beyond end of device [ 2762.869371] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2762.871290] Buffer I/O error on dev loop2, logical block 10, lost async page write 20:22:01 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) [ 2762.913676] loop5: detected capacity change from 0 to 40 [ 2762.915427] syz-executor.4: attempt to access beyond end of device [ 2762.915427] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2762.916584] Buffer I/O error on dev loop4, logical block 10, lost async page write 20:22:01 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x1c}}, 0x2000c004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="02b2dccad213e1e6cf54b7a797f8f22a47f25b7658fb110b2e76f95b0f318b8fa745e6ffba4414d29a42bfab524bc5bffb17decc4540a6f00b9772f5f9789a9525790df8d989b23530d0a1398f2ad734c7ff47961be476ffeec81efa3d3aa64b8ea329261dfc2e1047a68670f0e5950d6a5414956bddd09e101b5b66e5742fe843413e065e3b86a242b37bc58c68153a45015f6f1ea67762c302e461e0c84bbb7f8d464f5a72d9fad56dac0c5028a4012a93dbc7da640786e3c9898cdd8fe091b166bfcd66e6257abc923ceaf90e994deded3fe8a59c2105f5caf366d32170ef51299dbf441bc3cddda352a2e07375fb44e75fed8082f3e960015d9bcddb0c834feda68d113a9a9fc0d1c30153685caf43b176219b666d74e67b6192cfd8a561c6c4aadcc80ed8c469bc41b028f1db515d699e45ad3379f9b1edb8de4bb2f8615d6716297baac7e45073fcecf31e51ec78c40edd78f245bced04414f849fb961fbbe79ff2ed7c48ec1b5331f9755d7094986fc8da198ce4a12f9ddfb43e565bc4fed618da9a693d03c3e7ec4b3014dfc022103e277c1b12efb03ef8b197f3a931f6cbe238cf8a4e7639b409b4586f66da41b94eed69d52ba9fde5aa1ee774d4e626932dc3511b10ae3bc3e8688a7a83b0467dfbf9295174739", 0x1d9}], 0x1) [ 2762.941620] loop1: detected capacity change from 0 to 40 20:22:16 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x1c}}, 0x2000c004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="02b2dccad213e1e6cf54b7a797f8f22a47f25b7658fb110b2e76f95b0f318b8fa745e6ffba4414d29a42bfab524bc5bffb17decc4540a6f00b9772f5f9789a9525790df8d989b23530d0a1398f2ad734c7ff47961be476ffeec81efa3d3aa64b8ea329261dfc2e1047a68670f0e5950d6a5414956bddd09e101b5b66e5742fe843413e065e3b86a242b37bc58c68153a45015f6f1ea67762c302e461e0c84bbb7f8d464f5a72d9fad56dac0c5028a4012a93dbc7da640786e3c9898cdd8fe091b166bfcd66e6257abc923ceaf90e994deded3fe8a59c2105f5caf366d32170ef51299dbf441bc3cddda352a2e07375fb44e75fed8082f3e960015d9bcddb0c834feda68d113a9a9fc0d1c30153685caf43b176219b666d74e67b6192cfd8a561c6c4aadcc80ed8c469bc41b028f1db515d699e45ad3379f9b1edb8de4bb2f8615d6716297baac7e45073fcecf31e51ec78c40edd78f245bced04414f849fb961fbbe79ff2ed7c48ec1b5331f9755d7094986fc8da198ce4a12f9ddfb43e565bc4fed618da9a693d03c3e7ec4b3014dfc022103e277c1b12efb03ef8b197f3a931f6cbe238cf8a4e7639b409b4586f66da41b94eed69d52ba9fde5aa1ee774d4e626932dc3511b10ae3bc3e8688a7a83b0467dfbf9295174739", 0x1d9}], 0x1) 20:22:16 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) fallocate(r0, 0x0, 0x3f, 0x3ff) 20:22:16 executing program 0: syz_read_part_table(0x8000000, 0x0, 0x0) 20:22:16 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 73) 20:22:16 executing program 7: chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:22:16 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 80) 20:22:16 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 67) 20:22:16 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) [ 2778.171925] loop0: detected capacity change from 0 to 262144 [ 2778.173737] loop5: detected capacity change from 0 to 40 [ 2778.204206] loop2: detected capacity change from 0 to 40 [ 2778.228571] loop4: detected capacity change from 0 to 40 [ 2778.231961] syz-executor.5: attempt to access beyond end of device [ 2778.231961] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2778.233743] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 2778.243563] loop0: detected capacity change from 0 to 262144 [ 2778.250091] loop3: detected capacity change from 0 to 40 [ 2778.315536] syz-executor.2: attempt to access beyond end of device [ 2778.315536] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2778.317319] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2778.351096] syz-executor.4: attempt to access beyond end of device [ 2778.351096] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2778.352875] Buffer I/O error on dev loop4, logical block 10, lost async page write 20:22:16 executing program 0: syz_read_part_table(0xb000000, 0x0, 0x0) [ 2778.365513] syz-executor.3: attempt to access beyond end of device [ 2778.365513] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2778.367672] Buffer I/O error on dev loop3, logical block 10, lost async page write 20:22:16 executing program 7: chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:22:16 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x1c}}, 0x2000c004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="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", 0x1d9}], 0x1) 20:22:16 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:22:16 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000000)="60000000000000000054b5b434f90c4c0352ba7798777919b01babe34eb0433439f69c0eeec675dcb5c9239d67b76b568d6e96e9", 0x34}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = dup2(r0, r1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r1, 0x0, 0xfffffdef) [ 2778.469488] loop0: detected capacity change from 0 to 264192 20:22:16 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 81) [ 2778.486700] loop0: detected capacity change from 0 to 264192 20:22:16 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 68) 20:22:16 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 74) [ 2778.589462] FAT-fs (loop5): bogus number of reserved sectors [ 2778.590234] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2778.631698] FAT-fs (loop5): Unrecognized mount option "./file0" or missing value [ 2778.640807] loop4: detected capacity change from 0 to 40 [ 2778.671857] loop2: detected capacity change from 0 to 40 [ 2778.678145] loop3: detected capacity change from 0 to 40 [ 2778.753920] syz-executor.2: attempt to access beyond end of device [ 2778.753920] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2778.755302] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2778.776133] syz-executor.3: attempt to access beyond end of device [ 2778.776133] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2778.777560] Buffer I/O error on dev loop3, logical block 10, lost async page write 20:22:34 executing program 0: syz_read_part_table(0x18000000, 0x0, 0x0) 20:22:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 75) 20:22:34 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 69) 20:22:34 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x1c}}, 0x2000c004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="02b2dccad213e1e6cf54b7a797f8f22a47f25b7658fb110b2e76f95b0f318b8fa745e6ffba4414d29a42bfab524bc5bffb17decc4540a6f00b9772f5f9789a9525790df8d989b23530d0a1398f2ad734c7ff47961be476ffeec81efa3d3aa64b8ea329261dfc2e1047a68670f0e5950d6a5414956bddd09e101b5b66e5742fe843413e065e3b86a242b37bc58c68153a45015f6f1ea67762c302e461e0c84bbb7f8d464f5a72d9fad56dac0c5028a4012a93dbc7da640786e3c9898cdd8fe091b166bfcd66e6257abc923ceaf90e994deded3fe8a59c2105f5caf366d32170ef51299dbf441bc3cddda352a2e07375fb44e75fed8082f3e960015d9bcddb0c834feda68d113a9a9fc0d1c30153685caf43b176219b666d74e67b6192cfd8a561c6c4aadcc80ed8c469bc41b028f1db515d699e45ad3379f9b1edb8de4bb2f8615d6716297baac7e45073fcecf31e51ec78c40edd78f245bced04414f849fb961fbbe79ff2ed7c48ec1b5331f9755d7094986fc8da198ce4a12f9ddfb43e565bc4fed618da9a693d03c3e7ec4b3014dfc022103e277c1b12efb03ef8b197f3a931f6cbe238cf8a4e7639b409b4586f66da41b94eed69d52ba9fde5aa1ee774d4e626932dc3511b10ae3bc3e8688a7a83b0467dfbf9295174739", 0x1d9}], 0x1) 20:22:34 executing program 7: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:22:34 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) [ 2795.793791] loop2: detected capacity change from 0 to 40 [ 2795.796989] loop0: detected capacity change from 0 to 264192 20:22:34 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc00, 0x18) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x110, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_MODES_OURS={0xf4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ff}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xdd, 0x5, "d558b9be46f0294b29dd7163a350dfd411b563b54cb318dee0c2770bf33fef740d2cf039f0c8d7cbb9140f1766932bb7a283a7ea475cf5eedfdc2610de8e4256d6fee46b18a976f2d5b9f20f627fc458fc4e16dfd01e428abe55432f36cf1ea3be2b3c49ca5f8762b5a5de317a050c907064e209ffe30018229351d80e1e32c76c3c44075b48ddb68824aa35ba7cda929e6ce38e81aeea8ac7419b4792a5228b4d8654d43c112badcae4606b11c1313764f3707ec5d71cb70b70bafbc77404590018b74a3d0e035c1765feaa08ede52b28a88de9a0b94bf0c4"}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x110}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) 20:22:34 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 82) [ 2795.823361] loop7: detected capacity change from 0 to 40 [ 2795.828902] loop0: detected capacity change from 0 to 264192 [ 2795.844564] loop4: detected capacity change from 0 to 40 [ 2795.847535] loop3: detected capacity change from 0 to 40 [ 2795.851079] loop5: detected capacity change from 0 to 40 [ 2795.888636] syz-executor.2: attempt to access beyond end of device [ 2795.888636] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2795.890503] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2795.961645] syz-executor.3: attempt to access beyond end of device [ 2795.961645] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2795.964032] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2795.967934] syz-executor.4: attempt to access beyond end of device [ 2795.967934] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2795.969885] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2795.973536] syz-executor.5: attempt to access beyond end of device [ 2795.973536] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2795.975440] Buffer I/O error on dev loop5, logical block 10, lost async page write 20:22:34 executing program 0: syz_read_part_table(0x64000000, 0x0, 0x0) 20:22:34 executing program 7: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:22:34 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:22:34 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 70) 20:22:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 76) 20:22:34 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 83) 20:22:34 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x1c}}, 0x2000c004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="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", 0x1d9}], 0x1) [ 2796.093701] loop0: detected capacity change from 0 to 264192 [ 2796.116929] loop7: detected capacity change from 0 to 40 20:22:34 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0xa00080, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x142) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) r3 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x80400, 0x0) r4 = accept$inet(r3, &(0x7f0000000080)={0x2, 0x0, @dev}, &(0x7f00000000c0)=0x10) sendfile(r4, r3, &(0x7f0000000180)=0x1f, 0x9) [ 2796.160327] FAT-fs (loop1): bogus number of reserved sectors [ 2796.161163] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2796.182756] loop2: detected capacity change from 0 to 40 [ 2796.225655] loop3: detected capacity change from 0 to 40 [ 2796.228155] loop4: detected capacity change from 0 to 40 [ 2796.253782] loop5: detected capacity change from 0 to 264192 [ 2796.298141] syz-executor.2: attempt to access beyond end of device [ 2796.298141] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2796.298185] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2796.325405] syz-executor.3: attempt to access beyond end of device [ 2796.325405] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2796.325449] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2796.332715] syz-executor.4: attempt to access beyond end of device [ 2796.332715] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2796.332786] Buffer I/O error on dev loop4, logical block 10, lost async page write 20:22:52 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:22:52 executing program 0: syz_read_part_table(0x80040000, 0x0, 0x0) 20:22:52 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="0000390034f8188c174b1af255dde13d404c2dc55222189cab5cdf3e85bed2c3cd487aa957e5a3b5301977f41d7a20f0472f5e4e407581d547aedb4b55753efd16fea0fd6832f76ed75e1426701b0ecd2d6a1a53da4fbe2ed20c3574a071f710cd1e38cc77ce1faa635182a8d45fa685c5971918baf16c5f5b8af65a69a47f80f9459c040008b94e0ba48910ab0d95767c5ccb2adf863c97144870623ce9046c52d94b264867fc020000000000000071341be16434139d5dacc187bc4f87d57cbc5c51c41eef80261ce65a2098b76750d56b11794581b20998f1fc1d9e87abf3355a8e7c0559101974468c79d19c612309cd3a71264fba0bb1f58538e8cbab3d848f42ecd8441a92ab85dc1214af9f82c93a7bbc9e3f363b74bf4177bc2a86ea158104fa01939b9b211f0b10a54271899ecca64355bb037638339e5c28b36d0a9db21b0fdf8225d9413f54351e27e53e2c8a7a36dafb98408868e1af2a43827d6f7974636212f552090000"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x1c}}, 0x2000c004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="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", 0x1d9}], 0x1) 20:22:52 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 77) 20:22:52 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 84) 20:22:52 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 71) 20:22:52 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000001480)) r2 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000200)=ANY=[@ANYRES64=r0, @ANYRESOCT]) r3 = syz_mount_image$msdos(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0xba, 0x8, &(0x7f0000001580)=[{&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000000180)="f0874396616ee1154272fb59d3b6ea16c60a54be5784aff1d5200d3d8ac6918fb486b325a97728e3882494c1a7eafc845a4b728c1d567b0c442778497e22eb1fef693c88c3243cc87c8af119d4d5b1528010c7a89f4eab88fdb178871be0978466afa8c7c14ca5dae743a34213", 0x6d, 0x101}, {&(0x7f0000001240)="d0f8d37e5c32053694304f9e629ba5329e7ae6066eea9c80df58ee93c2049c2d", 0x20, 0xffffffff}, {&(0x7f0000001280)="6c4f820e500f14d88c322d36e853f01aa1ccde5c", 0x14, 0x347a7273}, {&(0x7f00000012c0), 0x0, 0x1f}, {&(0x7f0000001300)="d5e8230fe2b2379102f1c4a9f04324bb947989872af1b22d3d059e37c86bf9e4301264893881aee822bffaf9b9d3f398cb18196f2958095cf7add6006132c2454771c19b2a7b78e8b76ab7a292bdd084ae683880e85a241dea40a18214e2d83e509320e4656ab6c9a93249d06e2c27a85816ab628700c3e1da5b1010adf371a579cac0bc27eb5ed495b4c176c474a65b17d31be82c7050f83e52b4b93c1656b7966883ca83e06c86a39c156baad00c8b8525ce28f365bb62aa31a753aa6bb6e9c9213e3abc550d82fd8f68a2f6e5a18ad92a455a9aa04b8d8e7798c3f5c24c", 0xdf, 0x9}, {&(0x7f0000001400)="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", 0xfa, 0x6}, {&(0x7f0000001500)="9d0d9f3e4162446ed535e9fce7c3ea9180ed0d315e775932709a4d4bf9bc18628343f8b9e4b96023efabc5d160ccb13ff8bb1af2aaaa45709282949c2b04dc38622f73d5bb2078fba4f9b06a82a48bfa5b", 0x51, 0x1ff}], 0x2000008, &(0x7f0000001640)={[{@dots}, {@nodots}], [{@subj_user={'subj_user', 0x3d, 'vfat\x00'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@permit_directio}]}) renameat2(r2, &(0x7f0000000040)='./file0\x00', r3, &(0x7f00000016c0)='./file0\x00', 0x5) chdir(&(0x7f0000000140)='./file0\x00') symlinkat(&(0x7f00000012c0)='./file1\x00', r3, &(0x7f0000001700)='./file1\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000001740)={{0x1, 0x1, 0x18, r3, {r5}}, './file0/file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000001780)={0x2}) write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r5, r4, 0x0, 0xfffffdef) 20:22:52 executing program 7: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) [ 2814.105638] loop2: detected capacity change from 0 to 40 [ 2814.110376] loop3: detected capacity change from 0 to 40 [ 2814.120888] loop0: detected capacity change from 0 to 264192 [ 2814.143171] loop7: detected capacity change from 0 to 40 [ 2814.145810] FAT-fs (loop1): bogus number of reserved sectors [ 2814.146773] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2814.160161] loop0: detected capacity change from 0 to 264192 [ 2814.178225] FAT-fs (loop5): Unrecognized mount option "" or missing value [ 2814.180896] loop4: detected capacity change from 0 to 40 [ 2814.196948] loop5: detected capacity change from 0 to 264192 [ 2814.201771] syz-executor.3: attempt to access beyond end of device [ 2814.201771] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2814.203587] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2814.210017] FAT-fs (loop5): Unrecognized mount option "subj_user=vfat" or missing value [ 2814.223021] syz-executor.2: attempt to access beyond end of device [ 2814.223021] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2814.224779] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2814.283562] syz-executor.4: attempt to access beyond end of device [ 2814.283562] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2814.285233] Buffer I/O error on dev loop4, logical block 10, lost async page write 20:22:52 executing program 0: syz_read_part_table(0x8cffffff, 0x0, 0x0) 20:22:52 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:22:52 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:22:52 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 78) [ 2814.377019] loop7: detected capacity change from 0 to 40 20:22:52 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 72) 20:22:52 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 85) [ 2814.462226] loop0: detected capacity change from 0 to 264192 [ 2814.510393] FAT-fs (loop1): bogus number of reserved sectors 20:22:52 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) [ 2814.511014] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2814.512036] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2814.512918] Buffer I/O error on dev loop0, logical block 0, async page read [ 2814.513701] loop0: unable to read partition table [ 2814.515166] loop0: partition table beyond EOD, truncated [ 2814.522052] loop0: detected capacity change from 0 to 264192 20:22:52 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x2000c004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="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", 0x1d9}], 0x1) [ 2814.569036] loop3: detected capacity change from 0 to 40 [ 2814.579682] loop2: detected capacity change from 0 to 40 [ 2814.655909] loop4: detected capacity change from 0 to 40 [ 2814.709104] syz-executor.3: attempt to access beyond end of device [ 2814.709104] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2814.710652] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2814.714905] syz-executor.2: attempt to access beyond end of device [ 2814.714905] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2814.716135] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2814.765053] loop7: detected capacity change from 0 to 40 [ 2814.799854] syz-executor.4: attempt to access beyond end of device [ 2814.799854] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2814.801303] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2815.011837] FAT-fs (loop5): Unrecognized mount option "" or missing value [ 2815.023325] loop5: detected capacity change from 0 to 264192 [ 2815.037216] FAT-fs (loop5): Unrecognized mount option "subj_user=vfat" or missing value [ 2815.054351] I/O error, dev loop5, sector 128 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 20:23:06 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 79) 20:23:06 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(r0, &(0x7f0000000080)='./file0\x00', 0x204400, 0x12c) sendfile(r1, r0, 0x0, 0x80000000fffffdf2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000001480)) mount$cgroup(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000180), 0x8, &(0x7f0000000240)={[{@none}, {@clone_children}, {}, {@subsystem='blkio'}, {@subsystem='devices'}, {@noprefix}, {@noprefix}, {@subsystem='net'}, {@subsystem='cpuset'}], [{@permit_directio}, {@fsname={'fsname', 0x3d, '{-%'}}, {@measure}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@subj_user={'subj_user', 0x3d, '/proc/self\x00'}}]}) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x20400, 0x0) fcntl$dupfd(r2, 0x0, r3) 20:23:06 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:23:06 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="0000390034f8188c174b1af255dde13d404c2dc55222189cab5cdf3e85bed2c3cd487aa957e5a3b5301977f41d7a20f0472f5e4e407581d547aedb4b55753efd16fea0fd6832f76ed75e1426701b0ecd2d6a1a53da4fbe2ed20c3574a071f710cd1e38cc77ce1faa635182a8d45fa685c5971918baf16c5f5b8af65a69a47f80f9459c040008b94e0ba48910ab0d95767c5ccb2adf863c97144870623ce9046c52d94b264867fc020000000000000071341be16434139d5dacc187bc4f87d57cbc5c51c41eef80261ce65a2098b76750d56b11794581b20998f1fc1d9e87abf3355a8e7c0559101974468c79d19c612309cd3a71264fba0bb1f58538e8cbab3d848f42ecd8441a92ab85dc1214af9f82c93a7bbc9e3f363b74bf4177bc2a86ea158104fa01939b9b211f0b10a54271899ecca64355bb037638339e5c28b36d0a9db21b0fdf8225d9413f54351e27e53e2c8a7a36dafb98408868e1af2a43827d6f7974636212f552090000"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x2000c004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="02b2dccad213e1e6cf54b7a797f8f22a47f25b7658fb110b2e76f95b0f318b8fa745e6ffba4414d29a42bfab524bc5bffb17decc4540a6f00b9772f5f9789a9525790df8d989b23530d0a1398f2ad734c7ff47961be476ffeec81efa3d3aa64b8ea329261dfc2e1047a68670f0e5950d6a5414956bddd09e101b5b66e5742fe843413e065e3b86a242b37bc58c68153a45015f6f1ea67762c302e461e0c84bbb7f8d464f5a72d9fad56dac0c5028a4012a93dbc7da640786e3c9898cdd8fe091b166bfcd66e6257abc923ceaf90e994deded3fe8a59c2105f5caf366d32170ef51299dbf441bc3cddda352a2e07375fb44e75fed8082f3e960015d9bcddb0c834feda68d113a9a9fc0d1c30153685caf43b176219b666d74e67b6192cfd8a561c6c4aadcc80ed8c469bc41b028f1db515d699e45ad3379f9b1edb8de4bb2f8615d6716297baac7e45073fcecf31e51ec78c40edd78f245bced04414f849fb961fbbe79ff2ed7c48ec1b5331f9755d7094986fc8da198ce4a12f9ddfb43e565bc4fed618da9a693d03c3e7ec4b3014dfc022103e277c1b12efb03ef8b197f3a931f6cbe238cf8a4e7639b409b4586f66da41b94eed69d52ba9fde5aa1ee774d4e626932dc3511b10ae3bc3e8688a7a83b0467dfbf9295174739", 0x1d9}], 0x1) 20:23:06 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 73) 20:23:06 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 86) 20:23:06 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) [ 2828.375876] loop7: detected capacity change from 0 to 40 [ 2828.388441] loop2: detected capacity change from 0 to 40 20:23:06 executing program 0: syz_read_part_table(0xf6ffffff, 0x0, 0x0) [ 2828.397733] loop4: detected capacity change from 0 to 40 [ 2828.399622] loop0: detected capacity change from 0 to 264192 [ 2828.400390] loop3: detected capacity change from 0 to 40 [ 2828.400824] loop5: detected capacity change from 0 to 40 [ 2828.410955] FAT-fs (loop1): bogus number of reserved sectors [ 2828.411424] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2828.414365] loop0: detected capacity change from 0 to 264192 [ 2828.416087] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 2828.429039] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 20:23:06 executing program 0: syz_read_part_table(0xfcfdffff, 0x0, 0x0) 20:23:06 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x109403, 0x20) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) 20:23:06 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) [ 2828.525770] syz-executor.4: attempt to access beyond end of device [ 2828.525770] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2828.527435] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2828.528879] syz-executor.3: attempt to access beyond end of device [ 2828.528879] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2828.530566] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2828.547809] loop0: detected capacity change from 0 to 264192 [ 2828.557511] syz-executor.2: attempt to access beyond end of device [ 2828.557511] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2828.558453] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2828.561516] loop0: detected capacity change from 0 to 264192 [ 2828.566102] loop5: detected capacity change from 0 to 40 20:23:06 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:23:06 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 74) [ 2828.673874] FAT-fs (loop1): bogus number of reserved sectors [ 2828.674373] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2828.695717] loop2: detected capacity change from 0 to 40 [ 2828.730748] syz-executor.2: attempt to access beyond end of device [ 2828.730748] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2828.731776] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2843.820847] loop2: detected capacity change from 0 to 40 [ 2843.824004] loop5: detected capacity change from 0 to 40 20:23:22 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 75) 20:23:22 executing program 0: syz_read_part_table(0xfdfdffff, 0x0, 0x0) 20:23:22 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:23:22 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x2000c004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="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", 0x1d9}], 0x1) 20:23:22 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 87) 20:23:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 80) 20:23:22 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000001480)) unlinkat(r1, &(0x7f0000000040)='./file0\x00', 0x200) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r0, 0x0, 0xfffffdef) 20:23:22 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) [ 2843.832728] loop3: detected capacity change from 0 to 40 [ 2843.832807] FAT-fs (loop1): bogus number of reserved sectors [ 2843.834086] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2843.836762] loop4: detected capacity change from 0 to 40 [ 2843.871685] loop0: detected capacity change from 0 to 264192 [ 2843.877428] syz-executor.5: attempt to access beyond end of device [ 2843.877428] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2843.878454] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 2843.885035] syz-executor.4: attempt to access beyond end of device [ 2843.885035] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2843.886046] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2843.891164] syz-executor.2: attempt to access beyond end of device [ 2843.891164] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2843.892218] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2843.906925] loop0: detected capacity change from 0 to 264192 20:23:22 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:23:22 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:23:22 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 88) 20:23:22 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 76) [ 2843.999117] loop1: detected capacity change from 0 to 40 [ 2844.009072] FAT-fs (loop1): bogus number of reserved sectors [ 2844.009577] FAT-fs (loop1): Can't find a valid FAT filesystem 20:23:22 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xd1e0, 0x48f3}}, './file0\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) [ 2844.024060] loop4: detected capacity change from 0 to 40 [ 2844.031037] loop2: detected capacity change from 0 to 40 20:23:22 executing program 0: syz_read_part_table(0xfeffffff, 0x0, 0x0) 20:23:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 81) 20:23:22 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={0x0}}, 0x2000c004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="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", 0x1d9}], 0x1) 20:23:22 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) [ 2844.101031] syz-executor.2: attempt to access beyond end of device [ 2844.101031] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2844.102069] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2844.104761] loop5: detected capacity change from 0 to 40 20:23:22 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:23:22 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 89) [ 2844.145682] loop0: detected capacity change from 0 to 264192 [ 2844.154746] loop3: detected capacity change from 0 to 40 [ 2844.157986] loop0: detected capacity change from 0 to 264192 [ 2844.180872] loop1: detected capacity change from 0 to 40 [ 2844.183784] syz-executor.5: attempt to access beyond end of device [ 2844.183784] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2844.185628] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 2844.195539] FAT-fs (loop1): bogus number of reserved sectors [ 2844.196062] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2844.198383] FAT-fs (loop7): bogus number of reserved sectors [ 2844.198881] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2844.233429] loop4: detected capacity change from 0 to 40 [ 2844.246829] syz-executor.5: attempt to access beyond end of device [ 2844.246829] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2844.246871] Buffer I/O error on dev loop5, logical block 10, lost async page write 20:23:35 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 77) 20:23:35 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 90) 20:23:35 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 82) 20:23:35 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={0x0}}, 0x2000c004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="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", 0x1d9}], 0x1) 20:23:35 executing program 0: syz_read_part_table(0xfffffdfc, 0x0, 0x0) [ 2857.257048] loop1: detected capacity change from 0 to 40 20:23:35 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:23:35 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) [ 2857.269412] FAT-fs (loop7): bogus number of reserved sectors [ 2857.269960] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2857.275188] loop3: detected capacity change from 0 to 40 [ 2857.293190] loop4: detected capacity change from 0 to 40 [ 2857.293735] FAT-fs (loop1): bogus number of reserved sectors [ 2857.294613] FAT-fs (loop1): Can't find a valid FAT filesystem 20:23:35 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000200), 0x4000, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES16, @ANYRES64=0x0, @ANYRESOCT, @ANYRESDEC=r0, @ANYRESOCT, @ANYRESDEC, @ANYRESHEX=r0]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) removexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@random={'trusted.', 'vfat\x00'}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x9, 0x3, &(0x7f0000000540)=[{&(0x7f0000000380)="149884c238f761614e5b506346a61f1789feaccc5591477b21a6750f51ed7f37afd2be96d8b8cdf98ac63169283eba9f2bf7a6a58ea97c768307f2533bd56c9f9cd64a0853315df69a63e970f4736ded20705bb98e84927e956d58b1de1cb6a37b9a8b15b1c4cc061f0bca98e6c59dcef9b5677c31a31247c24dc72ace7da4063ad7e4b4ea2999daf6588108920d0aa739ebc57813b4534583cf0729662965cadeee3010a7f622c237b431e16168523de7deeba205b284081736fe6bb64a40c980e30964adc0fa54b89a1bdd06e0443e0972fffdc5baa0d5c8", 0xd9, 0x7f}, {&(0x7f0000000480)="f84a91e36e09dab8345d742305cf400f1f5d104d80cb56916a7f6b9543b29d47be5b07fb0e6ffa58e9dbede1d533328449799850c5d9c81d8933981d4b92694a75d3b09e1383353efdb41bc32f18ce8714e412fb937e8997ec1d102f2bb4bbdcb14264041d7c1930c3d39f9234505230a990e9ac7e702759a4bc1853b5bd37e98234c40fcfde72b60bac0526df9b34c655e9be6bf8bb577fd321fd2f8754", 0x9e, 0x7}, {&(0x7f0000000f40)="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", 0x1000, 0x1}], 0x84000, &(0x7f00000005c0)={[{@numtail}, {@numtail}], [{@obj_type={'obj_type', 0x3d, '#-\xfb[$@\xa7'}}, {@smackfsdef={'smackfsdef', 0x3d, 'mountinfo\x00'}}, {@dont_measure}, {@measure}, {@uid_lt={'uid<', r2}}, {@uid_lt={'uid<', r3}}]}) mount$9p_unix(&(0x7f0000000200)='\x00', &(0x7f0000000240)='./file1\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=unix,', {[{@dfltuid={'dfltuid', 0x3d, r3}}, {@cachetag}, {@cache_mmap}, {@loose}, {@noextend}, {@version_9p2000}, {@mmap}, {@dfltgid={'dfltgid', 0x3d, 0xffffffffffffffff}}, {@noextend}], [{@context={'context', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, ')\x00'}}]}}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa2000, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r4, r1, 0x0, 0xfffffdef) [ 2857.309741] loop2: detected capacity change from 0 to 40 [ 2857.319484] loop0: detected capacity change from 0 to 264192 [ 2857.325572] FAT-fs (loop5): Unrecognized mount option "ÿÿÿÿÿÿ" or missing value [ 2857.331398] loop0: detected capacity change from 0 to 264192 20:23:35 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) [ 2857.351667] loop5: detected capacity change from 0 to 8 [ 2857.365170] syz-executor.4: attempt to access beyond end of device [ 2857.365170] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2857.366168] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2857.366299] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 2857.371387] syz-executor.3: attempt to access beyond end of device [ 2857.371387] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2857.373116] Buffer I/O error on dev loop3, logical block 10, lost async page write 20:23:35 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={0x0}}, 0x2000c004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="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", 0x1d9}], 0x1) [ 2857.383912] FAT-fs (loop5): Unrecognized mount option "ÿÿÿÿÿÿ" or missing value [ 2857.391336] syz-executor.2: attempt to access beyond end of device [ 2857.391336] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2857.392342] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2857.399953] loop5: detected capacity change from 0 to 8 [ 2857.409097] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 2857.413047] FAT-fs (loop7): bogus number of reserved sectors [ 2857.413536] FAT-fs (loop7): Can't find a valid FAT filesystem 20:23:35 executing program 0: syz_read_part_table(0xfffffdfd, 0x0, 0x0) 20:23:35 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:23:35 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 91) 20:23:35 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 78) [ 2857.474002] loop1: detected capacity change from 0 to 40 [ 2857.478457] FAT-fs (loop1): bogus number of reserved sectors [ 2857.478907] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2857.524849] loop4: detected capacity change from 0 to 40 [ 2857.545648] loop0: detected capacity change from 0 to 264192 [ 2857.560839] loop0: detected capacity change from 0 to 264192 [ 2857.566865] syz-executor.4: attempt to access beyond end of device [ 2857.566865] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2857.567901] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2857.586700] loop2: detected capacity change from 0 to 40 [ 2857.649077] syz-executor.2: attempt to access beyond end of device [ 2857.649077] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2857.650847] Buffer I/O error on dev loop2, logical block 10, lost async page write 20:23:50 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 79) 20:23:50 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", ""]}, 0x1c}}, 0x2000c004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="02b2dccad213e1e6cf54b7a797f8f22a47f25b7658fb110b2e76f95b0f318b8fa745e6ffba4414d29a42bfab524bc5bffb17decc4540a6f00b9772f5f9789a9525790df8d989b23530d0a1398f2ad734c7ff47961be476ffeec81efa3d3aa64b8ea329261dfc2e1047a68670f0e5950d6a5414956bddd09e101b5b66e5742fe843413e065e3b86a242b37bc58c68153a45015f6f1ea67762c302e461e0c84bbb7f8d464f5a72d9fad56dac0c5028a4012a93dbc7da640786e3c9898cdd8fe091b166bfcd66e6257abc923ceaf90e994deded3fe8a59c2105f5caf366d32170ef51299dbf441bc3cddda352a2e07375fb44e75fed8082f3e960015d9bcddb0c834feda68d113a9a9fc0d1c30153685caf43b176219b666d74e67b6192cfd8a561c6c4aadcc80ed8c469bc41b028f1db515d699e45ad3379f9b1edb8de4bb2f8615d6716297baac7e45073fcecf31e51ec78c40edd78f245bced04414f849fb961fbbe79ff2ed7c48ec1b5331f9755d7094986fc8da198ce4a12f9ddfb43e565bc4fed618da9a693d03c3e7ec4b3014dfc022103e277c1b12efb03ef8b197f3a931f6cbe238cf8a4e7639b409b4586f66da41b94eed69d52ba9fde5aa1ee774d4e626932dc3511b10ae3bc3e8688a7a83b0467dfbf9295174739", 0x1d9}], 0x1) 20:23:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 83) [ 2871.935644] loop3: detected capacity change from 0 to 40 [ 2871.946754] loop4: detected capacity change from 0 to 40 20:23:50 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:23:50 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000140)=ANY=[]) openat(r0, &(0x7f0000002500)='./file1/file0\x00', 0x2942a0, 0x40) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x24c000, 0x1d0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) [ 2871.957795] loop1: detected capacity change from 0 to 40 [ 2871.963415] FAT-fs (loop7): bogus number of reserved sectors [ 2871.963863] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2871.975378] FAT-fs (loop1): bogus number of reserved sectors [ 2871.976182] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2871.988213] syz-executor.4: attempt to access beyond end of device [ 2871.988213] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2871.989210] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2872.001204] syz-executor.3: attempt to access beyond end of device [ 2872.001204] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2872.002214] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2872.013583] loop0: detected capacity change from 0 to 264192 pwritev(r1, &(0x7f0000002440)=[{&(0x7f0000000080)="26d6ca36449105f0ceea667a74c135065888df31d0639d5c3ce99a33c3ffe702de07f63d86e120394866d8cb8c9da76ffea9d7b072b34aa62e841c18246f90f69ff14b6d6cbb4d804b", 0x49}, {&(0x7f0000000180)="992f873710", 0x5}, {&(0x7f00000001c0)="cd24dc95021e5a22fb94034eb3282cbf54ec16521f969ea1ea1e477d85517ef1c4ac39b14699829d05280ded672b46336c1d524cb1758f4c87711df642f698e271f752457443d319736b1e936d773bc647e8ca0f1ce35c423d82b63f280c3ad9697713a818eafb1de37e8aaa1f41271a25e4326402c990ec7ceff8567d2c5eabdd066717057ef0df6a9fce7b4fd9148808256b045db58cf08937ab85f3ff62ef692de282e2e14e5d3b94b5e4b83aa2808613c7f99bafed4947cce90c385bb01c43fedf661cd6427e01237b3401a1a545fc25eff502a0d5d3f41e6ed230f4268622c280a3f5909d01e3c8076c8c81c3cd362c88f2394c932bd0106516d3a8cf493bebeb7fd7657cc1bca168868547c63bb7d6b6cdcde83f4a75c30abcbf7668a489262f7eb06b4e861764f452c244bfe1c24059b5c83a923795bcf68b557dc541644213a3d3404547f06f2f080252d5bbccc35c34ae05a111c43f409e8d3e309afc6ae5accdb0a5134d6ee933afce0f8048c70e806253d494ce2f0fa8b02a4108829e075ee771846eaebf9145860f707b158a8e05125943c550771ba8f53b1c278562c77b95a981b9aa97460cc6b501abb74ad0efc80dca0dc5ade26adda124b6a1503b5244dca7115409302a739b3a3d07ef69bc10b0f5eef100f36305289f987c404d09c40907034f958f52811bd7806aea50035d6ada19c0cdb6357ce05850e3b39aa41f8ed72cd478598cec9edf14db40dbba6a3de0f083f1a7c10e6578969e5533f3b6681c024a5dc6e9c3b5b4ee85aa6077e48837da23bed3f2fc99f532950de68839e552b7a725b2967ca1eb32fcb2c35fd75945df7777a6405bace0a2dfa8595e5308279ca6c88ef4c7b9fe858712bd04436b528f3194ec6e852dc0d42d81785419e5f0d9bcdb1d76d3f75dae26d5eab8d376be0bdfccb6d33c1ef2e17267cf0348e572b7316e0a8920300263104f71e35ef2ecbe3c60d66f18018f6b23caf3e8d9c32bad8b4f5701ac05bb499ad3b53e1cd4c923014d60ad57d14717436f076f3b00905f8dbf7c433c19b1a7bde844aabe50f9913afb1b8252e30b41ae4c6c32e5acc816ad76b16e701f61de64aaac36530dd71ef9bd8492e79dba2212bba6f890adbce213fe26a962b4ab75bc8e4a35938b3c1021b92ff7deea3cd7b1064d5607828a1ba32b2b6074bf672c5e1e0020d4cd1022c70d3b863e4ceb261ee8319ac4531b0180dffd2c8821e898799675274792539d60b1854d6b2f5e88abb6916d7091f26af426e7aeb3450e82148636418eab1c8696b36773f49939c2f03a78bef919beae7a0fd4b82612d9bea5ce9b7d08eaf737f6720c98c850cbfecdf5fc3f940305392d2594863e2882d732314a563bae58f9dd9bf7082bed0e3de8a2329cb0a04377e29393e6bdc74c5ca1d27419c87ec6e0d7a968717e5841360a8463d954400aa3288107e138548fc28c7e3c3540afb98dc38fe08f0f94d5022f9ffdf113fa1e2c2729e7f72d21dac2127b78b7a8859bade207622bd2024c27b509970e3f9b8e8ca6b00bb112b56ba7c1010aabc0e29b4be95960a841cc104ae0f9c21faeacf9e49b219928251d60c667faa29bd8a5449ef328a00c9201b887eeac892b9064949efa279a4803201ee4320c2d76f6a76c1628c818e448a977a390fb0e7026e162c3ab4949e414dfcc3674b39950183ef93526214f306507b5b966ff2dee8630879dff8466d352c6d553108bfa3fabe69336ce199419b3fefcaf59ab86633b2c8815d5fa11cb00899b3413d35a06136eac22449866cf05afa9bec371d5bdff3b35f74ee23388a281bb52867c68c1cb40ff4603fff120e3c7c0b28c806716f96b5d45dd1b918c95cbde70d6e4dd19c5dc1e207a88d73fc974381e3119ebb3b739e5286d5f4a9e4583a90a0ffab4565f392cc988c1325e941df71af32e33ef5789f849c19ac8d1c7a2ab74f58d30162c86caf2a11fb380c5e04072820ef232499487579d19d203c03d76751639e11db7cd75b6572a1e783340f7cfeb806235f880c30f4154288da4afd5d6c1901be33d36042ad0e7d08730ff06ea1ea64e5ea433407a15244dd8514e9f2e4fdb277581dacde74e84d2d203b14f810aa2f86ad09d50875db6c8485fc181113690ec150f58b21fc83d6d0665394c8c6e8b915320d11c273119518de1df6e4f8d5fefdea7f6722c695b7bfbd96e7f894782bbfcc5d17a2c6c98852f49659ef3e4d7d6a2c451653be0d524bc7aa308c61209818dba095401b30d6f940616d0daf0a633b3327e19bdd2d5d1c9f786bab48e72d409966adc554b90a36ab324e083982f64739f1016bcd8a12ad8669da4da14f37e43114bb3f21c8917e1a2a0a252eefac59ab8e4416a5eff45a5050d642b7ead4721b8465a1b6663db302e9ee7b9d0f52b231893ccac69a2fc6959b4fab5d084b0ca8f371b9f4c6910f5a590c66ee4c0422603e8d234a3b530dfd90ad58edad907b8d91578c70ee9cdd5f22196828d3818ee123db3794f759a10f1d765110c440013f6721b5e68112181e63170c14008dca992190743488149b6949698d44ebb4e760e2e9372b0d02fcdc2afc2901441c266e35808494601b1382d4615f89e6a3b12cf4d663b35f2a0244616d71c9a6d0f94fc662b989a1adc7444b0d5944cc66332ee6775689f055e744ab3d84130f734a04a95b1e0543cb1863173d66d0300465ddffd55f4d8692ebfa3440e7bbef10c441f306c2d7af3c8e155dbbed36cd9ae7dd49e0daec9a99e8a29af1774263304a75ae510e2dd98c1704e25b8dbe704e582ac11dc8d473173c40b0428ef42009bdd505a2abcbf00ead6d5e502487cd6f38bba8a406f4e75b9f11d4f7febc7bcf6bf854ecbcff12c610016e9f08102f06d106fd54cf5ce77033ebfc6ad27a128283e4afa9dec4639995181ed1b8e688e6680ddd3931c6896599a0434c4e8b07630cf50dc15e2f782a2327f1131cc320dac930434e065ff0f4910faae574b888b7f4b6a816c2f78a3f8055e93a246a82bc03066188e5db1eba7be53b2ff63f33ba40a296193dfc31a0038e2ca3d20c3ebf3fa71c4c21e78da6cfaecd066ba44daa30aae453836c9fc26a862ac0b2084407fc74d7331203aea88cff726b5af799f8de0fbed5bdf849a739510e363a6e7fa3c9a12363a5c73810374942ea9510b4b788593c3ceb52e7109d961b0de3de2c143ac29034c4646d7e18c767738f1434270ac6ffcf49e6f931bbefe827bfe990fddae06df6a3232cc5d909ffda2c1772e1386a43b81b697cae15cf2b97c7eab52f2b876659ae955562e3ee1475bff4faab46969af0836d2987633a5dac29fc1b72e0ae5c8a324cbc55895541594bf044afcbed0b8ae2fdb991f3be85fc0648f899e76bd85e0d5419925df37ce54e24e84d553496d5cd6dffaa23c55ec864e1e41b1b339bdd444aff2e8c3e7a45a52628652d652790e091f2a129a4001c9052580ec725715806e286a206dbf3ac8a58e94d57b2e790ccb3a175ecc7fcdba0275ddd27c487155fae4e20ebe49e925939d1c9a8630c3178f98240835e86a9bad5151a85883e9b7a61f5d31ac1e702c9d2eef0562dc9531c7390eb83667354ba4caf2bf444a7caabe480d1e446d15f6a2329db6389416c247cbf43cabb657d88ac55cb1c09781c9c8e70b8fec611ba9bf7e462f4312a02259e9402c0324e490d8d542356ff3a91f56ac8b8a938325c6895cb777b358b09895512dc66e7f449696af725b6c931dad7ca7ded7df019586628db8c7e8705b71260edbeaa6cc525cbc71b405b226dd8ac46c3995a7701ad436c44e10018f4f9fcbc7522567d419718d5f0e19560a33de0d18693b0c49984c5190a5cb56f4c345f811216f7f00618170d14ec53b94bcd6bdb7e2d6b27e7f30ae3d19e8fbdddc501915e51af188860ae87f90160b4bf3e29069051ef4064e25e087f45b579dbb1f80a2460694592a90b0ddaeb752d60db66bb1c1ddb05d1de4c54457d3bb32a55c2e59bca32f28d1bbde9c6e38c96fcf7335c9ce69d1da60a9e3d63de245836637f83af1e5f09d40588c80c1f359465fe66830cbcda37b5cd5d41a46eea56be8488feac7498915ff245f983a667d93c2e3ca61aebe656c21060ec5c2f800a715d34546883bca997d1432b480713d4d0a44c77d3c1acbee2751ac67251e6e622f145c5de26c3b8233b996eef258f5ca32736b9020e7797d68d875d75bcde90eb962b9a637a4236c09fcdcdb2f1b89dbd49986913700a64d5544cff5a6a20ea9f192b6b85a1e2b9f05cd4ef0efcc21b9b121000cfda80296e3d86d6fd167698559fc02ba7b9f5ff6cf544b617367b36d1d2948eac3b4c5ce21cf1f45b22ae5cbe2d9f083108e5d7e181f59a217d31b2c88a04011687aec184d6459fa36f5688d865e0c5ad104513c760dfa347f95652e3b0c56556b9e0360c9de877c8524d0ef77262077e90134d8c7019fc6d98b392216a7909d080bb79e0ba156fd4f72fa94560aaebf9e5a74bd45accb6a7683908171debb51d5759ce6433c9278e4c384de70642e07a9403eb07e0027ef9c9511178185c0e7e776f06048bc154d65a6b1a662c7c598578f66be14ff87e733c86007bc350a977e17a6b9f26b8a95a3178ce44dfaa7617cddccf9aa12b584fa58c9ec33b5ffef4d028f45733c919d00f15b70587de85331657d1b0770387b8827729c6366146bf688e9f74321e4f02cc95b77b2163b695a43b4264f92a16e0aeebfa2a2a091d359c20ddcaec65d728b13b1f77da1b5252c5903732336e3e91142415b6f17c71178c60aa0615794ef90d633214ebbaf9d5bfff72df17abb3633d8fbdea5e3d7e2559a5f52bc8c46f79995bede7e44004d403733885aea3dc43518e1c9078bd47d287035d4662882094dbb06f6b86918ad36c613dd3fcfbc546c3d0ae3c5d895f9d44dbb9b85521a6ede4201fa5f11708731708bef84a7554fb3e33a748a2d297356bcfc88c522c44ae0337076db027c93d249b024cd25200a06e16596291477e37b48cbf44b5679dba269baf8008f13e25c8984c2ff092b84f5f6bc8ee4c30e093babe3e6f37c48944972362bff1d0d4c1019f4f2f41ffc130bb5a52f1039a8726a01900a6b1f8747101997b0355958ebf2856212aafdb64d3faccc63197eaeb3ce2ef0e74b90a5b5507bc89a5871d143b1d7bddaf4acb807564344514a97a6725120ce19fd10c06e6119a4ddb79567e771b2187772162f5dcbb5c2467fbe5668c72d5080ecb3e574ba9ea5672713e5a58179acabe1615d019fb2ea41030fbe844c3927dcbbc74c42793c2c8209e6507ffb0925839c2419f4f9176417a1f0ae7993e80f9790daa5a5c1ad77907e38ecc8cecb794135908d3bcd70b5e154965351086f30f360609d04cd8bbfd5fb571c2124b9f84af472461670b4803c7ec177fa584ce9cc7f1557912aa79d1e56a95c6598a16af7e57b647b5ca979f3600ab58c64b7d3e75e7eb59f2b979af22ab79a245037fb3b1c20a381a0d906ca653449a6ed81cbd64f3b9ab73e9b1d25e101d1e0194b4af757840c2dddc3182b016cddc8cc9acf00fbd99ce4d1b2baf767860101b506471eab9e7eca5c20bb477d4869c1aa7e8fc63ed089ba717dad3fe834e482c2cba174b7d09df7b7fbfa147eef245e6c8b190d027651edd8d3d338fdb2ad1a844366195776fe7f1a741ad166e0c8a5195b5ce20fe31cb289b8f5e25ca13defb0c7706a81cd9fdabda3777f1b53b51438039fe069b79adaf6d4676e4a6d4389181b4c6fc31db4", 0x1000}, {&(0x7f00000011c0)="6e84ae9151f16ee0557d9c0fe1245871aee04dee49a96be43b6e74d5650b74641b274b7f1db222942a2f19aac544afcc2054f5dc9d87d514dba00c7e89bb81902ec307a19b166c1c2c469296fb46eb5bd2065a7917a62f7144cae07bc090aefb2901e9ef0b0c8bfc313e749f18559f14ee18490fb9eee2c18dc31ff8eda89a76e1cb300ff96b034610b23d33e68fe4f4d0f0a0d6345b460c9139c3f51dc8673de0c6be96e8b2b1b2b2ec045c86ee727f9552865033d63629650ebaba7ea8311c241ed0a425fe3b535d642a17e55f98bf52d167cdc8395731", 0xd8}, {&(0x7f00000012c0)="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", 0x1000}, {&(0x7f00000022c0)="08e14c116df7", 0x6}, {&(0x7f0000002300)="f537c0547f813e48a9d49daa74e5a1398fa07ffcd098657021d2d058348a0e0455bed3da969e3738c3886b2257fdcd8c636883b91fdb568d288cc4078c65ac", 0x3f}, {&(0x7f0000002340)="731e96eede4b17a47e0beb7221cd7b3b94f7ec0bd29a9064c61b111d7f4bc16427dca53c03731f3f95b3f8c2df2cf48c46290c6c1301f4cd87a2a118c64623f1631c328f0bbc0aa76813f97a0e33a410fb5455a7", 0x54}, {&(0x7f00000023c0)="5bda88ddb5da745533eba6bbf6e2dfa5bb9b623a890f25b7f08a03c0136e0e25f41a0c738e203d7ff0ff4a351064666c169a0e5fee782669335e23c0d193d308c833129e51fee9387a2bf8dcee163b7a8a0c9d6a64d85cbec8301dccaaa61b0c76c2639e19407725", 0x68}], 0x9, 0x3, 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000001480)) openat(r3, &(0x7f0000002540)='./file0\x00', 0x64001, 0xc5) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000001480)) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000002580)={{0x56, 0x20}, 'port0\x00', 0x9, 0x2, 0x1000000, 0xff, 0x8, 0x5, 0x5, 0x0, 0x0, 0x40}) 20:23:50 executing program 0: syz_read_part_table(0xffffff8c, 0x0, 0x0) 20:23:50 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 92) [ 2872.026741] loop2: detected capacity change from 0 to 40 [ 2872.029893] FAT-fs (loop5): bogus number of reserved sectors [ 2872.029921] FAT-fs (loop5): Can't find a valid FAT filesystem 20:23:50 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:23:50 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) [ 2872.041863] loop0: detected capacity change from 0 to 264192 20:23:50 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 93) 20:23:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 84) [ 2872.096685] syz-executor.2: attempt to access beyond end of device [ 2872.096685] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2872.097787] Buffer I/O error on dev loop2, logical block 10, lost async page write 20:23:50 executing program 0: syz_read_part_table(0xfffffff6, 0x0, 0x0) 20:23:50 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) [ 2872.141822] FAT-fs (loop7): bogus number of reserved sectors [ 2872.142562] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2872.153952] loop4: detected capacity change from 0 to 40 [ 2872.190483] loop3: detected capacity change from 0 to 40 20:23:50 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", ""]}, 0x1c}}, 0x2000c004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="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", 0x1d9}], 0x1) 20:23:50 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 80) [ 2872.229826] syz-executor.4: attempt to access beyond end of device [ 2872.229826] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2872.230758] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2872.246700] loop1: detected capacity change from 0 to 40 [ 2872.251903] loop0: detected capacity change from 0 to 264192 [ 2872.263636] loop2: detected capacity change from 0 to 40 20:23:50 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 94) [ 2872.288981] FAT-fs (loop1): bogus number of reserved sectors [ 2872.289987] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2872.298455] loop0: detected capacity change from 0 to 264192 [ 2872.325546] syz-executor.3: attempt to access beyond end of device [ 2872.325546] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2872.327636] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2872.338132] loop4: detected capacity change from 0 to 40 20:23:50 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", ""]}, 0x1c}}, 0x2000c004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="02b2dccad213e1e6cf54b7a797f8f22a47f25b7658fb110b2e76f95b0f318b8fa745e6ffba4414d29a42bfab524bc5bffb17decc4540a6f00b9772f5f9789a9525790df8d989b23530d0a1398f2ad734c7ff47961be476ffeec81efa3d3aa64b8ea329261dfc2e1047a68670f0e5950d6a5414956bddd09e101b5b66e5742fe843413e065e3b86a242b37bc58c68153a45015f6f1ea67762c302e461e0c84bbb7f8d464f5a72d9fad56dac0c5028a4012a93dbc7da640786e3c9898cdd8fe091b166bfcd66e6257abc923ceaf90e994deded3fe8a59c2105f5caf366d32170ef51299dbf441bc3cddda352a2e07375fb44e75fed8082f3e960015d9bcddb0c834feda68d113a9a9fc0d1c30153685caf43b176219b666d74e67b6192cfd8a561c6c4aadcc80ed8c469bc41b028f1db515d699e45ad3379f9b1edb8de4bb2f8615d6716297baac7e45073fcecf31e51ec78c40edd78f245bced04414f849fb961fbbe79ff2ed7c48ec1b5331f9755d7094986fc8da198ce4a12f9ddfb43e565bc4fed618da9a693d03c3e7ec4b3014dfc022103e277c1b12efb03ef8b197f3a931f6cbe238cf8a4e7639b409b4586f66da41b94eed69d52ba9fde5aa1ee774d4e626932dc3511b10ae3bc3e8688a7a83b0467dfbf9295174739", 0x1d9}], 0x1) 20:23:50 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:23:50 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x0, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x1c}}, 0x2000c004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="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", 0x1d9}], 0x1) [ 2872.517475] syz-executor.4: attempt to access beyond end of device [ 2872.517475] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2872.519207] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2872.525459] FAT-fs (loop7): bogus number of reserved sectors [ 2872.526612] FAT-fs (loop7): Can't find a valid FAT filesystem 20:23:50 executing program 0: syz_read_part_table(0xfffffffe, 0x0, 0x0) [ 2872.592760] loop0: detected capacity change from 0 to 264192 [ 2872.618222] loop0: detected capacity change from 0 to 264192 [ 2872.856584] FAT-fs (loop5): Unrecognized mount option "./file0" or missing value 20:24:07 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x0, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x1c}}, 0x2000c004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="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", 0x1d9}], 0x1) 20:24:07 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x5, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000240)="5d5d84e8b70624de44d91707e364184dc46c96d5c1f7af68db68fd2426662bc0f3bf1f91ec9306a7246dfb8ff8a38a82e49fbeb86a0c753cf98f0e65f29805dccdfc307dbf27fee6319642e4c9bb9d49b105f70f188866c6ac9895cf617ad0abec6333c4719eaf5ac7ea41c40317a47be6f6d32ff50cef7b665679ae74ecba67e7fd074d91c6b96ab04f6d0de3b12cd04955ef5dab8ef238477896", 0x9b, 0x400000000}, {&(0x7f0000000300)="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", 0x1000, 0x300}], 0x8000, &(0x7f0000000180)={[{@fat=@usefree}, {@dots}, {@fat=@discard}, {@dots}], [{@subj_role}, {@smackfstransmute={'smackfstransmute', 0x3d, '{{[\xe9/'}}, {@dont_hash}]}) r0 = syz_mount_image$msdos(&(0x7f0000001300), &(0x7f0000001340)='./file0\x00', 0x4, 0x1, &(0x7f0000001440)=[{&(0x7f0000001380)="a71caf6b5c96c0d2c65df7db1688467147fb2dda542bba0830825e95032d51ba276f26306e63d85639abd1d40966cfcb7420a31656c02f4a5eec2e1b821bb80f77c8b06d89cbddc9c04b4e2b0d3e1af74c1f5d89ca655f20beb8c2410953cb26aa86ab23d213b0c9fb8ef7315e7ad9175764d25f84f400d48f654c431532e605e59703f6df1949", 0x87, 0x4}], 0x0, &(0x7f0000001480)={[{@fat=@errors_continue}, {@nodots}], [{@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@subj_type={'subj_type', 0x3d, 'usefree'}}, {@subj_role={'subj_role', 0x3d, 'smackfstransmute'}}, {@dont_measure}, {@euid_lt={'euid<', 0xee00}}, {@measure}, {@context={'context', 0x3d, 'system_u'}}, {@smackfsdef}]}) r1 = openat(r0, &(0x7f0000000100)='./file0\x00', 0x155142, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef) 20:24:07 executing program 0: syz_read_part_table(0x225c17d03, 0x0, 0x0) 20:24:07 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 81) 20:24:07 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 95) 20:24:07 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:24:07 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) [ 2889.040446] loop4: detected capacity change from 0 to 40 20:24:07 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 85) [ 2889.048460] loop7: detected capacity change from 0 to 40 [ 2889.049445] loop0: detected capacity change from 0 to 264192 [ 2889.050119] loop2: detected capacity change from 0 to 40 [ 2889.057002] FAT-fs (loop7): bogus number of reserved sectors [ 2889.057723] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2889.063733] loop0: detected capacity change from 0 to 264192 [ 2889.067622] loop3: detected capacity change from 0 to 40 [ 2889.077679] loop5: detected capacity change from 0 to 40 [ 2889.082644] loop1: detected capacity change from 0 to 40 [ 2889.101952] FAT-fs (loop1): bogus number of reserved sectors [ 2889.102914] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2889.111634] syz-executor.4: attempt to access beyond end of device [ 2889.111634] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2889.112796] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2889.119367] syz-executor.2: attempt to access beyond end of device [ 2889.119367] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2889.120369] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2889.128769] syz-executor.3: attempt to access beyond end of device [ 2889.128769] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2889.128793] Buffer I/O error on dev loop3, logical block 10, lost async page write 20:24:22 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) 20:24:22 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:24:22 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x0, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x1c}}, 0x2000c004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="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", 0x1d9}], 0x1) 20:24:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 86) 20:24:22 executing program 0: syz_read_part_table(0x1000000000000, 0x0, 0x0) 20:24:22 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 82) 20:24:22 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 96) 20:24:22 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) [ 2903.765982] loop4: detected capacity change from 0 to 40 [ 2903.769975] loop7: detected capacity change from 0 to 40 [ 2903.772110] loop1: detected capacity change from 0 to 40 [ 2903.773930] loop0: detected capacity change from 0 to 264192 [ 2903.775794] loop3: detected capacity change from 0 to 40 [ 2903.775818] loop5: detected capacity change from 0 to 40 [ 2903.780614] loop2: detected capacity change from 0 to 40 [ 2903.788412] FAT-fs (loop7): bogus number of reserved sectors [ 2903.789216] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2903.795201] FAT-fs (loop1): bogus number of reserved sectors [ 2903.796328] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2903.802624] loop0: detected capacity change from 0 to 264192 [ 2903.900158] syz-executor.3: attempt to access beyond end of device [ 2903.900158] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2903.901865] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2903.911842] syz-executor.2: attempt to access beyond end of device [ 2903.911842] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2903.913617] Buffer I/O error on dev loop2, logical block 10, lost async page write 20:24:22 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 97) 20:24:22 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:24:22 executing program 0: syz_read_part_table(0x8000000000000, 0x0, 0x0) 20:24:22 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 83) 20:24:22 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:24:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 87) [ 2904.081896] loop1: detected capacity change from 0 to 40 [ 2904.086779] loop0: detected capacity change from 0 to 264192 [ 2904.092066] FAT-fs (loop1): bogus number of reserved sectors [ 2904.093134] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2904.114682] loop7: detected capacity change from 0 to 40 [ 2904.117216] loop4: detected capacity change from 0 to 40 [ 2904.134064] FAT-fs (loop7): bogus number of reserved sectors [ 2904.134959] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2904.177903] loop3: detected capacity change from 0 to 40 [ 2904.180851] loop2: detected capacity change from 0 to 40 20:24:22 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x200, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x1c}}, 0x2000c004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="02b2dccad213e1e6cf54b7a797f8f22a47f25b7658fb110b2e76f95b0f318b8fa745e6ffba4414d29a42bfab524bc5bffb17decc4540a6f00b9772f5f9789a9525790df8d989b23530d0a1398f2ad734c7ff47961be476ffeec81efa3d3aa64b8ea329261dfc2e1047a68670f0e5950d6a5414956bddd09e101b5b66e5742fe843413e065e3b86a242b37bc58c68153a45015f6f1ea67762c302e461e0c84bbb7f8d464f5a72d9fad56dac0c5028a4012a93dbc7da640786e3c9898cdd8fe091b166bfcd66e6257abc923ceaf90e994deded3fe8a59c2105f5caf366d32170ef51299dbf441bc3cddda352a2e07375fb44e75fed8082f3e960015d9bcddb0c834feda68d113a9a9fc0d1c30153685caf43b176219b666d74e67b6192cfd8a561c6c4aadcc80ed8c469bc41b028f1db515d699e45ad3379f9b1edb8de4bb2f8615d6716297baac7e45073fcecf31e51ec78c40edd78f245bced04414f849fb961fbbe79ff2ed7c48ec1b5331f9755d7094986fc8da198ce4a12f9ddfb43e565bc4fed618da9a693d03c3e7ec4b3014dfc022103e277c1b12efb03ef8b197f3a931f6cbe238cf8a4e7639b409b4586f66da41b94eed69d52ba9fde5aa1ee774d4e626932dc3511b10ae3bc3e8688a7a83b0467dfbf9295174739", 0x1d9}], 0x1) 20:24:22 executing program 0: syz_read_part_table(0x20000000000000, 0x0, 0x0) [ 2904.356957] syz-executor.2: attempt to access beyond end of device [ 2904.356957] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2904.358420] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2904.361370] syz-executor.3: attempt to access beyond end of device [ 2904.361370] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2904.363436] Buffer I/O error on dev loop3, logical block 10, lost async page write 20:24:38 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:24:38 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x200, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x1c}}, 0x2000c004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="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", 0x1d9}], 0x1) 20:24:38 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:24:38 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x501241, 0x24) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0x4) 20:24:38 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 88) 20:24:38 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 98) 20:24:38 executing program 0: syz_read_part_table(0x100000000000000, 0x0, 0x0) 20:24:38 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 84) [ 2919.940100] loop7: detected capacity change from 0 to 40 [ 2919.950938] loop4: detected capacity change from 0 to 40 [ 2919.955243] loop3: detected capacity change from 0 to 40 [ 2919.957100] loop2: detected capacity change from 0 to 40 [ 2919.962170] loop1: detected capacity change from 0 to 40 [ 2919.970882] FAT-fs (loop7): bogus number of reserved sectors [ 2919.971509] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2919.976647] FAT-fs (loop1): bogus number of reserved sectors [ 2919.977114] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2919.978847] loop0: detected capacity change from 0 to 264192 [ 2920.014202] syz-executor.4: attempt to access beyond end of device [ 2920.014202] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2920.018017] Buffer I/O error on dev loop4, logical block 10, lost async page write 20:24:38 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) [ 2920.035321] loop5: detected capacity change from 0 to 40 [ 2920.053593] loop0: detected capacity change from 0 to 264192 [ 2920.061423] loop7: detected capacity change from 0 to 40 [ 2920.066780] FAT-fs (loop7): bogus number of reserved sectors [ 2920.067235] FAT-fs (loop7): Can't find a valid FAT filesystem 20:24:38 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:24:38 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 99) [ 2920.111883] syz-executor.2: attempt to access beyond end of device [ 2920.111883] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2920.113835] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2920.116631] syz-executor.3: attempt to access beyond end of device [ 2920.116631] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 20:24:38 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) [ 2920.120645] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2920.169186] loop1: detected capacity change from 0 to 40 20:24:38 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f00000001c0)) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) preadv2(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/65, 0x41}, {&(0x7f00000000c0)=""/58, 0x3a}, {&(0x7f0000000240)=""/199, 0xc7}], 0x3, 0x1, 0x40, 0x16) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/meminfo\x00', 0x0, 0x0) openat(r1, &(0x7f0000000380)='./file0\x00', 0x624200, 0x195) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) [ 2920.191359] FAT-fs (loop1): bogus number of reserved sectors [ 2920.192224] FAT-fs (loop1): Can't find a valid FAT filesystem 20:24:38 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x200, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x1c}}, 0x2000c004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="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", 0x1d9}], 0x1) [ 2920.202038] loop4: detected capacity change from 0 to 40 20:24:38 executing program 0: syz_read_part_table(0x200000000000000, 0x0, 0x0) [ 2920.209873] loop7: detected capacity change from 0 to 40 20:24:38 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 85) [ 2920.225850] FAT-fs (loop7): bogus number of reserved sectors [ 2920.226324] FAT-fs (loop7): Can't find a valid FAT filesystem 20:24:38 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 89) [ 2920.283500] loop0: detected capacity change from 0 to 264192 [ 2920.285692] loop5: detected capacity change from 0 to 40 [ 2920.290170] loop2: detected capacity change from 0 to 40 20:24:38 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) [ 2920.296389] loop0: detected capacity change from 0 to 264192 [ 2920.314358] loop3: detected capacity change from 0 to 40 [ 2920.320731] syz-executor.4: attempt to access beyond end of device [ 2920.320731] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2920.324907] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2920.354955] syz-executor.5: attempt to access beyond end of device [ 2920.354955] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2920.355997] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 2920.357827] syz-executor.2: attempt to access beyond end of device [ 2920.357827] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2920.358815] Buffer I/O error on dev loop2, logical block 10, lost async page write 20:24:38 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) [ 2920.380038] loop7: detected capacity change from 0 to 40 [ 2920.386333] syz-executor.3: attempt to access beyond end of device [ 2920.386333] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2920.387308] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2920.392498] FAT-fs (loop7): bogus number of reserved sectors [ 2920.392995] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2920.456600] loop1: detected capacity change from 0 to 40 [ 2920.480055] FAT-fs (loop1): bogus number of reserved sectors [ 2920.481117] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2935.672385] loop2: detected capacity change from 0 to 40 [ 2935.672751] loop3: detected capacity change from 0 to 40 20:24:53 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 86) 20:24:53 executing program 0: syz_read_part_table(0x300000000000000, 0x0, 0x0) 20:24:53 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:24:53 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:24:53 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 90) 20:24:53 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 100) 20:24:53 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file2\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) 20:24:53 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x200, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x1c}}, 0x2000c004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="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", 0x1d9}], 0x1) [ 2935.676593] loop7: detected capacity change from 0 to 40 [ 2935.677204] loop1: detected capacity change from 0 to 40 [ 2935.681085] FAT-fs (loop1): invalid media value (0x00) [ 2935.681535] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2935.687069] loop5: detected capacity change from 0 to 40 [ 2935.688391] FAT-fs (loop7): bogus number of reserved sectors [ 2935.688887] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2935.731818] loop4: detected capacity change from 0 to 40 [ 2935.734368] loop0: detected capacity change from 0 to 264192 [ 2935.752968] loop0: detected capacity change from 0 to 264192 [ 2935.770943] syz-executor.3: attempt to access beyond end of device [ 2935.770943] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2935.771965] Buffer I/O error on dev loop3, logical block 10, lost async page write 20:24:54 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) [ 2935.789129] syz-executor.2: attempt to access beyond end of device [ 2935.789129] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2935.791034] Buffer I/O error on dev loop2, logical block 10, lost async page write 20:24:54 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:24:54 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="0000390034f8188c174b1af255dde13d404c2dc55222189cab5cdf3e85bed2c3cd487aa957e5a3b5301977f41d7a20f0472f5e4e407581d547aedb4b55753efd16fea0fd6832f76ed75e1426701b0ecd2d6a1a53da4fbe2ed20c3574a071f710cd1e38cc77ce1faa635182a8d45fa685c5971918baf16c5f5b8af65a69a47f80f9459c040008b94e0ba48910ab0d95767c5ccb2adf863c97144870623ce9046c52d94b264867fc020000000000000071341be16434139d5dacc187bc4f87d57cbc5c51c41eef80261ce65a2098b76750d56b11794581b20998f1fc1d9e87abf3355a8e7c0559101974468c79d19c612309cd3a71264fba0bb1f58538e8cbab3d848f42ecd8441a92ab85dc1214af9f82c93a7bbc9e3f363b74bf4177bc2a86ea158104fa01939b9b211f0b10a54271899ecca64355bb037638339e5c28b36d0a9db21b0fdf8225d9413f54351e27e53e2c8a7a36dafb98408868e1af2a43827d6f7974636212f552090000"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x200, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x1c}}, 0x2000c004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="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", 0x1d9}], 0x1) [ 2935.822822] syz-executor.4: attempt to access beyond end of device [ 2935.822822] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2935.824633] Buffer I/O error on dev loop4, logical block 10, lost async page write 20:24:54 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 91) [ 2935.858176] loop1: detected capacity change from 0 to 40 [ 2935.858381] loop7: detected capacity change from 0 to 40 [ 2935.867173] FAT-fs (loop1): invalid media value (0x00) [ 2935.867701] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2935.880870] FAT-fs (loop7): bogus number of reserved sectors [ 2935.881953] FAT-fs (loop7): Can't find a valid FAT filesystem 20:24:54 executing program 0: syz_read_part_table(0x37dc12502000000, 0x0, 0x0) 20:24:54 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 87) [ 2935.967208] loop3: detected capacity change from 0 to 40 20:24:54 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2936.055445] loop4: detected capacity change from 0 to 40 [ 2936.059756] syz-executor.3: attempt to access beyond end of device [ 2936.059756] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2936.059798] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2936.078173] loop0: detected capacity change from 0 to 264192 [ 2936.112303] syz-executor.4: attempt to access beyond end of device [ 2936.112303] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2936.112358] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2936.121149] loop0: detected capacity change from 0 to 264192 [ 2936.151053] loop2: detected capacity change from 0 to 40 20:24:54 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:24:54 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:24:54 executing program 0: syz_read_part_table(0x400000000000000, 0x0, 0x0) [ 2936.291874] syz-executor.2: attempt to access beyond end of device [ 2936.291874] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2936.293670] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2936.314677] loop7: detected capacity change from 0 to 40 [ 2936.334587] loop1: detected capacity change from 0 to 40 [ 2936.355395] FAT-fs (loop7): bogus number of reserved sectors [ 2936.356376] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2936.363064] FAT-fs (loop1): invalid media value (0x00) [ 2936.364080] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2936.396321] loop0: detected capacity change from 0 to 264192 [ 2936.421424] loop0: detected capacity change from 0 to 264192 20:25:09 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 92) 20:25:09 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x200, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x1c}}, 0x2000c004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="02b2dccad213e1e6cf54b7a797f8f22a47f25b7658fb110b2e76f95b0f318b8fa745e6ffba4414d29a42bfab524bc5bffb17decc4540a6f00b9772f5f9789a9525790df8d989b23530d0a1398f2ad734c7ff47961be476ffeec81efa3d3aa64b8ea329261dfc2e1047a68670f0e5950d6a5414956bddd09e101b5b66e5742fe843413e065e3b86a242b37bc58c68153a45015f6f1ea67762c302e461e0c84bbb7f8d464f5a72d9fad56dac0c5028a4012a93dbc7da640786e3c9898cdd8fe091b166bfcd66e6257abc923ceaf90e994deded3fe8a59c2105f5caf366d32170ef51299dbf441bc3cddda352a2e07375fb44e75fed8082f3e960015d9bcddb0c834feda68d113a9a9fc0d1c30153685caf43b176219b666d74e67b6192cfd8a561c6c4aadcc80ed8c469bc41b028f1db515d699e45ad3379f9b1edb8de4bb2f8615d6716297baac7e45073fcecf31e51ec78c40edd78f245bced04414f849fb961fbbe79ff2ed7c48ec1b5331f9755d7094986fc8da198ce4a12f9ddfb43e565bc4fed618da9a693d03c3e7ec4b3014dfc022103e277c1b12efb03ef8b197f3a931f6cbe238cf8a4e7639b409b4586f66da41b94eed69d52ba9fde5aa1ee774d4e626932dc3511b10ae3bc3e8688a7a83b0467dfbf9295174739", 0x1d9}], 0x1) [ 2950.912880] loop7: detected capacity change from 0 to 40 [ 2950.914093] loop4: detected capacity change from 0 to 40 20:25:09 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_mount_image$nfs(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0x7, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000400)="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", 0xfe, 0x401}], 0x2000000, &(0x7f0000000180)={[{'vfat\x00'}, {}, {'vfat\x00'}, {'${+'}, {'vfat\x00'}, {'&'}, {'\x9d{:-$}'}, {'vfat\x00'}, {')'}], [{@fsmagic}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@appraise}, {@defcontext={'defcontext', 0x3d, 'system_u'}}]}) r1 = memfd_secret(0x0) renameat2(r0, &(0x7f0000000340)='./file0\x00', r1, &(0x7f0000000380)='./file0\x00', 0x2) chdir(&(0x7f0000000140)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x5, &(0x7f0000000080)={0x77359400}, 0x1, 0x1}, 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r5, r4, 0x0, 0xfffffdef) 20:25:09 executing program 0: syz_read_part_table(0x500000000000000, 0x0, 0x0) 20:25:09 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 88) 20:25:09 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:25:09 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:25:09 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xee00}}, './file2\x00'}) mount$9p_rdma(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2001000, &(0x7f0000000240)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@sq={'sq', 0x3d, 0x101}}, {@sq={'sq', 0x3d, 0xffffffffffffffe0}}, {@common=@mmap}, {@common=@nodevmap}], [{@obj_role}, {@fowner_eq={'fowner', 0x3d, r2}}, {@measure}, {@obj_type={'obj_type', 0x3d, '/:$'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}]}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_rdma(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x400, &(0x7f00000003c0)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@rq={'rq', 0x3d, 0x9}}, {@sq={'sq', 0x3d, 0x3}}, {@timeout={'timeout', 0x3d, 0x7}}, {@common=@cache_fscache}, {@sq={'sq', 0x3d, 0x94}}, {@sq={'sq', 0x3d, 0x4}}, {@timeout={'timeout', 0x3d, 0x1}}], [{@measure}, {@pcr={'pcr', 0x3d, 0x19}}, {@fowner_lt={'fowner<', r2}}, {@obj_type={'obj_type', 0x3d, '^MAY_READ'}}, {@appraise}, {@obj_type={'obj_type', 0x3d, 'nodevmap'}}, {@hash}]}}) openat(r0, &(0x7f00000001c0)='./file1\x00', 0x101000, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r1, 0x0, 0xfffffdef) [ 2950.921999] FAT-fs (loop7): bogus number of reserved sectors [ 2950.922613] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2950.930010] loop3: detected capacity change from 0 to 40 [ 2950.947105] syz-executor.4: attempt to access beyond end of device [ 2950.947105] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2950.948218] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2950.959952] loop1: detected capacity change from 0 to 40 [ 2950.964155] syz-executor.4: attempt to access beyond end of device [ 2950.964155] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2950.965215] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2950.971574] FAT-fs (loop1): invalid media value (0x00) [ 2950.972034] FAT-fs (loop1): Can't find a valid FAT filesystem 20:25:09 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) [ 2950.990964] loop2: detected capacity change from 0 to 40 [ 2950.993645] loop5: detected capacity change from 0 to 40 [ 2950.996959] loop0: detected capacity change from 0 to 264192 [ 2951.009158] loop0: detected capacity change from 0 to 264192 20:25:09 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x20) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000001480)) write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="c654f62eec2829f54b7be6882f6feffee85f6bab8f4d079926bf61948495287361ba515941f1ffe698aef0776ed1774b87d6be3e81369907e1157ee24bb6bd2ade85051c274a3ac8c6cedeac752b226a0329eedb7198a372046d9d019d697fb54db81b520aa0041d906fa6edea1c50157c131bf9ac9782bfad5afe163eb78fb6b6b7d539372aee26d2ae", @ANYRESHEX=r3, @ANYBLOB="03513522cb18ed9d9275", @ANYRES32=r0, @ANYBLOB="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"], 0x220) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) write(r4, &(0x7f0000000240)="6e39cecc78ba42137963a46e91839ca00e2c7b0c9c497af78f2f3e61878d0e2f874a64c353dfa30805564acbde8d760227d802b6cef7d4df1c20093e0f3134bf18a8d4b3f9bad1aad21c7753821cdf9173af24cb9a1063a0db3c2d87887235ae805bf98e6d7f87135f038ef846ac28c2f8ab06236a52ffac29daf9cd26de16f2c43ec994329816bfed856a41c43776465eca7464821860905092aec8753614fd039023854899e21f8cff4f99267e3ce89192937b723be507113af8e99723f1c2c5f9da65998a52ad7f97017bfe2b585bd933989b2f75b79fe0d00620ed16ed799c24ad5f1f62838e85dc364f", 0xec) [ 2951.047748] syz-executor.3: attempt to access beyond end of device [ 2951.047748] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2951.049665] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2951.069139] loop7: detected capacity change from 0 to 40 [ 2951.081085] FAT-fs (loop7): bogus number of reserved sectors [ 2951.081100] FAT-fs (loop7): Can't find a valid FAT filesystem 20:25:09 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) [ 2951.104495] syz-executor.2: attempt to access beyond end of device [ 2951.104495] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2951.106215] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2951.108704] syz-executor.5: attempt to access beyond end of device [ 2951.108704] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2951.110522] Buffer I/O error on dev loop5, logical block 10, lost async page write 20:25:09 executing program 0: syz_read_part_table(0x600000000000000, 0x0, 0x0) 20:25:09 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 93) [ 2951.158865] syz-executor.5: attempt to access beyond end of device [ 2951.158865] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2951.160889] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 2951.164752] loop4: detected capacity change from 0 to 40 20:25:09 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) [ 2951.175275] loop1: detected capacity change from 0 to 40 [ 2951.184826] FAT-fs (loop1): invalid media value (0x00) [ 2951.185235] FAT-fs (loop1): Can't find a valid FAT filesystem 20:25:09 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}}, 0x2000c004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="02b2dccad213e1e6cf54b7a797f8f22a47f25b7658fb110b2e76f95b0f318b8fa745e6ffba4414d29a42bfab524bc5bffb17decc4540a6f00b9772f5f9789a9525790df8d989b23530d0a1398f2ad734c7ff47961be476ffeec81efa3d3aa64b8ea329261dfc2e1047a68670f0e5950d6a5414956bddd09e101b5b66e5742fe843413e065e3b86a242b37bc58c68153a45015f6f1ea67762c302e461e0c84bbb7f8d464f5a72d9fad56dac0c5028a4012a93dbc7da640786e3c9898cdd8fe091b166bfcd66e6257abc923ceaf90e994deded3fe8a59c2105f5caf366d32170ef51299dbf441bc3cddda352a2e07375fb44e75fed8082f3e960015d9bcddb0c834feda68d113a9a9fc0d1c30153685caf43b176219b666d74e67b6192cfd8a561c6c4aadcc80ed8c469bc41b028f1db515d699e45ad3379f9b1edb8de4bb2f8615d6716297baac7e45073fcecf31e51ec78c40edd78f245bced04414f849fb961fbbe79ff2ed7c48ec1b5331f9755d7094986fc8da198ce4a12f9ddfb43e565bc4fed618da9a693d03c3e7ec4b3014dfc022103e277c1b12efb03ef8b197f3a931f6cbe238cf8a4e7639b409b4586f66da41b94eed69d52ba9fde5aa1ee774d4e626932dc3511b10ae3bc3e8688a7a83b0467dfbf9295174739", 0x1d9}], 0x1) 20:25:09 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 89) [ 2951.206483] loop3: detected capacity change from 0 to 40 [ 2951.222094] loop7: detected capacity change from 0 to 40 [ 2951.231856] FAT-fs (loop7): invalid media value (0x00) [ 2951.232317] FAT-fs (loop7): Can't find a valid FAT filesystem 20:25:09 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) [ 2951.254585] syz-executor.3: attempt to access beyond end of device [ 2951.254585] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2951.255608] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2951.265133] loop2: detected capacity change from 0 to 40 [ 2951.267808] loop0: detected capacity change from 0 to 264192 [ 2951.282018] loop0: detected capacity change from 0 to 264192 20:25:09 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="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", 0x15e, 0x100000001}, {0x0, 0x0, 0x2800}], 0x1000, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESOCT=r0]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) 20:25:09 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 94) 20:25:09 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) [ 2951.347221] loop1: detected capacity change from 0 to 40 [ 2951.368511] FAT-fs (loop1): invalid media value (0x00) [ 2951.368936] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2951.403673] loop7: detected capacity change from 0 to 40 [ 2951.412557] loop3: detected capacity change from 0 to 40 [ 2951.449014] FAT-fs (loop7): invalid media value (0x00) [ 2951.449845] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2951.480726] syz-executor.3: attempt to access beyond end of device [ 2951.480726] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2951.482570] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2951.500637] loop5: detected capacity change from 0 to 264192 [ 2952.353170] loop5: detected capacity change from 0 to 264192 20:25:27 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000040)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r2, 0x0, 0xffffffff) sendfile(r2, r1, &(0x7f00000000c0)=0x1000, 0x1d) mkdir(&(0x7f0000000080)='./file0\x00', 0x48) 20:25:27 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:25:27 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x1) sendfile(r1, r0, 0x0, 0xfffffdef) 20:25:27 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:25:27 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 90) 20:25:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 95) 20:25:27 executing program 0: syz_read_part_table(0x700000000000000, 0x0, 0x0) 20:25:27 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}}, 0x2000c004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="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", 0x1d9}], 0x1) [ 2969.623304] loop7: detected capacity change from 0 to 40 [ 2969.631899] loop3: detected capacity change from 0 to 40 [ 2969.634017] FAT-fs (loop7): invalid media value (0x00) [ 2969.634729] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2969.645068] loop0: detected capacity change from 0 to 264192 [ 2969.649921] loop4: detected capacity change from 0 to 40 [ 2969.669724] loop1: detected capacity change from 0 to 40 [ 2969.672131] loop0: detected capacity change from 0 to 264192 [ 2969.674566] loop2: detected capacity change from 0 to 40 [ 2969.678593] loop5: detected capacity change from 0 to 40 [ 2969.694905] syz-executor.3: attempt to access beyond end of device [ 2969.694905] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2969.696304] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2969.698587] FAT-fs (loop1): bogus number of FAT sectors [ 2969.699458] FAT-fs (loop1): Can't find a valid FAT filesystem 20:25:28 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) [ 2969.787353] syz-executor.4: attempt to access beyond end of device [ 2969.787353] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2969.789852] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2969.804969] syz-executor.2: attempt to access beyond end of device [ 2969.804969] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2969.806179] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2969.833019] loop7: detected capacity change from 0 to 40 [ 2969.857320] FAT-fs (loop7): invalid media value (0x00) [ 2969.858462] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2983.210175] loop3: detected capacity change from 0 to 40 20:25:41 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 96) 20:25:41 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000000240)="606fe56b646f7366d8a02b00080101000440002000f8014c2feb38751725519220e206bdc59b8bde722ee2e6619b6b5be68757edef56984118ea145817445dc37ff01a374579439c93c53451dcc8339ffbb563b204443c2c1b3df2830747f2e0b5ee8670e25d8daea9e9223d1f9009caa086ea0bcde6fddc424419e82b54912d4f9a31f5e395e02d17b4a0224d9e7f462ae8ba1edd21872a2c7423ccb6999c5e5cd91616cc1b9d2383522801c183debc736ca209d6648011fdc44eeeff8eb2e255e2e6114b108c394fb3b0c8f94ecd767652b92440bc718f6ce600"/233, 0xe9}, {0x0, 0x0, 0x7}, {&(0x7f0000000340)="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", 0xfe, 0x2c6}], 0x290a8a0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 20:25:41 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:25:41 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}}, 0x2000c004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="02b2dccad213e1e6cf54b7a797f8f22a47f25b7658fb110b2e76f95b0f318b8fa745e6ffba4414d29a42bfab524bc5bffb17decc4540a6f00b9772f5f9789a9525790df8d989b23530d0a1398f2ad734c7ff47961be476ffeec81efa3d3aa64b8ea329261dfc2e1047a68670f0e5950d6a5414956bddd09e101b5b66e5742fe843413e065e3b86a242b37bc58c68153a45015f6f1ea67762c302e461e0c84bbb7f8d464f5a72d9fad56dac0c5028a4012a93dbc7da640786e3c9898cdd8fe091b166bfcd66e6257abc923ceaf90e994deded3fe8a59c2105f5caf366d32170ef51299dbf441bc3cddda352a2e07375fb44e75fed8082f3e960015d9bcddb0c834feda68d113a9a9fc0d1c30153685caf43b176219b666d74e67b6192cfd8a561c6c4aadcc80ed8c469bc41b028f1db515d699e45ad3379f9b1edb8de4bb2f8615d6716297baac7e45073fcecf31e51ec78c40edd78f245bced04414f849fb961fbbe79ff2ed7c48ec1b5331f9755d7094986fc8da198ce4a12f9ddfb43e565bc4fed618da9a693d03c3e7ec4b3014dfc022103e277c1b12efb03ef8b197f3a931f6cbe238cf8a4e7639b409b4586f66da41b94eed69d52ba9fde5aa1ee774d4e626932dc3511b10ae3bc3e8688a7a83b0467dfbf9295174739", 0x1d9}], 0x1) 20:25:41 executing program 0: syz_read_part_table(0x800000000000000, 0x0, 0x0) 20:25:41 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:25:41 executing program 5: chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) 20:25:41 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 91) [ 2983.221941] loop0: detected capacity change from 0 to 264192 [ 2983.233070] loop1: detected capacity change from 0 to 40 [ 2983.239755] loop4: detected capacity change from 0 to 2 [ 2983.240700] loop0: detected capacity change from 0 to 264192 [ 2983.244581] FAT-fs (loop1): bogus number of FAT sectors [ 2983.245142] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2983.273551] loop2: detected capacity change from 0 to 40 [ 2983.279953] loop7: detected capacity change from 0 to 40 20:25:41 executing program 0: syz_read_part_table(0xb00000000000000, 0x0, 0x0) [ 2983.314233] FAT-fs (loop7): invalid media value (0x00) 20:25:41 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) [ 2983.314374] FAT-fs (loop7): Can't find a valid FAT filesystem 20:25:41 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 97) [ 2983.361185] loop0: detected capacity change from 0 to 264192 [ 2983.371509] loop1: detected capacity change from 0 to 40 [ 2983.376530] loop0: detected capacity change from 0 to 264192 [ 2983.402643] loop3: detected capacity change from 0 to 40 [ 2983.421887] FAT-fs (loop1): bogus number of FAT sectors [ 2983.422830] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2983.427935] syz-executor.2: attempt to access beyond end of device [ 2983.427935] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2983.429854] Buffer I/O error on dev loop2, logical block 10, lost async page write 20:25:41 executing program 0: syz_read_part_table(0x1800000000000000, 0x0, 0x0) 20:25:41 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [""]}, 0x1c}}, 0x2000c004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="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", 0x1d9}], 0x1) 20:25:41 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) [ 2983.539468] syz-executor.3: attempt to access beyond end of device [ 2983.539468] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2983.541424] Buffer I/O error on dev loop3, logical block 10, lost async page write 20:25:41 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 92) [ 2983.625386] loop0: detected capacity change from 0 to 264192 20:25:41 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) [ 2983.677117] loop0: detected capacity change from 0 to 264192 [ 2983.753619] loop7: detected capacity change from 0 to 40 [ 2983.764727] FAT-fs (loop7): invalid media value (0x00) [ 2983.765378] FAT-fs (loop7): Can't find a valid FAT filesystem 20:25:42 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 98) [ 2983.815110] loop1: detected capacity change from 0 to 40 20:25:42 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) [ 2983.878165] loop2: detected capacity change from 0 to 40 [ 2983.895931] loop3: detected capacity change from 0 to 40 [ 2983.930451] loop7: detected capacity change from 0 to 40 [ 2983.936512] FAT-fs (loop7): bogus number of FAT sectors [ 2983.937413] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2983.978779] syz-executor.3: attempt to access beyond end of device [ 2983.978779] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2983.980152] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2983.981349] syz-executor.2: attempt to access beyond end of device [ 2983.981349] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2983.982864] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2984.073689] loop4: detected capacity change from 0 to 2 20:25:55 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) setxattr$incfs_size(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)=0x6, 0x8, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0x2, 0x2, 0xfa, 0x3}, {0xd39, 0xd7, 0x1f, 0x5}, {0x7fff, 0x4, 0x0, 0x1e3}, {0x0, 0x3f, 0x2, 0xfffffffc}, {0x7, 0x3, 0x6, 0x9}, {0x4, 0x2, 0x6, 0xb6}]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000240)={0x0, 0x5, 0xffffffffffffff00}) sendfile(r1, r0, 0x0, 0xfffffdef) 20:25:55 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [""]}, 0x1c}}, 0x2000c004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="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", 0x1d9}], 0x1) 20:25:55 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="601c6d6b646f7366d8a0507566a70bac4b6d002000f80167892379943808da2ee35918b78004edcc67d7b374769fd4dfd041a19d4ce6f44e2aed90ff77c225eee46be7ceb3aa1689e4439648c96e8ff37aade2e8d5a1a0146ec746be584b6ccf23ee7590be028b386e7373ceddf5a21e4a24076479510877eb75fc9ecea338f087640621616d1ce5aca8c993f7b6876e1cb2ea08c1eee4333654874fcea4ff91cbc96ca35108", 0xa6}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000001480)) openat(r1, &(0x7f0000000040)='./file1\x00', 0x448101, 0xeb) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r0, 0x0, 0xfffffdef) 20:25:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 99) 20:25:55 executing program 0: syz_read_part_table(0x6400000000000000, 0x0, 0x0) 20:25:55 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) [ 2997.504002] loop3: detected capacity change from 0 to 40 [ 2997.509885] loop2: detected capacity change from 0 to 40 [ 2997.510693] loop4: detected capacity change from 0 to 40 [ 2997.518544] loop7: detected capacity change from 0 to 40 20:25:55 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 93) 20:25:55 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) [ 2997.538318] FAT-fs (loop7): bogus number of FAT sectors [ 2997.539153] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2997.558332] syz-executor.4: attempt to access beyond end of device [ 2997.558332] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2997.559427] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2997.562711] syz-executor.3: attempt to access beyond end of device [ 2997.562711] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2997.563662] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2997.575029] loop5: detected capacity change from 0 to 40 [ 2997.583033] loop1: detected capacity change from 0 to 40 [ 2997.595599] loop0: detected capacity change from 0 to 264192 [ 2997.606143] syz-executor.2: attempt to access beyond end of device [ 2997.606143] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2997.606863] loop0: detected capacity change from 0 to 264192 [ 2997.608081] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2997.610481] FAT-fs (loop5): bogus logical sector size 26229 [ 2997.611448] FAT-fs (loop5): Can't find a valid FAT filesystem 20:25:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 100) 20:25:55 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 20:25:56 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [""]}, 0x1c}}, 0x2000c004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="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", 0x1d9}], 0x1) 20:25:56 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 94) 20:25:56 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:25:56 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) [ 2997.743517] loop4: detected capacity change from 0 to 40 20:25:56 executing program 0: syz_read_part_table(0x8004000000000000, 0x0, 0x0) [ 2997.756718] loop3: detected capacity change from 0 to 40 [ 2997.771057] loop2: detected capacity change from 0 to 40 [ 2997.860283] syz-executor.3: attempt to access beyond end of device [ 2997.860283] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2997.861355] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2997.892702] loop1: detected capacity change from 0 to 40 [ 2997.900947] syz-executor.2: attempt to access beyond end of device [ 2997.900947] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2997.902836] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2997.914014] loop7: detected capacity change from 0 to 40 [ 2997.936713] syz-executor.4: attempt to access beyond end of device [ 2997.936713] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2997.939079] Buffer I/O error on dev loop4, logical block 10, lost async page write 20:25:56 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) [ 2997.952430] loop0: detected capacity change from 0 to 264192 [ 2997.973388] FAT-fs (loop7): bogus number of FAT sectors [ 2997.974718] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2998.001363] syz-executor.4: attempt to access beyond end of device [ 2998.001363] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2998.003748] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2998.014104] loop0: detected capacity change from 0 to 264192 [ 2998.082832] loop3: detected capacity change from 0 to 40 [ 2998.181945] syz-executor.3: attempt to access beyond end of device [ 2998.181945] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2998.182963] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 2998.400056] loop5: detected capacity change from 0 to 40 [ 2998.414142] FAT-fs (loop5): Unrecognized mount option "./file0" or missing value 20:26:13 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:26:13 executing program 5: sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc, &(0x7f0000000180)=[{&(0x7f00000000c0)={0x20, 0x11, 0x2, 0x70bd25, 0x25dfdbfb, "", [@generic="c941d52b971cd3310d8147e9b091"]}, 0x20}, {&(0x7f0000000240)={0x2a0, 0x3, 0x1, 0x70bd25, 0x25dfdbfe, "", [@typed={0xc, 0x72, 0x0, 0x0, @u64=0x9}, @generic="56b500b56eac629799c504e2ac854839325ac36471b7b3c8423f61820fe2dbc4042bda4bb15e39691e2db091f8119cf49a152942d363f67d4723d3e9535680bae27cbce8b0980d0f3a41ecada314a4b9b816c812630a42a266cbb194f39021b91c61411a0973a28ddc239bf788c845c04f7468854a1263b8d2e33b19ecc6151ce3f94530b21cbd63c4cdb4", @generic="490fe2fef30ca5c66f982852df7401a5b17547723c7fbf816e1596f0ba6597b8322e85be01edeb51c0fe16f238dd5631efad3efee500548179f3b59ed286a3a4e854fa7484d83bc72a849a89929b4cb20cd494d12e12e15b05e129c12242284ffb688e69104206dfc64587a0d3f791e4b1b4444bdb93f5395a4608df31b6ba84ea2597c8b4981cf8cfdc2cd2cddf118fdf61f0b25eb031d88f673cb9de3562df247d625012cf9adc4cc969", @nested={0x9c, 0x23, 0x0, 0x1, [@generic="c5109162ddce0462a3b71d5dfc1f5f53ce928d597dc7021a4a7618534ad17eb57044c053b23db4281d96b34a91f5e89f2cabc6d4e80f2d4be2b0e2856bf6ba2d4bca99c38709790025a4e72a64e97144b29372b337e774b6b2340697140cca1608821abe2dc2b57a4c334af2501c93a5d7aff85485649b8cadb00d31479c7844f2fdb35256f0c4fcc96e82e0", @typed={0x4, 0x1f}, @typed={0x8, 0x89, 0x0, 0x0, @uid=0xee00}]}, @generic="e6a6ca32e25a7982c8fe641d6a04d8b26ef5b522349e353d59d57757d4fd17a9728be61b06f8c9d636df05a860e6538d7e145d061d5487760704dbce13495ef903ca672acb6d466eb4622360c22cca8d82b4a920", @generic="2096b7ff46adc78e748d4448595a18a46d8b095fb7f819d27439dec60035750ddb890bfe99c1f5d2c6cf368e02b854f8e264a8cb5e07ccdd3dbfe58404c7610bf3b6e8627302501eb3ed1908c35b7ce18d98c272f8ab869e4116c8"]}, 0x2a0}], 0x2, 0x0, 0x0, 0x40}, 0x40) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x3, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(r0, &(0x7f0000000040)='./file1\x00', 0x111142, 0x8) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file1\x00', &(0x7f0000000540), 0x200800, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_u}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@dfltuid}, {@uname={'uname', 0x3d, 'vfat\x00'}}, {@access_any}, {@loose}, {@version_L}, {@noextend}], [{@hash}, {@dont_hash}, {@permit_directio}, {@dont_measure}, {@obj_type={'obj_type', 0x3d, 'c]*{$,]'}}, {@hash}]}}) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000001480)) sendfile(r3, r1, 0x0, 0xfffffdec) 20:26:13 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(r0, &(0x7f0000000040)='./file1\x00', 0x400, 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) 20:26:13 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_virtio(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x800800, &(0x7f0000000240)={'trans=virtio,', {[], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@fsname}, {@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@appraise}, {@smackfsfloor={'smackfsfloor', 0x3d, '@i$.(\x9c'}}]}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000002, 0x13, r1, 0x10000000) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r3}}, 0x3) sendfile(r1, r0, 0x0, 0xfffffdef) 20:26:13 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:26:13 executing program 0: syz_read_part_table(0x8cffffff00000000, 0x0, 0x0) 20:26:13 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 95) 20:26:13 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [""]}, 0x1c}}, 0x2000c004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="02b2dccad213e1e6cf54b7a797f8f22a47f25b7658fb110b2e76f95b0f318b8fa745e6ffba4414d29a42bfab524bc5bffb17decc4540a6f00b9772f5f9789a9525790df8d989b23530d0a1398f2ad734c7ff47961be476ffeec81efa3d3aa64b8ea329261dfc2e1047a68670f0e5950d6a5414956bddd09e101b5b66e5742fe843413e065e3b86a242b37bc58c68153a45015f6f1ea67762c302e461e0c84bbb7f8d464f5a72d9fad56dac0c5028a4012a93dbc7da640786e3c9898cdd8fe091b166bfcd66e6257abc923ceaf90e994deded3fe8a59c2105f5caf366d32170ef51299dbf441bc3cddda352a2e07375fb44e75fed8082f3e960015d9bcddb0c834feda68d113a9a9fc0d1c30153685caf43b176219b666d74e67b6192cfd8a561c6c4aadcc80ed8c469bc41b028f1db515d699e45ad3379f9b1edb8de4bb2f8615d6716297baac7e45073fcecf31e51ec78c40edd78f245bced04414f849fb961fbbe79ff2ed7c48ec1b5331f9755d7094986fc8da198ce4a12f9ddfb43e565bc4fed618da9a693d03c3e7ec4b3014dfc022103e277c1b12efb03ef8b197f3a931f6cbe238cf8a4e7639b409b4586f66da41b94eed69d52ba9fde5aa1ee774d4e626932dc3511b10ae3bc3e8688a7a83b0467dfbf9295174739", 0x1d9}], 0x1) [ 3014.799902] loop1: detected capacity change from 0 to 40 [ 3014.825903] loop5: detected capacity change from 0 to 40 20:26:13 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) [ 3014.842736] loop2: detected capacity change from 0 to 40 [ 3014.848917] loop7: detected capacity change from 0 to 40 [ 3014.857201] 9pnet_fd: Insufficient options for proto=fd [ 3014.867808] 9pnet_fd: Insufficient options for proto=fd [ 3014.880542] loop3: detected capacity change from 0 to 40 [ 3014.883888] loop0: detected capacity change from 0 to 264192 [ 3014.892790] loop4: detected capacity change from 0 to 40 20:26:13 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) [ 3014.924974] loop1: detected capacity change from 0 to 40 20:26:13 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0x60002000}) [ 3014.947062] loop0: detected capacity change from 0 to 264192 [ 3014.974093] loop7: detected capacity change from 0 to 40 [ 3014.976692] loop5: detected capacity change from 0 to 40 [ 3014.993817] syz-executor.3: attempt to access beyond end of device [ 3014.993817] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3014.995703] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3015.008122] syz-executor.4: attempt to access beyond end of device [ 3015.008122] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3015.008147] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3015.008458] syz-executor.2: attempt to access beyond end of device [ 3015.008458] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 20:26:13 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) [ 3015.008478] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 3015.027606] syz-executor.4: attempt to access beyond end of device [ 3015.027606] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3015.027650] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3015.027856] syz-executor.5: attempt to access beyond end of device [ 3015.027856] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3015.027880] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 3015.048556] syz-executor.3: attempt to access beyond end of device [ 3015.048556] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3015.048598] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3015.103575] loop7: detected capacity change from 0 to 40 20:26:25 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) [ 3027.673121] loop1: detected capacity change from 0 to 40 20:26:25 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000001480)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000001480)) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000480)="601ca02b00080101000440002000f801cc7d04455c6bd3349f1f62787292599934e4fdcb090b35e76241988598f0f6423f5ba69282dddc89d3cc0a86960eebb94f6bec1ccc518abe6a6e78980f6feb59d53619a76f12f6c26c0c1690ba15be8d35c61da6a4deca068cc63891226e2a0fabf1ee8f32a1475f262348973d4c95efa476b7fae293d866c1dee3d9ea8249b4d993c301f81c3587fce5507246bc2865ecb02dbfc04259376d3227d5385284f2e81ce039b012dd87f04ed9e6ac559c3b24d72362ea6cff9d71ed7dfbeb874742ed617126cfac9f2b9c534dd7", 0xdc}, {0x0, 0x0, 0x100}], 0x0, &(0x7f0000000240)=ANY=[@ANYRES64, @ANYRES16=r1, @ANYRES64=r2, @ANYRES16, @ANYRES32, @ANYRESHEX=0x0, @ANYBLOB="7ebc51bc81769c2f4a53eb604df4dccdd86e08d8609556a1535821618251c2938f69eae09b09b20c1140c0db6889d8406fbc794752fe9c39049a17e1bfeb11b9d2d32a3732c6399236fef977f68f1572a279b3", @ANYBLOB="a34fe786e8adfee420f494188b05f0bdb77310a748a46bffa2be3ffcf527405e7e9f3c58dbd9417dd8a134da76b13e2d0d6b2506ff309fdd39b1d8df723bf4c2b0b0501805582ee5e3dc693cc3558fec05c6fca74c2785c0d724c43c9637a319366dd336748771a077f135519ccdc26b9362bf417d18242b30b0b87a4265761789834c229724df8fae459c6233d85a309c049a42f75cdbb435500c2e701edba55f380d63e974bb949610d82d38ef970b14be44bac2e11592f12c35145d48d451"]) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) creat(&(0x7f0000000040)='./file0\x00', 0x40) sendfile(r4, r3, 0x0, 0xfffffdef) 20:26:25 executing program 0: syz_read_part_table(0xf6ffffff00000000, 0x0, 0x0) 20:26:25 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 96) [ 3027.685058] loop4: detected capacity change from 0 to 40 [ 3027.690797] loop7: detected capacity change from 0 to 40 20:26:25 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)=0x0) r3 = openat$incfs(r0, &(0x7f0000000180)='.pending_reads\x00', 0x0, 0x2) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xce, 0x81, 0xc0, 0x81, 0x0, 0x7, 0x40, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xc73, 0x2, @perf_config_ext={0x6, 0x697}, 0x14a20, 0x800, 0x3c74, 0x4, 0x6, 0x1000, 0x6, 0x0, 0x6, 0x0, 0x6}, r2, 0xe, r3, 0xa) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 20:26:25 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8201, 0x8a) openat(r1, &(0x7f0000000080)='.\x00', 0x200000, 0x120) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r0, 0x0, 0xfffffdef) 20:26:25 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [""]}, 0x1c}}, 0x2000c004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="02b2dccad213e1e6cf54b7a797f8f22a47f25b7658fb110b2e76f95b0f318b8fa745e6ffba4414d29a42bfab524bc5bffb17decc4540a6f00b9772f5f9789a9525790df8d989b23530d0a1398f2ad734c7ff47961be476ffeec81efa3d3aa64b8ea329261dfc2e1047a68670f0e5950d6a5414956bddd09e101b5b66e5742fe843413e065e3b86a242b37bc58c68153a45015f6f1ea67762c302e461e0c84bbb7f8d464f5a72d9fad56dac0c5028a4012a93dbc7da640786e3c9898cdd8fe091b166bfcd66e6257abc923ceaf90e994deded3fe8a59c2105f5caf366d32170ef51299dbf441bc3cddda352a2e07375fb44e75fed8082f3e960015d9bcddb0c834feda68d113a9a9fc0d1c30153685caf43b176219b666d74e67b6192cfd8a561c6c4aadcc80ed8c469bc41b028f1db515d699e45ad3379f9b1edb8de4bb2f8615d6716297baac7e45073fcecf31e51ec78c40edd78f245bced04414f849fb961fbbe79ff2ed7c48ec1b5331f9755d7094986fc8da198ce4a12f9ddfb43e565bc4fed618da9a693d03c3e7ec4b3014dfc022103e277c1b12efb03ef8b197f3a931f6cbe238cf8a4e7639b409b4586f66da41b94eed69d52ba9fde5aa1ee774d4e626932dc3511b10ae3bc3e8688a7a83b0467dfbf9295174739", 0x1d9}], 0x1) 20:26:25 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) [ 3027.699159] loop5: detected capacity change from 0 to 1 [ 3027.711119] loop2: detected capacity change from 0 to 40 [ 3027.719012] loop3: detected capacity change from 0 to 40 [ 3027.726221] FAT-fs (loop5): Unrecognized mount option "ÿÿÿÿÿÿÿÿ" or missing value [ 3027.735151] loop0: detected capacity change from 0 to 264192 20:26:26 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) [ 3027.765990] syz-executor.3: attempt to access beyond end of device [ 3027.765990] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3027.767043] Buffer I/O error on dev loop3, logical block 10, lost async page write 20:26:26 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) [ 3027.780156] loop0: detected capacity change from 0 to 264192 [ 3027.810486] syz-executor.4: attempt to access beyond end of device [ 3027.810486] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3027.812366] Buffer I/O error on dev loop4, logical block 10, lost async page write 20:26:26 executing program 0: syz_read_part_table(0xfcfdffff00000000, 0x0, 0x0) [ 3027.883969] loop1: detected capacity change from 0 to 40 20:26:26 executing program 4: chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 20:26:26 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 97) [ 3027.912716] loop7: detected capacity change from 0 to 40 20:26:26 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="0000390034f8188c174b1af255dde13d404c2dc55222189cab5cdf3e85bed2c3cd487aa957e5a3b5301977f41d7a20f0472f5e4e407581d547aedb4b55753efd16fea0fd6832f76ed75e1426701b0ecd2d6a1a53da4fbe2ed20c3574a071f710cd1e38cc77ce1faa635182a8d45fa685c5971918baf16c5f5b8af65a69a47f80f9459c040008b94e0ba48910ab0d95767c5ccb2adf863c97144870623ce9046c52d94b264867fc020000000000000071341be16434139d5dacc187bc4f87d57cbc5c51c41eef80261ce65a2098b76750d56b11794581b20998f1fc1d9e87abf3355a8e7c0559101974468c79d19c612309cd3a71264fba0bb1f58538e8cbab3d848f42ecd8441a92ab85dc1214af9f82c93a7bbc9e3f363b74bf4177bc2a86ea158104fa01939b9b211f0b10a54271899ecca64355bb037638339e5c28b36d0a9db21b0fdf8225d9413f54351e27e53e2c8a7a36dafb98408868e1af2a43827d6f7974636212f552090000"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [""]}, 0x1c}}, 0x2000c004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="02b2dccad213e1e6cf54b7a797f8f22a47f25b7658fb110b2e76f95b0f318b8fa745e6ffba4414d29a42bfab524bc5bffb17decc4540a6f00b9772f5f9789a9525790df8d989b23530d0a1398f2ad734c7ff47961be476ffeec81efa3d3aa64b8ea329261dfc2e1047a68670f0e5950d6a5414956bddd09e101b5b66e5742fe843413e065e3b86a242b37bc58c68153a45015f6f1ea67762c302e461e0c84bbb7f8d464f5a72d9fad56dac0c5028a4012a93dbc7da640786e3c9898cdd8fe091b166bfcd66e6257abc923ceaf90e994deded3fe8a59c2105f5caf366d32170ef51299dbf441bc3cddda352a2e07375fb44e75fed8082f3e960015d9bcddb0c834feda68d113a9a9fc0d1c30153685caf43b176219b666d74e67b6192cfd8a561c6c4aadcc80ed8c469bc41b028f1db515d699e45ad3379f9b1edb8de4bb2f8615d6716297baac7e45073fcecf31e51ec78c40edd78f245bced04414f849fb961fbbe79ff2ed7c48ec1b5331f9755d7094986fc8da198ce4a12f9ddfb43e565bc4fed618da9a693d03c3e7ec4b3014dfc022103e277c1b12efb03ef8b197f3a931f6cbe238cf8a4e7639b409b4586f66da41b94eed69d52ba9fde5aa1ee774d4e626932dc3511b10ae3bc3e8688a7a83b0467dfbf9295174739", 0x1d9}], 0x1) 20:26:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0/file0\x00') chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000080)={{0x1d, @loopback, 0x4e22, 0x0, 'none\x00', 0x8, 0x7, 0x19}, {@rand_addr=0x64010102, 0x4e20, 0x4, 0x2, 0x7, 0x2}}, 0x44) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3027.969600] loop0: detected capacity change from 0 to 264192 [ 3027.986107] loop2: detected capacity change from 0 to 40 [ 3027.990903] loop0: detected capacity change from 0 to 264192 20:26:26 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) [ 3028.019728] loop3: detected capacity change from 0 to 40 20:26:26 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) [ 3028.085091] loop1: detected capacity change from 0 to 40 [ 3028.092437] loop7: detected capacity change from 0 to 40 [ 3028.162697] syz-executor.2: attempt to access beyond end of device [ 3028.162697] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3028.163746] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 3028.185970] syz-executor.3: attempt to access beyond end of device [ 3028.185970] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3028.187767] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3028.527354] loop5: detected capacity change from 0 to 1 [ 3028.530123] FAT-fs (loop5): Unrecognized mount option "ÿÿÿÿÿÿÿÿ" or missing value [ 3043.635792] loop3: detected capacity change from 0 to 40 [ 3043.658144] syz-executor.3: attempt to access beyond end of device [ 3043.658144] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3043.659795] Buffer I/O error on dev loop3, logical block 10, lost async page write 20:26:41 executing program 0: syz_read_part_table(0xfdfdffff00000000, 0x0, 0x0) 20:26:41 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:26:41 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x109842, 0x104) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) 20:26:41 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x1c}}, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="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", 0x1d9}], 0x1) 20:26:41 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:26:41 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 98) 20:26:41 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x2800800, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 20:26:41 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) 20:26:42 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat2(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x109200, 0x12, 0xa}, 0x18) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3043.728776] loop7: detected capacity change from 0 to 40 [ 3043.734409] loop2: detected capacity change from 0 to 40 [ 3043.740805] FAT-fs (loop4): bogus number of reserved sectors [ 3043.741800] FAT-fs (loop4): Can't find a valid FAT filesystem [ 3043.748219] loop5: detected capacity change from 0 to 40 [ 3043.749823] loop0: detected capacity change from 0 to 264192 [ 3043.751859] loop1: detected capacity change from 0 to 40 [ 3043.787095] loop0: detected capacity change from 0 to 264192 [ 3043.865513] FAT-fs (loop3): bogus number of reserved sectors [ 3043.866619] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3043.891952] syz-executor.5: attempt to access beyond end of device [ 3043.891952] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3043.893764] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 3043.907979] syz-executor.2: attempt to access beyond end of device [ 3043.907979] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3043.909938] Buffer I/O error on dev loop2, logical block 10, lost async page write 20:26:42 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) [ 3043.955861] syz-executor.5: attempt to access beyond end of device [ 3043.955861] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3043.958077] Buffer I/O error on dev loop5, logical block 10, lost async page write 20:26:42 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 99) 20:26:42 executing program 0: syz_read_part_table(0xfeffffff00000000, 0x0, 0x0) [ 3044.032960] loop2: detected capacity change from 0 to 40 20:26:42 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x1c}}, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="02b2dccad213e1e6cf54b7a797f8f22a47f25b7658fb110b2e76f95b0f318b8fa745e6ffba4414d29a42bfab524bc5bffb17decc4540a6f00b9772f5f9789a9525790df8d989b23530d0a1398f2ad734c7ff47961be476ffeec81efa3d3aa64b8ea329261dfc2e1047a68670f0e5950d6a5414956bddd09e101b5b66e5742fe843413e065e3b86a242b37bc58c68153a45015f6f1ea67762c302e461e0c84bbb7f8d464f5a72d9fad56dac0c5028a4012a93dbc7da640786e3c9898cdd8fe091b166bfcd66e6257abc923ceaf90e994deded3fe8a59c2105f5caf366d32170ef51299dbf441bc3cddda352a2e07375fb44e75fed8082f3e960015d9bcddb0c834feda68d113a9a9fc0d1c30153685caf43b176219b666d74e67b6192cfd8a561c6c4aadcc80ed8c469bc41b028f1db515d699e45ad3379f9b1edb8de4bb2f8615d6716297baac7e45073fcecf31e51ec78c40edd78f245bced04414f849fb961fbbe79ff2ed7c48ec1b5331f9755d7094986fc8da198ce4a12f9ddfb43e565bc4fed618da9a693d03c3e7ec4b3014dfc022103e277c1b12efb03ef8b197f3a931f6cbe238cf8a4e7639b409b4586f66da41b94eed69d52ba9fde5aa1ee774d4e626932dc3511b10ae3bc3e8688a7a83b0467dfbf9295174739", 0x1d9}], 0x1) 20:26:42 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) [ 3044.169694] loop7: detected capacity change from 0 to 40 [ 3044.224395] loop0: detected capacity change from 0 to 264192 20:26:42 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = accept(r1, &(0x7f0000000180)=@sco={0x1f, @fixed}, &(0x7f0000000240)=0x80) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) lsetxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x2) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3044.293736] loop0: detected capacity change from 0 to 264192 [ 3044.314177] loop1: detected capacity change from 0 to 40 [ 3044.349882] loop5: detected capacity change from 0 to 40 [ 3044.372101] syz-executor.2: attempt to access beyond end of device [ 3044.372101] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3044.374217] Buffer I/O error on dev loop2, logical block 10, lost async page write 20:26:42 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:26:42 executing program 0: syz_read_part_table(0xfeffffffffffffff, 0x0, 0x0) [ 3044.584746] loop7: detected capacity change from 0 to 40 [ 3044.606138] FAT-fs (loop4): bogus number of reserved sectors [ 3044.607065] FAT-fs (loop4): Can't find a valid FAT filesystem [ 3044.632800] loop0: detected capacity change from 0 to 264192 [ 3044.670157] loop0: detected capacity change from 0 to 264192 [ 3044.720737] FAT-fs (loop3): Unrecognized mount option "./file0" or missing value 20:26:57 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:26:57 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000001, 0x2010, r0, 0x7f941000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x180) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000001480)) openat(r3, &(0x7f00000000c0)='./file0\x00', 0x10000, 0x8) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(r1, &(0x7f0000000040)='./file0\x00', 0x90000, 0x44) sendfile(r2, r1, 0x0, 0xfffffdef) 20:26:57 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000001480)) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000040)=0x6) sendfile(r1, r0, 0x0, 0xfffffdef) 20:26:57 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) setxattr$incfs_size(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0)=0x2, 0x8, 0x1) 20:26:57 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x1c}}, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="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", 0x1d9}], 0x1) [ 3058.828148] loop5: detected capacity change from 0 to 40 [ 3058.837972] loop2: detected capacity change from 0 to 40 [ 3058.842072] loop3: detected capacity change from 0 to 40 20:26:57 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 100) 20:26:57 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:26:57 executing program 0: syz_read_part_table(0xffffffff00000000, 0x0, 0x0) [ 3058.850590] loop4: detected capacity change from 0 to 40 [ 3058.854045] loop0: detected capacity change from 0 to 264192 [ 3058.869114] loop0: detected capacity change from 0 to 264192 [ 3058.892400] syz-executor.4: attempt to access beyond end of device [ 3058.892400] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3058.897741] loop7: detected capacity change from 0 to 40 [ 3058.907863] syz-executor.4: attempt to access beyond end of device [ 3058.907863] loop4: rw=2049, sector=48, nr_sectors = 4 limit=40 [ 3058.911450] loop1: detected capacity change from 0 to 40 [ 3058.914095] syz-executor.5: attempt to access beyond end of device [ 3058.914095] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3058.915707] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 3058.917584] syz-executor.4: attempt to access beyond end of device [ 3058.917584] loop4: rw=2049, sector=48, nr_sectors = 4 limit=40 20:26:57 executing program 0: syz_read_part_table(0xfffffffffffffffe, 0x0, 0x0) [ 3058.978451] syz-executor.3: attempt to access beyond end of device [ 3058.978451] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3058.980385] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3058.987770] syz-executor.2: attempt to access beyond end of device [ 3058.987770] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3058.987814] Buffer I/O error on dev loop2, logical block 10, lost async page write 20:26:57 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x1010c0, 0x109) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x12, r1, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f00000000c0)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd=r1, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x91b3) sendfile(r3, r2, 0x0, 0xfffffdef) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/timer\x00', 0x0, 0x0) r6 = openat(r5, &(0x7f0000000100)='./file1\x00', 0x121042, 0x4c) ioctl$FS_IOC_GETFLAGS(r6, 0x80086601, &(0x7f0000001480)) write$binfmt_aout(r6, &(0x7f0000000240)={{0x10b, 0x3f, 0x81, 0x171, 0xcb, 0x3ff, 0xda, 0x1}, "a199868f7788c7c674a5d881bd4155dc0d45151f67c18adbb1fdf2b6ddbb857fa42b9b5b7d775caa5e3228ab25bffe99c77289", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x553) [ 3059.003921] syz-executor.3: attempt to access beyond end of device [ 3059.003921] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3059.003997] Buffer I/O error on dev loop3, logical block 10, lost async page write 20:26:57 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:26:57 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(r0, &(0x7f0000000040)='./file1\x00', 0x40200, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mq_notify(0xffffffffffffffff, 0xfffffffffffffffc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x1f, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, 0x108) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000001480)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f00000000c0)=ANY=[@ANYBLOB="014e3e54a1b2fec49756006c179f39030000000080000034070000000000005e0000", @ANYRES32=r1, @ANYBLOB="40000000000000002e2cb52f66696c653100"]) sendfile(r2, r1, 0x0, 0xfffffdef) [ 3059.069585] loop0: detected capacity change from 0 to 264192 [ 3059.075966] loop4: detected capacity change from 0 to 40 [ 3059.082454] loop5: detected capacity change from 0 to 40 [ 3059.104013] loop0: detected capacity change from 0 to 264192 20:26:57 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) [ 3059.125852] loop7: detected capacity change from 0 to 40 [ 3059.129603] loop1: detected capacity change from 0 to 40 20:26:57 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r3, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", ""]}, 0x1c}}, 0x2000c004) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="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", 0x1d9}], 0x1) [ 3059.148921] syz-executor.4: attempt to access beyond end of device [ 3059.148921] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3059.149896] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3059.175659] syz-executor.5: attempt to access beyond end of device [ 3059.175659] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3059.179677] Buffer I/O error on dev loop5, logical block 10, lost async page write 20:26:57 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 20:26:57 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) chroot(&(0x7f0000000080)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) r1 = openat(r0, &(0x7f0000000100)='./file0\x00', 0x1cb442, 0x4) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3059.239605] syz-executor.5: attempt to access beyond end of device [ 3059.239605] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3059.241534] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 3059.268002] loop2: detected capacity change from 0 to 40 [ 3059.273517] loop3: detected capacity change from 0 to 40 [ 3059.374514] Buffer I/O error on dev loop2, logical block 10, lost async page write 20:27:13 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_proto_private(r0, 0x89e0, &(0x7f0000000000)) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 20:27:13 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file1\x00'}) openat(r0, &(0x7f0000000080)='./file1\x00', 0x20000, 0xb2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xfffffdef) 20:27:13 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:27:13 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) setsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f00000002c0)=0x5, 0x4) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r2, &(0x7f00000014c0)=[{&(0x7f0000000300)="3ec31242ee76ef11d5de7589dde9ac43d5102d20873f02f0c42915c2c5371896de6c836126641390438d4245d727c52884f694512bb3b684d775699f5545ac64ca6de897a090923db2df3d2a9236dbe4db8bfd18e1b3dea6deca13d7db431b5132840980546b1179a86c005dce12677273fd9eaaace84ca11814aa2674a8a16f90ba0c01e8ce96ce404b4a2550", 0x8d}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="bdd5762577abd8d489f90db9d6ea36baad63cefd12329db36f2ba8469fb1f55718c7d95f06e8c75e2331a3b84f720969568e92d9725e2ef8eca87b716bef410b3ac0a0fd177223e6ca93e2ed18aa63b3f001ea7e0a1df8f6ae9df50ded4d90d707377c6703516dc649990595b169d7957993eef1251829ccc1d8b4c65494a13b9d45313ba41cdf79a04ddd9d", 0x8c}], 0x3, 0x2, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000001480)) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000001480)) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x7c, 0x0, 0x1, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0x10000, 0x7fff, 0x8, 0x8]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @broadcast}}}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x3f}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x100}}, './file0\x00'}) sendfile(0xffffffffffffffff, r5, 0x0, 0xfffffdef) 20:27:13 executing program 0: syz_read_part_table(0xffffffffffffffff, 0x0, 0x0) [ 3075.188686] loop2: detected capacity change from 0 to 40 [ 3075.196017] loop0: detected capacity change from 0 to 264192 [ 3075.196915] loop3: detected capacity change from 0 to 40 20:27:13 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r3, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", ""]}, 0x1c}}, 0x2000c004) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="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", 0x1d9}], 0x1) 20:27:13 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x4000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) 20:27:13 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) [ 3075.209443] loop5: detected capacity change from 0 to 40 [ 3075.223915] loop1: detected capacity change from 0 to 40 [ 3075.234890] loop0: detected capacity change from 0 to 264192 [ 3075.268613] bio_check_eod: 1 callbacks suppressed [ 3075.268625] syz-executor.5: attempt to access beyond end of device [ 3075.268625] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3075.269994] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 3075.272836] loop4: detected capacity change from 0 to 40 [ 3075.273952] loop7: detected capacity change from 0 to 40 20:27:13 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:27:13 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27fd}], 0x0, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRESHEX, @ANYRESOCT=0x0]) openat$incfs(0xffffffffffffffff, &(0x7f00000027c0)='.pending_reads\x00', 0x400, 0x88) chdir(&(0x7f0000000080)='./file2\x00') chdir(&(0x7f0000000140)='./file0\x00') getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002600)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@empty}}, &(0x7f0000002700)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002740)={0x0, 0x0, 0x0}, &(0x7f0000002780)=0xc) lchown(&(0x7f00000025c0)='./file0/file0\x00', r0, r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10100, 0x8a) r3 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r3, 0xc058671e, &(0x7f0000002540)={{'\x00', 0x3}, {0x200}, 0x114, 0x0, 0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000180)='./file2\x00', &(0x7f0000000240)="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", 0x1e4, 0x0, &(0x7f0000000440)={0x2, 0x10ee, {0x1, 0xc, 0x1000, "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", 0xe1, "859d09804671e34d41c1e00aa8e74381af2a42feeaa98f8a29c227046a72f3717b0d47f687307d8371897209ba83d0aeb78315c0b2352ba33ae71fda4fbf7a6858e3b73ddd0e0f6f7abfe6cf5ae13293b84fcca59fb4f7c732bc771119e257cddd22d7db29328e72101353f63c7638b33f7a58744ee070867706f31673f62ffbff634dbea3638e1b500bd9789bb6caa2ba881508f16f6b9783905091d9c3ba5cc498fa421a2c6fbe671da19d99424215a343e6d0bab12074e200246831d36d9a198ff95066b3638090f9e847776ecf6f295ab72d084a410d3b7b0d3f93a97e1cb6"}, 0x1000, "41ec55b6c3a807f9a12d8ea18d44207a543ebda9065f05f03c4daf50b9d57a55d8a7e0ca8ab775da93a68794ba5504a3fa72c94754a7d4be62063d089478246348b94f5b3e31f52f88263764b00c82aa848df57588392e909bb7f0a1f2ea9ee8a9d68983b7d47c31b7b685290b0a50fc46fc5b5d8b928401f19d7c4d70a348eb6653887807a5e8b93f928d6d6f36c6e8b707e65fd8a4f0a8ac4b9e98c6aff9a949a50e3f70b91bf34d3aaaa8ee50a956d2164a068593109c10fc3bab2e39d88d56386ac99d24185fa9783a3b4baf137e22f809bb5eda4a320c8104de5fa454cec8b90fc2bade6d805ea7b7dd05463cfa4c3033242ce3a1842a5a0443dee0bbc66df21d479385ca65eab7bf96f54b298d4f6fc55faad88a51144ce2aec9e3ac42241e1e506468f6064cf7b8379a5f7cc03993ab0123ebbdab11b776006de69f9d1d4ef7ada3bae28ef9bff0e168c4fb6610855e8c6dcaef8f69ae59cbfbe77691ce60936373b6143640f056d65221c75a3b09f70dfe6d8f3225b62b67afa813d142b7e0a89e4c728fa9d9e0fdfc9ae647d510e212a1cacdec24b286fee97c7ebd70e8846ad06217fa632f1c4d4f49c5ba5b7fd0b27a58d9f6430cb51201d107e633e125b981457ae0f7f22ecf637e057e2c0a3032fc599b2a788ccf07196d87efa855877bcb712e406e82bab71dd9fcc91da82a963ac1d183f454d6b2dc6994fb9dafbf4e7438bd1a1fe124a7fe67f5c3b8dd5eb5cb24d55c3eae721c5a8d466ba87bde83c6c77a27eb568ff8510cca7cfdd63e9232658c5e37206553512a59cd27edf72c921cd404237f87e52ac89dcda6678f04e91fc72121a33e0d9836213c53653b213575c490bdf850e7101c62cbcf8b0999c379a65084ef4010abcc77a0011bd481c5734822d9ad4ae6bcb34c0e430cff344f730ad596e6e2757521fe2e01256c214497f956135c16360b6b26024a655d0da4fef3b2b254d00e37ee316e90e5028886f68991adc836c01c52ce4ee38e3eb04b05466b7d733f9e72ac696cd1b58338d7e413dabd05fa3f3edf553ef68eb55f20bc1ada8b0d1a80671782466e2ce89a5055b41ebe9efdc50286bf6711e8b645e285d5ce165b8c53e0d7f44cfc23a7fbd9e4837fd579e9bdcb6e0b6964b1363c5e10fa86a8ef34ee9da6db92360c98f9709fe5ea06effd6a998e24a5fe5a11241033a1fe5f27c365c6e68f0bbfc3af238ab484b2d9e0393358c1c370ac18c4e5f9bfc7d8dd9fa619cbbc5e87eaeddb6e02b97ff2483c26db6f288db134ad1df76d821f59da4faeb8cd5b51695d3bbaa2ef3102049487c74a3a71870eb35fb1daec332763046d28121d81fdf462dec9d1c3b83533a3082a2330ff486c7888f301f61529af47d830e56830231105c337ddfdbe95f0455e713c3958f43f7db4c72402a4d1378c4304e3bbbc9dc5267bf985c237b77d0aa85b6ac92cd1dec53fde62f2294bf72b73b0fe970a6cf34836a1378a5d65ccc0452af0d1e65521572c55a354740efc0ba481022a535db3bfeb2d02ae8c50690962a752c79a6ff93b60a3d3ba4222d93fdda2dad32d89c255bea9865ccd4ec0df83cfc1ccbca948e81e797a476010c3604cfd94c19f2d6beb8a9c8bad74e6b32f6c98f82695395c5d28800ed38e18b713ad8f7806c8f6b49e2cd9af14418742d86135d8816a29f7d0ed40a3c2b65323a7d3945f815baeda74ef81e650b0c4e45c5454382e804dcc806c788d4a6908b922e418d6f0a7a04a884c0ab8743e38025d92bfec99b53e671d04f8865008942cd627d3e75d3787f664ead50cbcfcfae493a3790f4ee2bfe82b84889d84b5ea69d1dbb69359fb9a62c3c8c764587cbaf8c06133cd506659508286e7ed3dd1c9e33fffe49d9d3b5327d6da652d87674fcb0206e4bfe280915442744b4dbfc866dc7624e20f694ae0de2523fbf3286f60e1783ca3a56093949aaa0c038b0c319c651c6cd7af99c108a66b8f19525fcbdfe53c4a09c903cc08921d22c7fa9ba8fa8fa3645a369f01277069f622f1aeb9791fa6101728062b6df40fb050e9e3b640e66a9cc7fcbe1076e9bb8010ca5747692c04e107ed2144cb5af339d57ba61789a184026d1ff58d0837ba5cda7a46c95c50f649c088fe7d59d4f8a544783a939812520b4b8c48eb1e9ba2d7a7e7b8520c29b39e720d58e5463a5616c5c23fe360ff51bbb697914cd721c6f5554b55b9e88d72fbfee793a26713ebb7c9be7a812c01d1f0469cfe74775e14ba64e4acd3c10e41b13c1ef6927bd1db9efe68d1599fdc0e07e9a07c7f46b8cf3bfa0d8576467184d28fac3b3b28a61e0385ee1d74678b54293a3ab0cd87ddd14c438de872fe5caa475da996eee25fd3c0336ec76dc8eb8abe4d341c6180c87d4a257686eb1103f24ab622d00efb62d10cc9dd33d193b8fc48ebeb568fedc3b3b837adb73177206a395d94b868585e0734fa582b680bc9780175c88c4fb0b7e48fc483ef8ccab80d1dfb94b42eea65603b6aad095f806ffe85c1c650f432f700d25559bac1d6717488e4ccf771e3ef88e37a6a9d0c76b3fc48fef36807bfba29d7fd157303c8bc53a6f3e517df18578e3e82a0b55d730a728bd2ee8f33ecf060f66f3dfcb383899491dde0513ddb94630c40b4ec4000973515989a557d88dfbbb1aabb64cc3d3280881638823c68713d58d97ec270df174c3b65e8a7d69eec6fe668dd6ad76d28ec87f78aa0091d0963b83a815fb1553d5c8fe4fae4e916b83938eebad61739caf16e7e2fb5aeb5c33cc898e43eedc78828d559206cb1ed2085cc00f24d93b20bf5a0ee4b7eeb2998cfb64443df5396938c41e9f755c00ec4ee208759240b4d471482ca799595e1ced9ac895f2be91c6d1d68539a96dc9f535c832c1966827f278015aec7f1bee942a751bc380ffaa7400d3c84a2dd6e5a9e6f99add2b107387b9403351f383461b2f3ff52a32dfca54dbfc1c5e9732016d3b468b9c96912ae69543213d06ce807e496a46ea9d194c6d595df1e25cb70d87e6c0bf3f907f969b436a722f17f9cb7def68073e99fc5cc8fee371fa8845a5d2e6692a32e38abfe52134a22f88a0fe989a438a4e35f97d93f193324f5ff186732c3c89de65520c097ee98adda8c5fbbf15638a0bf1475f448d1db0efaaffb6685fe37d61e5a855e4c5ab781955c95570b240bba1d66b41f063430da9e1906c8fbe413442cb5ddb041dae9ea7fe63820e185218e4fc7ecf7d80561b7e7da155d5e18fe22104b3ced0eb8d38b23a9913f706026605feafa3b7c706b010556de819cfadffe736a861b11796bd03c0b36cd62d36af1d83abcd1b17d0accc26ee8eb4641b7824130f7b5b36aba557a185d86770e1f16c228ea81acef15f863c59fdf08b6ebfd296ba7053b5d79ab1697ae5f6161e77591057eac66fc349a8af83f56e1b5f396e6ed67811f35e21c37879db2ec6de932598cacb670dde539b12b77ff49801376a097e2216dd0f6147532daacca3e047d8a2755b8f5ac87330357153f76a301f4058c51a874d0e8139136176da4ddd8b5998e3a9daa87c09f296bfa82c6f18de825f5d4dc0c8e2bbb7ba7370f2cb31e95a3de0b1a0cd0bee4cf69fcf15a1a73dc646600b7e94784916c9590d99a27b1e361fd13c516e311f4f8d496b1c53d6018aef39c05301c5eb780f0807651533e22ddc70119a853626226fc1afabb835bc416e48804e5344883615850b6c5f2cb17ad2b4c65d21bbd55eb57b7b1e2fa3b387d44a81102c29dddea22aee1875972240d2413e81377e11c8984f24dcffb0fb927983efa416a3254d2bf59f14ae00896c3e392b440e0fbcb90579e70665426b29c6b3b150aa2f0b6a699335b95eeeebd48355db8b64dee1bdfe60b5918d631fe85839109ee9dcf78b29f0ff335f717ea93ca58e196abef9197eb9446d4368106ee448c8cb0f5a9b82a39558426ff957048bdcf13f540b221ba930e69d3f45105eac49ea309a57e99712f24ee4793ba33f0da5a4889c4567e4168fc15d8d1fecf3de65c5f1fcd64a7508d2ca2d6d0f77e7f6212a23a60f7fcd186b87b5b64976bd8ba7842f4923de2485e1dfc7fdd12aa8c03db600a47ec2f5d77b5afcfc315db62ea195a1da6a7e1fe7d962711085b9a22777f24826ec4a234c9a44bdc6757e68e933f25627e471d27bf51542139ede8f4e36af0774b36f4c3bbaaa03301634ac6ba98451efb3676e3eedd157f856be8db86ede804209b547b45793b1281ec1729ef3b99162ff804b28e456dbbff4bc3040330f70623375a71f1f5f0a9298dfed8fa4c781778c82618359d80b3bd69da939afafc69962f5be4a1399f043a7536082bde3ce3eb5428539440d9a7d871db2d3f7c944f91d881f0866f9a924887bfbf4282cf1971d8e7b559d5a0f3b087975d788306e6df6d8e124a10f39463b91d73533f1e31661b73a30896e42f7af93b4ae3d58413b3760c4b444f7716f3ba77118cbac4a78ed859c4ee5050d680a776d975af2f3d2f9a9fb6952f5b647221098dbe7cb040e0264493b540f69e1b8934ae90ade778c4e06d1a41ba0cd77cfe03cc7ce84f25bfce974c13726f93ff19107612206b61dc5022cd9a9fc00fbabee82d8398efaaa2fe85772a27019485a5f93c3cd84e10f84b8288a4dc1468cab9725c43fd716138770a19cbe340d1b2bf50e16aaf8c591344597db6a504d5da6f0646ceb0049f5a4cd5f518fccf8df3f7bd6c66e3948ad207340e5eee59afd9d7f65fbe496b311e098b21007aa492a9331a891824197b08036fd34a9fa9d674b676dbe90534fc8f9897c767cf36f229d401db4266345fe387d507b2726ad8807fe4ffe986df2a924ce73c6f33970ad026aa516cd54388fe0d1ac1c0032822d54fe45c35d4cffda2d6eb2de237052c5cf0a06ba061b71037dcf7cb4b319b5b368661ef26d2a179b5a728cc373d3aeae9268a06a7ddf29611ee2c0f02c24233a8db7bfb8f6d3d1109be4f9f64c2b0c96a55e05fada71a5e6f45324f1b760368ec6c348d7b613acc58167241d9f9fd4e55b2ad56c63375bc982d3ac6c36b174134fc860b7ab0ce888f8927475bcc258940c34a8c33b6b4253bafc81b6e530f507a0b20ada7fffac382d7bac253cba959fb9ddbfa8fb64f8f69787b7d16f023cd1fa70c15d5913b92432e1ca571cb5367404f4a11d5e66fcb2bea7c380007d3706860dc2cb97f4a20b30bda6a478c1a424a5cac237c7dd67002143d6dab0ac5e0918fe6edd33beeb560e5c3739760f6d8aa6cad5de03cbaae6a30e9363dd5cb68e67a63f3abbf921d2caa8000612f60155471d145c4abe655f0c2f26d1bae532da4603817c16b85816f6bb31a605399c2da1eb4f1abbfaa6daca874e4cec02723ea74e29fdc5de8fa84b3d8e78f11151ef2201bc43b63d9ffadc630b4fce6d0794d597f2a3e1658348b30794d3933fe165b4572992be612abd9b256c2e61cdbe04729f0ce2523615623c126f34270e895f673475c85f60ff20f05605f9e683474136df91ef8001887067492466056c2d68d708977c462ea4ed69cacd24a75a12ed6469518c1da86c91701df9535cf94c66826cc42104d091c28e7193959a13bf41940bb6b6ce8aef57a8e353de84f9d6e14ab19fe11edb7f7b8d0b90d1341376b8f2048976214394a4701f8510574c8f53ce755a65adf1e76a402b13272cb08e1953971bacca3d579a1d8fe62a0b3b824534fb2a4ed04f4838e892c731e89756e12bf7beac57abc4d4497d5561cd3ec84138adf8301936e1fd77b7f23192a6c4b"}, 0x20fa}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r4, r2, 0x0, 0xfffffdef) 20:27:13 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') open$dir(&(0x7f0000000040)='./file0\x00', 0x4000, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3075.377516] loop1: detected capacity change from 0 to 40 [ 3075.381097] syz-executor.4: attempt to access beyond end of device [ 3075.381097] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3075.383015] Buffer I/O error on dev loop4, logical block 10, lost async page write 20:27:13 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:27:13 executing program 0: syz_read_part_table(0x0, 0x2, 0x0) [ 3075.408180] loop3: detected capacity change from 0 to 39 20:27:13 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x2, 0x5, &(0x7f0000000580)=[{&(0x7f0000000180)="960ddff35e7f8d859fbcbb2b6a23d4d5fad758ccd1a752206a6cc7caaa94e60af97ef2cd93587aea223204d29038eaad00a62a8f89c0765f3e19ccdbded819504bcc4edf3e2a10c55a43fe5d879e942a88fd85ffa9c6eadd877519d3ac351d049b20dcfe2e9a42b3e02c7f0367658015eb731b897d290be5", 0x78, 0x7}, {&(0x7f0000000300)="d6b3002ca4d989ab611268ba8067b06f21cc2afc96c52ea9cb8cf8757fb7c3b16faf22f8ae53f9718ff4fcc5bcf2098f9cdcda0efa413af8a8bcac8604ec29d802b378c0cc1dd4d6d371dc873c6743594b05aae4b304bb934fdb5ecc64b89860753f1faef9af55d3c06e71f4c33e597f0d547004f3cfd85bb6fcf6b41507611e49fee815ca921cda4eaedc1c37b8fc83e5e5e139952ab3aded0375b95e1c8b", 0x9f, 0x1f}, {&(0x7f00000003c0)="8c00d82165ec3596156377b5f212e547f96fdee64ca7d41648e92b2bb3771a60451180d9342afce771cd4bdd352595a78b528c8fc00c613d57a0c0e5881e2902c092a2b4da5d042e2692403f028de15e80c1aeb522ea9077392b7ed4668caaf43b9d14c21db1bf326dde34a73bba32814fb1e9f4c8a58100e900d68b5d9f0b4bca013ee3681838b41259da62860f9458f48dc7d3375590c63e0ca9ba7ed55f91702a4fe6a06b7592ab3f879d40b4fc259b8e5bdbf51a1d2396698194478acbc840dd21e1caceecfb049f834ad1", 0xcd, 0x100000000}, {&(0x7f00000000c0)="fb3aa33653b0c78a16d1f1e1c079eff58e0c0436710b3589e9ff21798ed6bf59758d15f77dd41aa59f75a2b9314692043dfb64d2f511b3", 0x37, 0xb961}, {&(0x7f00000004c0)="8117d8479eabf6bb25d4329649d94349dac74b4a2432a3bc11ba6b8bb4adc00ac6642cca6bbbc45162b7bdaf649507389523716737a88995ca8b3d369be4578221f32599baedb014635352e79fcfea37a2c8b43e4bc6cac3c1177cecdc6efd8c804d1c5eb70014767fac388888f32d7f85e9a99c753b2780649dae74006db45891118775a53a", 0x86, 0x4}], 0x2232, &(0x7f0000000600)={[{}, {'vfat\x00'}, {'vfat\x00'}], [{@smackfsroot={'smackfsroot', 0x3d, '#\'&!\\'}}, {@permit_directio}, {@smackfsroot}, {@obj_user={'obj_user', 0x3d, 'vfat\x00'}}]}) syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000240), 0x8040, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000680)={{0x1, 0x1, 0x18, r2, {0x7fffffff}}, './file0\x00'}) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x40010, r3, 0x400) [ 3075.428508] FAT-fs (loop3): Unrecognized mount option "ÿÿÿÿ0xffffffffffffffff00000000000000000000000" or missing value [ 3075.440859] loop5: detected capacity change from 0 to 40 [ 3075.453414] loop7: detected capacity change from 0 to 40 20:27:13 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:27:13 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="0000390034f8188c174b1af255dde13d404c2dc55222189cab5cdf3e85bed2c3cd487aa957e5a3b5301977f41d7a20f0472f5e4e407581d547aedb4b55753efd16fea0fd6832f76ed75e1426701b0ecd2d6a1a53da4fbe2ed20c3574a071f710cd1e38cc77ce1faa635182a8d45fa685c5971918baf16c5f5b8af65a69a47f80f9459c040008b94e0ba48910ab0d95767c5ccb2adf863c97144870623ce9046c52d94b264867fc020000000000000071341be16434139d5dacc187bc4f87d57cbc5c51c41eef80261ce65a2098b76750d56b11794581b20998f1fc1d9e87abf3355a8e7c0559101974468c79d19c612309cd3a71264fba0bb1f58538e8cbab3d848f42ecd8441a92ab85dc1214af9f82c93a7bbc9e3f363b74bf4177bc2a86ea158104fa01939b9b211f0b10a54271899ecca64355bb037638339e5c28b36d0a9db21b0fdf8225d9413f54351e27e53e2c8a7a36dafb98408868e1af2a43827d6f7974636212f552090000"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r3, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", ""]}, 0x1c}}, 0x2000c004) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="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", 0x1d9}], 0x1) [ 3075.528671] loop1: detected capacity change from 0 to 40 [ 3075.534678] loop2: detected capacity change from 0 to 40 20:27:13 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(r0, &(0x7f00000000c0)='./file1\x00', 0x140, 0x20) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file1/file0\x00'}) r3 = openat(r2, &(0x7f0000000100)='./file1\x00', 0x10c082, 0x40) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r1, 0x0, 0xfffffdef) [ 3075.559386] syz-executor.5: attempt to access beyond end of device [ 3075.559386] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3075.562235] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 3075.608062] loop4: detected capacity change from 0 to 40 20:27:13 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, 0x0, &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:27:13 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) [ 3075.647194] loop7: detected capacity change from 0 to 40 [ 3075.650586] loop1: detected capacity change from 0 to 40 [ 3075.796695] syz-executor.2: attempt to access beyond end of device [ 3075.796695] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3075.797920] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 3075.806783] syz-executor.2: attempt to access beyond end of device [ 3075.806783] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3075.807934] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 3076.242693] loop3: detected capacity change from 0 to 39 [ 3076.248539] FAT-fs (loop3): Unrecognized mount option "ÿÿÿÿ0xffffffffffffffff00000000000000000000000" or missing value 20:27:31 executing program 0: syz_read_part_table(0x0, 0x3, 0x0) 20:27:31 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:27:31 executing program 3: chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000001480)) connect$unix(r1, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e20}, 0x6e) ioctl$HIDIOCGCOLLECTIONINDEX(r0, 0x40184810, &(0x7f0000000080)={0x3, 0x2, 0x7fffffff, 0x8, 0xfffffe01, 0x800}) fspick(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) 20:27:31 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000001480)) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x0, 0x84, 0x0, 0x0, 0x0, 0x2, 0x6c001, 0xe, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec3, 0x0, @perf_config_ext={0x0, 0xbd}, 0x0, 0x251, 0x20, 0x7, 0x9, 0x101, 0x1, 0x0, 0x33a, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r2, 0x1) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)) 20:27:31 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x1c}}, 0x2000c004) writev(r3, 0x0, 0x0) 20:27:31 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x400, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@aname={'aname', 0x3d, 'vfat\x00'}}, {@access_client}, {@access_any}, {@cachetag={'cachetag', 0x3d, '$-'}}, {@posixacl}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}, {@aname={'aname', 0x3d, '^^-'}}, {@access_user}, {@posixacl}, {@version_u}], [{@permit_directio}]}}) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) 20:27:31 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000240)={0xffffffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x7f, "2e28cb1ca5ede9"}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000001240)={r1, 0x800}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) 20:27:31 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, 0x0, &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) [ 3093.403430] loop2: detected capacity change from 0 to 40 [ 3093.407021] loop5: detected capacity change from 0 to 40 [ 3093.410089] loop7: detected capacity change from 0 to 40 [ 3093.439879] loop1: detected capacity change from 0 to 40 [ 3093.448039] loop4: detected capacity change from 0 to 40 [ 3093.490510] syz-executor.5: attempt to access beyond end of device [ 3093.490510] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3093.492219] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 3093.512137] 9pnet_fd: Insufficient options for proto=fd [ 3093.539619] syz-executor.2: attempt to access beyond end of device [ 3093.539619] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3093.541830] Buffer I/O error on dev loop2, logical block 10, lost async page write 20:27:31 executing program 0: syz_read_part_table(0x0, 0x4, 0x0) [ 3093.572774] syz-executor.4: attempt to access beyond end of device [ 3093.572774] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3093.574742] Buffer I/O error on dev loop4, logical block 10, lost async page write 20:27:31 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, 0x0, &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) [ 3093.606047] syz-executor.4: attempt to access beyond end of device [ 3093.606047] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3093.608050] Buffer I/O error on dev loop4, logical block 10, lost async page write 20:27:31 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, 0x0, &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:27:31 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) syz_mount_image$nfs(&(0x7f0000000380), &(0x7f00000003c0)='./file1\x00', 0x7, 0x8, &(0x7f00000007c0)=[{&(0x7f0000000400)="6b4bdc307295ecc5e041401bd056ad9c8f84bef07f654d59bc88b4bfbdf5246af0df2f3876f52be34651b7314839da4a202c09aa0c73dedf8bbdd4fac4e4eed71238068585b4a066b79e2dd59cad9aad71f331a62a81f8ab0650", 0x5a, 0x4}, {&(0x7f0000000480)="97a10d1b0ac3776284fb997690c4821be498d2f219d8dbcdb8008a39fdf990d00c149b31c42a4645bf157a847f2a0fadae80a4fef55b5a782b7630a0", 0x3c, 0x7ff}, {&(0x7f00000004c0)="2fa42a4822e79dea473cdab136c7668a9d2dbcd8da416b36d0bcc28e6dd8dbc8cc7a17f4cf8a1a5cbaed37bc0ab25db27250d10497407b1f6ec42345ea206f00c069cc6d019b8e5b0e45da2f21edc3cf8268d915812ad4", 0x57, 0x6543}, {&(0x7f0000000540)="fd3d18b83afbacc97e3053fe0a21b973b1061e2c988e97d9388b3911f82a2cbc54e3fa5b029033ea861a3dd6d4632d85124db9e766ef239b44152a0af94bc7809189816b51c45106774bcb8a9d432e94e8bfb57aba334e4109d0b11f91e80a3f8bd5bfae0ffc86cd602de6922f26aebdf4c7c9ee0099f259fcf7a9514e39182afe5370fdb32ee1b7b58a333914869e914f06ec06500114bc5fd9614a88d32b5251c2632405bf1133b652e7", 0xab, 0x9}, {&(0x7f0000000600)="dc338a8e30922a0326ccc6ed4b48ae43b44a5117295861d6202803b19a431aa8a265b14a539ef5071c12536943ae78010311", 0x32, 0x5}, {&(0x7f0000000640)="50d54f3cf03c1a6bd6f5a874b58747eb354465edfc672b3b2803a6502ac4dd511ff3e5516048f483bad18d06102c5e856ac0dacb42f7451f4b1a5018b0626ecf85e4053b19206a6b78ddb74926fe35aa367feb19dc90afc3026b", 0x5a, 0x42fcbcf0}, {&(0x7f00000006c0)="b7ea466aec181ebc52547c3d208a090ed628da86d067cfddc6c8c13184df42c6c840957ca4336677ac8f655c885b0af40facf91228dbe3138606a1b5c52d19a3e7d24e34e2a206f4efbc10b9edb5ec552f7ddb88b3ebaf86af917f8bcc817f32a3df", 0x62, 0x7ff}, {&(0x7f0000000740)="02e6f2a63661a7cb52c34f114c77c3d519e69fc81801afceed484ba8fa65767152ec2df7e0022f2327e4db5a014d75ac1b08aec3bbd9ee32a3b8a72d64493ec6dfa805f367385e0209c03de54e66be0e52c0e193aad4426da65fd46313b932", 0x5f, 0x1}], 0x8008, &(0x7f00000009c0)=ANY=[@ANYBLOB='#][}^&{]*,euid=', @ANYRESDEC=0x0, @ANYBLOB=',measure,measure,smackfshat=vfat\x00,smackfsfloor=)-,dont_measure,fowner<', @ANYRESDEC=0xee00, @ANYBLOB="2c617070725c05484e87482e6f616973655f747970653d696d61737f5ffecda9e8118d4523809d186b0ea29807972201fc2b56ec7d9e62defaf3a51d29b0d51fb65b25b010462f1bad64256683c12cfd209ceddc5f4312726e8bb28f85ac8adec23e0fb302d54b41017b03beea9f3d222d4d519a909789e3bd0ab1e6a25527215748582c3c26e706dc3e60e12a976fabb749637c453bfa0000000000000000"]) chdir(&(0x7f0000000340)='./file2\x00') chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) execveat(r2, &(0x7f0000000180)='./file1\x00', &(0x7f0000000280)=[&(0x7f00000001c0)='\x00', &(0x7f0000000240)='\x00'], &(0x7f0000000300)=[&(0x7f00000002c0)='}}6\x00'], 0x1800) creat(&(0x7f0000000980)='./file0\x00', 0xe0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{0x9, 0x1}, {0x80000001, 0xc994}]}, 0x14, 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000001480)) openat(r3, &(0x7f0000000940)='./file2\x00', 0x80, 0xa0) 20:27:31 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x236e, 0x1, &(0x7f0000000180)=[{&(0x7f00000000c0)="6f5fe2364976f0dac3fc6fe9", 0xc, 0x10001}], 0x8040, &(0x7f00000001c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x67, 0x74, 0x36, 0x39]}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '\x14'}}]}) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x204080, 0x44) openat(r2, &(0x7f0000000240)='./file1\x00', 0x20000, 0x4) [ 3093.679202] loop7: detected capacity change from 0 to 40 20:27:32 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="0000390034f8188c174b1af255dde13d404c2dc55222189cab5cdf3e85bed2c3cd487aa957e5a3b5301977f41d7a20f0472f5e4e407581d547aedb4b55753efd16fea0fd6832f76ed75e1426701b0ecd2d6a1a53da4fbe2ed20c3574a071f710cd1e38cc77ce1faa635182a8d45fa685c5971918baf16c5f5b8af65a69a47f80f9459c040008b94e0ba48910ab0d95767c5ccb2adf863c97144870623ce9046c52d94b264867fc020000000000000071341be16434139d5dacc187bc4f87d57cbc5c51c41eef80261ce65a2098b76750d56b11794581b20998f1fc1d9e87abf3355a8e7c0559101974468c79d19c612309cd3a71264fba0bb1f58538e8cbab3d848f42ecd8441a92ab85dc1214af9f82c93a7bbc9e3f363b74bf4177bc2a86ea158104fa01939b9b211f0b10a54271899ecca64355bb037638339e5c28b36d0a9db21b0fdf8225d9413f54351e27e53e2c8a7a36dafb98408868e1af2a43827d6f7974636212f552090000"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x1c}}, 0x2000c004) writev(r3, 0x0, 0x0) [ 3093.733919] loop5: detected capacity change from 0 to 40 20:27:32 executing program 0: syz_read_part_table(0x0, 0x5, 0x0) 20:27:32 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2802}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file0\x00', 0x200040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) [ 3093.781579] loop3: detected capacity change from 0 to 40 [ 3093.786543] loop1: detected capacity change from 0 to 40 [ 3093.840585] syz-executor.5: attempt to access beyond end of device [ 3093.840585] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3093.842200] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 3093.902674] loop4: detected capacity change from 0 to 40 [ 3093.902944] syz-executor.3: attempt to access beyond end of device [ 3093.902944] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3093.905267] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3093.949833] syz-executor.3: attempt to access beyond end of device [ 3093.949833] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3093.951685] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3110.643188] loop7: detected capacity change from 0 to 40 20:27:48 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, 0x0, &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:27:48 executing program 0: syz_read_part_table(0x0, 0x6, 0x0) 20:27:48 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(r0, &(0x7f0000000040)='./file1\x00', 0x20000, 0x123) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) 20:27:48 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="0000390034f8188c174b1af255dde13d404c2dc55222189cab5cdf3e85bed2c3cd487aa957e5a3b5301977f41d7a20f0472f5e4e407581d547aedb4b55753efd16fea0fd6832f76ed75e1426701b0ecd2d6a1a53da4fbe2ed20c3574a071f710cd1e38cc77ce1faa635182a8d45fa685c5971918baf16c5f5b8af65a69a47f80f9459c040008b94e0ba48910ab0d95767c5ccb2adf863c97144870623ce9046c52d94b264867fc020000000000000071341be16434139d5dacc187bc4f87d57cbc5c51c41eef80261ce65a2098b76750d56b11794581b20998f1fc1d9e87abf3355a8e7c0559101974468c79d19c612309cd3a71264fba0bb1f58538e8cbab3d848f42ecd8441a92ab85dc1214af9f82c93a7bbc9e3f363b74bf4177bc2a86ea158104fa01939b9b211f0b10a54271899ecca64355bb037638339e5c28b36d0a9db21b0fdf8225d9413f54351e27e53e2c8a7a36dafb98408868e1af2a43827d6f7974636212f552090000"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x1c}}, 0x2000c004) writev(r3, 0x0, 0x0) 20:27:48 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x80000001}}, './file0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) [ 3110.661801] loop4: detected capacity change from 0 to 40 [ 3110.665961] loop3: detected capacity change from 0 to 40 [ 3110.667198] loop5: detected capacity change from 0 to 40 20:27:48 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', 0x0, &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:27:48 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_rdma(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x115000, &(0x7f0000000240)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@sq={'sq', 0x3d, 0x9}}, {@rq={'rq', 0x3d, 0xfffffffffffffffc}}, {@timeout={'timeout', 0x3d, 0x60000000}}, {@common=@afid={'afid', 0x3d, 0x2}}, {@timeout}, {@rq={'rq', 0x3d, 0x5}}, {@timeout={'timeout', 0x3d, 0x65f}}, {@rq={'rq', 0x3d, 0xffff}}], [{@seclabel}, {@hash}, {@appraise}]}}) openat(r0, &(0x7f0000000040)='./file0\x00', 0x408080, 0x68) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000001480)) utimensat(r2, &(0x7f0000000340)='./file1\x00', &(0x7f0000000380)={{0x0, 0x2710}, {0x77359400}}, 0x100) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r1, 0x0, 0xfffffdef) open(&(0x7f00000001c0)='./file1\x00', 0x101000, 0x101) 20:27:49 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 20:27:49 executing program 0: syz_read_part_table(0x0, 0x7, 0x0) [ 3110.712371] loop1: detected capacity change from 0 to 40 [ 3110.717778] loop2: detected capacity change from 0 to 40 [ 3110.741753] syz-executor.5: attempt to access beyond end of device [ 3110.741753] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3110.742733] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 3110.751129] syz-executor.4: attempt to access beyond end of device [ 3110.751129] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3110.752207] Buffer I/O error on dev loop4, logical block 10, lost async page write 20:27:49 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, 0x0, &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) [ 3110.777839] process 'syz-executor.1' launched '/dev/fd/5/./file1' with NULL argv: empty string added [ 3110.804818] loop7: detected capacity change from 0 to 40 [ 3110.818891] syz-executor.3: attempt to access beyond end of device [ 3110.818891] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3110.819869] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3110.826196] syz-executor.2: attempt to access beyond end of device [ 3110.826196] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3110.827282] Buffer I/O error on dev loop2, logical block 10, lost async page write 20:27:49 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101043, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000001480)) renameat(r2, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00') 20:27:49 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', 0x0, 0x0, 0x100) [ 3110.917128] loop1: detected capacity change from 0 to 40 [ 3110.932430] loop5: detected capacity change from 0 to 40 [ 3110.975714] syz-executor.5: attempt to access beyond end of device [ 3110.975714] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3110.976780] Buffer I/O error on dev loop5, logical block 10, lost async page write 20:28:06 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x3, 0x0, &(0x7f0000000200), 0x2800800, &(0x7f0000000040)=ANY=[@ANYBLOB="b6197aaa2420e36d45111ed58ecc994dff2b0e5cc8dcf65d91e421a4dbd01b995b1ea31e3ebef713bbd223d4f31c17f4428c23e5076bebf09043b1530a786d2354df96da4fa7a366c0f6a6451988d174"]) setxattr$incfs_metadata(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)="932e8211c1f89d7620420133465d963a6b6afd5cbd5fc8232bcdd2662bad79912f1f9bb16a35574ee845aea0620e189d17b502e0a4bfe4a91ce7e8c40a6946779ea4cc30a82d050d0e", 0x49, 0x1) chdir(&(0x7f0000000140)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000cc0)='./file0\x00', 0x4000, 0xc0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0x220) r2 = pidfd_getfd(r1, r1, 0x0) ioctl$CDROMREADRAW(r2, 0x5314, &(0x7f0000000240)={0x1, 0x6c, 0x20, 0xff, 0x2, 0x81}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 20:28:06 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17, 0x400}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) 20:28:06 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', 0x0, &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:28:06 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', 0x0, 0x0, 0x0) 20:28:06 executing program 0: syz_read_part_table(0x0, 0x8, 0x0) 20:28:06 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2d8403, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0xfffffd5a) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000001480)) r4 = syz_open_dev$vcsu(&(0x7f0000000040), 0x3c7d, 0x40000) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={r4, 0x6, 0x7, 0x1}) truncate(&(0x7f00000000c0)='./file0\x00', 0x5) socket$nl_generic(0x10, 0x3, 0x10) sendfile(r0, r5, 0x0, 0xfffffffffffffffb) 20:28:06 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x1c}}, 0x2000c004) writev(r3, &(0x7f0000000000), 0x0) 20:28:06 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = epoll_create1(0xcf7e81a8a9ff6c6) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x2771db39499e010e, 0x0) r3 = openat(r2, &(0x7f00000000c0)='./file2\x00', 0x40, 0x8d) ioctl$RTC_WIE_OFF(r3, 0x7010) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000040)={0x0, 0x45c4}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000001480)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000180)={0xfffffffd, 0x0, 0x0}, 0x0) sendfile(r1, r5, 0x0, 0xfffffdf2) [ 3127.820029] loop2: detected capacity change from 0 to 40 [ 3127.829879] FAT-fs (loop4): Unrecognized mount option "¶zª$ ãmEÕŽÌ™Mÿ+\ÈÜö]‘ä!¤ÛЙ[£>¾÷»Ò#ÔóôBŒ#åkëðC±S [ 3127.829879] xm#Tß–ÚO§£fÀö¦EˆÑt" or missing value [ 3127.836692] FAT-fs (loop4): Unrecognized mount option "¶zª$ ãmEÕŽÌ™Mÿ+\ÈÜö]‘ä!¤ÛЙ[£>¾÷»Ò#ÔóôBŒ#åkëðC±S [ 3127.836692] xm#Tß–ÚO§£fÀö¦EˆÑt" or missing value [ 3127.862794] loop1: detected capacity change from 0 to 40 [ 3127.880022] loop3: detected capacity change from 0 to 40 [ 3127.885990] loop5: detected capacity change from 0 to 40 [ 3127.890011] loop7: detected capacity change from 0 to 40 20:28:06 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file2\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b0008010100e73f002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000240)=""/175) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3127.905960] FAT-fs (loop5): bogus number of reserved sectors [ 3127.906784] FAT-fs (loop5): Can't find a valid FAT filesystem 20:28:06 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_open_dev$tty20(0xc, 0x4, 0x1) mount_setattr(r0, &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000000c0)={0x75, 0x80, 0x180000, {r0}}, 0x20) openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x2001, 0x0, 0x1b}, 0x18) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3127.934932] syz-executor.3: attempt to access beyond end of device [ 3127.934932] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 3127.935852] Buffer I/O error on dev loop3, logical block 31, lost async page write 20:28:06 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x1c}}, 0x2000c004) writev(r3, &(0x7f0000000000), 0x0) [ 3127.965381] loop4: detected capacity change from 0 to 40 [ 3127.970325] syz-executor.3: attempt to access beyond end of device [ 3127.970325] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 3127.971322] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 3127.984270] FAT-fs (loop4): bogus number of directory entries (63) [ 3127.984733] FAT-fs (loop4): Can't find a valid FAT filesystem 20:28:06 executing program 0: syz_read_part_table(0x0, 0xb, 0x0) 20:28:06 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', 0x0, 0x0, 0x100) [ 3128.029526] loop2: detected capacity change from 0 to 40 [ 3128.085366] loop7: detected capacity change from 0 to 40 20:28:06 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x120000, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0, @ANYBLOB="4717b7dec6ea882a30461453b9c801dc3561732035ae756fbe7c94ad6aab17475ccc44c7b77e4222433566975c893cd8a8e3288c7c1128a0e9c23c7f7f365e449c96a12c887f1ec18497f0429c311181dee33cb90a293ab096d53b188001b1f54a6b7c91ff36e4ecc464fee5b740a2dc5f4638946a758a37cb246b817c9dd48e2777463a957433ed15c72a0b", @ANYRESHEX=r0]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101482, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) [ 3128.121083] syz-executor.2: attempt to access beyond end of device [ 3128.121083] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3128.122258] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 3128.172487] syz-executor.2: attempt to access beyond end of device [ 3128.172487] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3128.173530] Buffer I/O error on dev loop2, logical block 10, lost async page write 20:28:06 executing program 0: syz_read_part_table(0x0, 0x18, 0x0) 20:28:06 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x1c}}, 0x2000c004) writev(r3, &(0x7f0000000000), 0x0) 20:28:06 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(r0, &(0x7f0000000400)='./file1\x00', 0x0, 0x0, 0x0) [ 3128.315083] loop7: detected capacity change from 0 to 40 [ 3128.727022] loop5: detected capacity change from 0 to 40 [ 3128.742225] FAT-fs (loop5): bogus number of reserved sectors [ 3128.743182] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3128.803991] loop4: detected capacity change from 0 to 40 [ 3128.814766] FAT-fs (loop4): Unrecognized mount option "./file0" or missing value 20:28:19 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) 20:28:19 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x2000, 0x390) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3141.191310] loop1: detected capacity change from 0 to 40 [ 3141.194822] loop2: detected capacity change from 0 to 40 [ 3141.203553] loop5: detected capacity change from 0 to 40 20:28:19 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000040), 0xe3e2, 0xd0000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) 20:28:19 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000001480)) write$P9_RREADLINK(r2, &(0x7f0000000040)={0x19, 0x17, 0x1, {0x10, './file0/../file0'}}, 0x19) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000000080)) 20:28:19 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000180)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{!e\x00', &(0x7f0000000280)='.&\x00', &(0x7f00000002c0)='%*@]):*\x00', &(0x7f0000000300)='[{.@(-\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='}\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000bc0)='\xa9\xdcU?\xd6\xd1\x05\xd1;\xd5\v\x805\xf1\xaa.\x15\x1d\'\x81jt_\xfbZ1#\x05=\x8c\xe2}:@i\xd4', &(0x7f0000000440)='\x00', &(0x7f00000000c0)='%-\x00', &(0x7f00000004c0)='m)\xd6#&]#\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000500)='vfat\x00'], 0x100) 20:28:19 executing program 0: syz_read_part_table(0x0, 0x64, 0x0) 20:28:19 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x1c}}, 0x2000c004) writev(r3, &(0x7f0000000000)=[{0x0}], 0x1) 20:28:19 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(r0, &(0x7f0000000040)='./file1\x00', 0x40200, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mq_notify(0xffffffffffffffff, 0xfffffffffffffffc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x1f, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, 0x108) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000001480)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f00000000c0)=ANY=[@ANYBLOB="014e3e54a1b2fec49756006c179f39030000000080000034070000000000005e0000", @ANYRES32=r1, @ANYBLOB="40000000000000002e2cb52f66696c653100"]) sendfile(r2, r1, 0x0, 0xfffffdef) [ 3141.210393] loop4: detected capacity change from 0 to 40 [ 3141.247739] loop3: detected capacity change from 0 to 40 [ 3141.293817] loop7: detected capacity change from 0 to 40 20:28:19 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file2\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b0008010100e73f002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000240)=""/175) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 20:28:19 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x3519eb40b1a02812, 0x2) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000001480)) openat(r1, &(0x7f0000000080)='./file1\x00', 0x80000, 0x20) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r0, 0x0, 0xfffffdef) [ 3141.333125] syz-executor.4: attempt to access beyond end of device [ 3141.333125] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3141.334841] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 3141.345797] syz-executor.2: attempt to access beyond end of device [ 3141.345797] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3141.347720] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 3141.358072] syz-executor.3: attempt to access beyond end of device [ 3141.358072] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3141.359764] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3141.369473] syz-executor.4: attempt to access beyond end of device [ 3141.369473] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3141.371157] Buffer I/O error on dev loop4, logical block 10, lost async page write 20:28:19 executing program 0: syz_read_part_table(0x0, 0xfe, 0x0) [ 3141.389700] syz-executor.3: attempt to access beyond end of device [ 3141.389700] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3141.391473] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3141.403638] syz-executor.7: attempt to access beyond end of device [ 3141.403638] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3141.406654] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 3141.414224] syz-executor.2: attempt to access beyond end of device [ 3141.414224] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3141.416171] Buffer I/O error on dev loop2, logical block 10, lost async page write 20:28:19 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x1c}}, 0x2000c004) writev(r3, &(0x7f0000000000)=[{0x0}], 0x1) [ 3141.459767] loop5: detected capacity change from 0 to 40 [ 3141.466366] loop1: detected capacity change from 0 to 40 20:28:19 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0\x00', 0x200000, 0x1b) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x109300, 0x145) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000001480)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x3}}, './file1\x00'}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r1, 0x0, 0xfffffdef) 20:28:19 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x301242, 0x87) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = signalfd(r0, &(0x7f0000000040)={[0x8]}, 0x8) write$P9_RFLUSH(r3, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) sendfile(r2, r1, 0x0, 0xfffffdef) [ 3141.505757] FAT-fs (loop1): bogus number of directory entries (63) [ 3141.508321] FAT-fs (loop1): Can't find a valid FAT filesystem 20:28:19 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(r0, &(0x7f0000000040)='./file1\x00', 0x40200, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mq_notify(0xffffffffffffffff, 0xfffffffffffffffc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x1f, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, 0x108) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000001480)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f00000000c0)=ANY=[@ANYBLOB="014e3e54a1b2fec49756006c179f39030000000080000034070000000000005e0000", @ANYRES32=r1, @ANYBLOB="40000000000000002e2cb52f66696c653100"]) sendfile(r2, r1, 0x0, 0xfffffdef) 20:28:19 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat(r0, &(0x7f00000000c0)='./file1\x00', 0x2262c2, 0x40) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xfffffdef) [ 3141.580579] syz-executor.5: attempt to access beyond end of device [ 3141.580579] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3141.582472] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 3141.673178] loop4: detected capacity change from 0 to 40 20:28:20 executing program 0: syz_read_part_table(0x0, 0x300, 0x0) [ 3141.690071] loop3: detected capacity change from 0 to 40 20:28:20 executing program 5: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) getpgrp(r0) r1 = perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x3f, 0x80, 0x6, 0x3, 0x0, 0x0, 0x2220, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x200, 0x40}, 0x92, 0x4, 0x9, 0x6, 0xfffffffffffffffc, 0x3, 0x3, 0x0, 0x10000000, 0x0, 0xffffffffffffff01}, 0x0, 0x4, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x3, 0x8, 0x1, 0x0, 0x8, 0x1180, 0xa, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x3f, 0xd5b}, 0x490, 0x0, 0x8000, 0x3, 0x3, 0x5, 0x0, 0x0, 0xf4, 0x0, 0x45f}, r0, 0xb, r1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x5, 0xff, 0x1, 0x20, 0x0, 0x81, 0xfdbe62e0145f9af0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f00000000c0), 0x1}, 0x6, 0x2, 0x0, 0x7, 0x3ff, 0x1602ce8f, 0x0, 0x0, 0x8, 0x0, 0x6}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) [ 3141.753955] loop7: detected capacity change from 0 to 40 [ 3141.758168] loop2: detected capacity change from 0 to 40 20:28:20 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x1c}}, 0x2000c004) writev(r3, &(0x7f0000000000)=[{0x0}], 0x1) [ 3141.959599] syz-executor.7: attempt to access beyond end of device [ 3141.959599] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3141.961638] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 3141.980875] syz-executor.2: attempt to access beyond end of device [ 3141.980875] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3141.983024] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 3141.990828] loop5: detected capacity change from 0 to 40 20:28:20 executing program 0: syz_read_part_table(0x0, 0x480, 0x0) 20:28:20 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) fchmodat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xf2) 20:28:20 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(r0, &(0x7f0000000040)='./file1\x00', 0x40200, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mq_notify(0xffffffffffffffff, 0xfffffffffffffffc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x1f, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, 0x108) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000001480)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f00000000c0)=ANY=[@ANYBLOB="014e3e54a1b2fec49756006c179f39030000000080000034070000000000005e0000", @ANYRES32=r1, @ANYBLOB="40000000000000002e2cb52f66696c653100"]) sendfile(r2, r1, 0x0, 0xfffffdef) [ 3142.175009] loop3: detected capacity change from 0 to 40 20:28:20 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x1c}}, 0x2000c004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)}], 0x1) [ 3142.346726] loop7: detected capacity change from 0 to 40 20:28:20 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3142.547888] loop2: detected capacity change from 0 to 40 20:28:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file2\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b0008010100e73f002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000240)=""/175) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 20:28:20 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file1\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000000340)="c4f0899f395178c21b0d848abc2742c75e303899c0358321ad6a4b59196b5da1793c264214661d7b908e013ee4c7cd71f5bc158e4751261c18981c4b663abbbf32bebc31c5a3c12897312d766ee60d0bbf76b169e103bae51064a471d7f9ed3d7f04f858a17d02df4363c415d63bed2e9876d4d353eecc79af6879a95b2934d66538d33835b0bdd74102aa00b73ea3e4589b72bc0a85", 0x96, 0x7}], 0x20, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file1/file0\x00'}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000001480)) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x1d4c7000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000001480)) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000000180)) openat(r4, &(0x7f00000000c0)='./file1/file0\x00', 0x80c00, 0x80) openat(r2, &(0x7f0000000080)='./file1\x00', 0x101000, 0x1b0) sync_file_range(r4, 0x7ff, 0x26, 0x4) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x1) 20:28:20 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000001480)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000001480)) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_flowlabel\x00') sendfile(r4, r0, 0x0, 0xffffffffffffffff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000001480)) ioctl$TIOCGSOFTCAR(r5, 0x5419, &(0x7f0000000040)) 20:28:20 executing program 0: syz_read_part_table(0x0, 0x500, 0x0) [ 3142.741225] loop3: detected capacity change from 0 to 40 [ 3142.791271] loop1: detected capacity change from 0 to 40 [ 3142.807388] FAT-fs (loop1): bogus number of directory entries (63) [ 3142.808931] FAT-fs (loop1): Can't find a valid FAT filesystem [ 3158.975058] loop7: detected capacity change from 0 to 40 [ 3158.982188] loop2: detected capacity change from 0 to 40 20:28:37 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x187100, 0x110) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) 20:28:37 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file2\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b0008010100e73f002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000240)=""/175) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 20:28:37 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x1c}}, 0x2000c004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)}], 0x1) 20:28:37 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(r0, &(0x7f0000000040)='./file1\x00', 0x40200, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mq_notify(0xffffffffffffffff, 0xfffffffffffffffc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x1f, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, 0x108) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000001480)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f00000000c0)=ANY=[@ANYBLOB="014e3e54a1b2fec49756006c179f39030000000080000034070000000000005e0000", @ANYRES32=r1, @ANYBLOB="40000000000000002e2cb52f66696c653100"]) 20:28:37 executing program 0: syz_read_part_table(0x0, 0x600, 0x0) 20:28:37 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000001480)) openat(r1, &(0x7f0000000240)='./file1/file0\x00', 0x591202, 0x101) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x505002, 0x1ae) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) getpgrp(r4) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x8, 0x5, 0x2, 0x6, 0x0, 0x6, 0x488, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x81, 0x2, @perf_config_ext={0x1, 0x8}, 0x0, 0x4, 0x10000, 0x6, 0x6, 0x2, 0x0, 0x0, 0x1, 0x0, 0xc9}, r4, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r3, r0, 0x0, 0xfffffdef) 20:28:37 executing program 5: chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000001480)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000001480)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) sendfile(r1, r0, 0x0, 0xfffffdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000001480)) ioctl$EXT4_IOC_CHECKPOINT(r5, 0x4004662b, &(0x7f0000000080)=0x5) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000001480)) unlinkat(r4, &(0x7f0000000040)='./file2\x00', 0x200) 20:28:37 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000001480)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000001480)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000001480)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000001480)) recvmmsg$unix(r0, &(0x7f0000000600)=[{{&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, &(0x7f0000000340)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0xf0}}, {{&(0x7f0000000440), 0x6e, &(0x7f00000004c0)=[{&(0x7f00000001c0)=""/42, 0x2a}], 0x1, &(0x7f0000000500)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe0}}], 0x2, 0x101, &(0x7f0000000680)) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r6, 0x80086601, &(0x7f0000001480)) write$binfmt_aout(r0, &(0x7f00000014c0)=ANY=[@ANYBLOB="f0c03706d182333859657e7ce2528836f50b220d8f595f465bbb730b428e30a0ed1afc31ac80865b0a8a7aa3bc2e6b7607015b81e85344dfb9d0f98f1b1f1565fbc26ddeb9aea7dc95287f89ed79fdd2e7d7677c50f029d13cf49229ce442ba745b78420cda033365a6fa247346511a85a039828d9d5963ada7d7f864b758d782f5b53d41c4f6dace2c5b6e351e9d9f6f8605ed997ee4142da4f85dd03c1a8da8e4836fcf6029de1f579467c30b634b3f3d55bd3b029a1e99c1c5f16c0a5e18b911972327491f67cebd73bb6926af0f0bc12e1c8cab30eb38c0a0627f1fa0610bf6a1d6df180c283af573078936647e21dcff2e72120040b70bb3395c93f24584fd69409fbf8066b360259b92c7a89d6f642741d62cecb80c4c82b3422d3a17b2e7773dee2c3f48d9890abc50c6f3b1046980b78bdd0c9eb237fd3e4bce55720e3655652389f25d01cde2d5c45b0721f01e8c8ab5c9320e26de966ab6eebc2d14308c1e1d5a6868cb205e9cd003d8edff8658207c2c93a8a0e8e41e5f0720bd6828d185925d04a4f9684be1f8d97d66ce43bd58ce722b6d6e70ad5079645a4b27dd2fa4388a8fe4f29d805b2dd1c66a2975c21b847608ddae0f4e3455f736b742ec28907ba38b111014b7816269cc77f9b3f37eeb1e0cebee4a6794ed6913cbe1df0ab4d9a6a72c12cf7e1c4a404d28df724e8048e66fd65b2661d712a709eac138ab41b3940ed07a018d800222cbf4f486e61daed32f3edaf5870338fecfdebb7c95a9b633d41fab61c56922b1308167570df60cd3bb56a7be319afc1d01c53d56849560c15a94d3b67f36cb5e7bf92febd5bb9b0bfda73d2966f7e03b1c563df39ee992e90cb7a48ec6648fdf621b8dd6515513b34ede24725112c5c30dd7cf9f4972f88482445158832fd145be912d8de0f00ad69b003208f14d93fa3fdd22f521a8f3b8ffe4bfe6694c38094188c8ae54e4b34b2793a44bb02d3f609c3ab591c7cee597b96e74a833b18aa711cc678c6eb63dc50728c8f80d2c38cb414f6dbee13543d1f8db0849b89ca37b088351f7bc9423cdcac4d10b2d4e5854cdf60d62e20df072b47f3def9e34d285e2391826e5e6445db2a8924002e99a604b85169bba0d66ce3aedfc4ea0f039d80ddbafe9892254e71f1ce04bd44488c3223c78193ded1e190be65c2ab5cac1608b23a23c74f6b7610201a096ffcbcabda400e6892c657b1b62b10752c4f9cf88d87bba553565068fa108f427320881c9e7150305044f8142fc18572f3eb1e9c98402414046c5500523447c4e86deee36b7ccc772e3148a0d33acde24dec598ab1c2ffbaf8fe77235b716b34651102ae43655b944bc724f1bb3e2c402e88021185e8bc10dc233fb79405a5768c692b8bb5479f539020103427a009114d9f605b6221f932b17bfa76f3f674bb59a22010dc6306071abf52eb3a2bd6251664b201ebee77bcf7e7683f940628e7c23e43c193d351530b76189df7ec2bd49c1654356d835390a0a952b63aa292853e39e594da3ffaaba9e52c8fc0331ec6e681e84d5fc01beb6a976d37dff671cbdf1d861db4b4c6c5d7e388ab6318c133e26f1ee96a29887dca6db389a5a3da68e65fdf88f6793e8500efba8da9f4c7ac99054c9b24b5e7c110b11233c99a3c688ba3aceeb9eb168c5e5b786aa9a06faeb85422d5a2fd7a89d2e8e1087a460c6352ccf00a4f14a138a8922d07eed6ba579aae0ff8d0fb43c1aa9d0258de9d8552525be532ef01e1b1a70cab87dbd91b2ea8897d8774c81f7d6390cd7ae42bc0992527de035834504c4c40b68a753ff5da4f1d23b42968edeb5665f3046574709127ea5bbbc596489339e641e3d67c50ac23dae8b4dd594b183f6f53690f847caca760a3094a645e41a3f4e77244eb272d0f0970961d0f5e7675ec22083c0e44d09bcb06352dbf964a0c499f987ed2d56aaf2d45e440463735233c2863d6ec3cc1617b1623a1bb92431ea0d997378468c577e9fd5f65b177d718253d2c7e78f985f0e1927ebeeb367a9fe192a2f12e5ce8c538b9b5a1f40edddcc9d1898ac4aadeab7500fc16b1650d4f2a9a97338abb38b3eec47d920bbaf58ff8fa27177e182d7823caad6a202b9305a2b13219630f793e70f77d721316e51dfc0cfdbb239e049b966de80340404eaeab30a0b4b20d0e857eb290c558ee494ac36412fbe0745aec51cb661a84fc39b37a57af4292b49e1a29fbe0a382a725b7789dd5e97cf2dc154f659efb7caddb384fa37a091995ca4c07bb052a43970fbd9e6bda68b8a681d02f194cf923167935c7d75c3412335a354dcdf224a47c8e327489339fa7ba97a8f2eed9b7929a43ab3bda1f5001c1d9d8b6b183a6f54b33ed7056133aca0aa6fe5d7ed89f5f5c20bd44b5fe5f9d3edf06d92ff13edad7a0120c18719963fa3c054b556e6a68b9e6c1647535a24cf78c4eca5f6a269e2e2f7a03b3403a0ef3a2989376bbf7d191bae44986a41cdf2ab133c4beee6351e13b4517d67bcd56cc9b1ceb5fb068889f74409667b69d2bd25658bd6c0fe57dc912378fb3abe7c1165fda768901a4679097db77cb52e8b6380e08fb4a9b615e46a7d6b5d2354cc8e407fa005bebe185334f32630079af04aa9b6692d6da661bf9116c06c988a5c9b2baf12a0a143a7a8fe3507328e01a5d93f59ef3e443b5e60f6dde29cb3cd1a4a45b44900992896d38b67473575fb0f053de7191a6cc3302aad9b2fea4eaa3cdae69397bbffbe80536ee27d4e39afe61f819b06ff39be7fdd6d10cdf4df10ca36ddaaa0d0e5cb1d424e3eab1a597446ecda9694b3095b4a19ddc23e9c84c22df0d590764ed0026b9e24ccf539beac5a3d46b8b96f3db6c6ea8a9e02275051c15641b93c6427dda9acb811cd7bac8aa293f92d3d6a000a476667c3e1220f27b47097dcc59ba82c14b8a193dd126e735a3f9c94d9ff31c0d5e5c208fd59fe3d001e3b032d2a9b5bc8cf14c4987e8ec995c412377f17dcefef86b504b3f61bc9c4e084531d37ad91aa669a7bc9da67e3bb2d73839a3bbd06d28c4daa7b48624c18eb77f476a59ffc7b11fc2e735d80ecf8643bf844070ad143093ef2e124941dba3cd692dd72fa248e1dee2295679ad033997fa71f581e93e7f15f38d93af4b53a5e3c849c9bcedbffe760c99e43b810440fda22777ff33012d63565773e5443eff05769b5825e8274fe44918fd09194ee4b8e610b9e894f571eccfbd2666d6b5cf4ad3c9096e923bc98f65ee9521d5a25bf46bf5c3b78157b13bde8d3549532ba46544dd28440a695e5c28e1b447c23e73d457472bc3e021ef7b041df01161f52945925cc35bebed9e19416a1679bbc2fbb31775f0c10c069ec836631f02b54366f75e0ed6a2e5579e6cace7b2f6fee76fa461039ee36057e4b9a13770488e3f5111b2aec3a55f37febf9f5272076fdaf99dbf7b9205bb5d0e59f678ba6b25d6b38d3dbfe02b5232477fc5522e8cf846853e33fb03b195bd42f24ae9f3df1e77b6f489257c0abb64ce636667b573c9a8e69b81bc2d0c71d4ce6b553664210c26a89b4233310a88a039e3d7c9afd3953592dd7607422458ebd2289648bde7ade6fc4df261cfb4d0992c6014a4a0c16538ade9fa42bda5558f129b9c443b872e7810359f78031f69567b95258f32cc8ec1f94ece900dbef8ab073a7f11a9006aa24bccdcbc342be999033c4b58b9dad705ca94d0284f9fc8599648f964e01b96d0271646ddb86d9ba7d21fe50e1ee8acdf82f8cb34aed7475cbe1aabbe07a47146f1ec70babd21a4abe2fef6725e587e31391a5f51a2dfb2be941e4f75f156d770beaacf922447c1484f5aa37e60a6048118d7042f3caf2a4a9d98cb05b3eb29464ecb700776ddcc3c27eaafe78f711ad14fee2d2ce04c77e328a80a1beed934586066e2eb152dd423f490538b0e73f0926a682082a4de1fb9332912ea12f1ae3802fb0a4e36e46c39c9b552edc26bebe67ef6bee8e2b9f34faf20eda753eb140a1b7532c4ffaa6454061e348080bd8b6e76b25d1678362196b9d1ed9974770b8ec66fea27b5f5e6488f51527c1bc34e4e5a32dc95a4c8215b86d3f971bf8f8fa64f9d5dda96e1db91e9fc368e85b5bef2c5920b0a9539c54de2b0ac1a5871135145c7d5f478b941a5b8e6fc6006cae3e41b49339b7e9d429427e71be684bf4ea776cc7723ac8dcd51d7d58865efad18d223d520c053314e601086bec38016ea6a7977e5dbd22206c9b7497f7efbb2d298ebb0ce0eebd734b0f5c82120301db16ce3019cf0d23f8475a3c8fb7d225db32ef520e175f1d18ae27cea080df6344aa41fa82700aef6106639f97c41760b37347735f70effcca2af2c139e45cce0e2a1da071b3bf29d1ec2b31688a31a1d94fba59d315fd1707e32bf5c5498a28de43409b8e68e2101d75a7a919b9d6c0aac9e6b3d762c4b0de0b870269a0f64c8aa4a9c4d93ac4975624ebb9a779a3224c73d8f49e01a7fec71ed2c85417215b32dce28640b0f29fe9040e20840dfe7e7330c9f1357e3b3716548e038f8a560706c2fb1f70568c7673745d1723fd4c15bc5183b47f4c6c374e66399d0396981867d3fe96ab2d82eefd9207ff595dcab2df66c6345ac94b3197ec5e4620887236cf9c3845c6b8b2f8f8316aeec3b7f78ae4fea8642533ed084fe1894f33decd3f9ce72d8c5b206bcb319d93d1f6869b4fab6627b24d864afd841aeff04fe302c9f518600e73d6eebcb08ca99dbfb2eb7e7b2318f0834fb876a81466bbe31767c4f75f4618889478da59472c312e7630c921f4f9c293a8a6d40bb0a848c7bae8e1a43ae9a768bad11b847aa6dc3135c7a4faf28415b3576663dc5126fa941cb86472fe2b2c10ddfc5e340780c6006c22fa122a381867b84464a944912d0a1b556f275fa7b893a0cd999b9f59933b51369afbfc6618d8caa31e9c3bd19cbe3ff63510214b699218ba89e06d060cf5fbf1e3f7843d2f5744712f33cbcd12b0fed4ebe7f3b34383a244df4bf36abe0c20f510651140cb8f8e9297124aafecad3c03fc655c5b6fe66ffcb9dd6d6ed1d592c99ecccf247f88506380b132960fbe2e9809e652fda6100aa86b6a2f8f87e82f9e2fe373d36cef52845207cfe92bbfb2b4c685395322bf9063b0be0250e663b53d4307d6b1543fd7a181788105dcb20dd9756373ff7c32ae8807da7f40300cef1b9c64fbae491848b79b36774be0b08e03d5df08a2f5c96281484ff7828f74c5ce81a42d47fe421de50431600d560f9a94f14d52b5c67149c851da50fdaae6d0ebf0391e138f2b6861ab9522a1b334319dc14fa5b14f53ad61f93387f58906516232a8e915e96b3a1781a8c3256a24175734c0ea1a7de049e46a2341fc4110af7d482ca1f4f8b1ced96b33c9f6fa486237fbd35020b1120bf5161b7f51c3d9e941c04df910dabc52974b2016fa62786dab2172cb55cfad1b3f5112b921ff5d88e17760bc87586f5b3c3047b865b0006a665dcc2bc99a15a25b8c8372aebce3b74da9b53dad88569c98b3a2374184c520f4da3a25630c74aba2e31f1c630c535d4d84db9b364d027d9c1c22ca6f80130fa910b4c4fa122ff7057827e014fb939c0c7ef8e7f9364581d9395ca6a36596ec9ac5e0fa35d082cae84e4b6d913bcc4053c6f63715597f181dd4028299c555dfc2802b22b57c49fc73e6264c0ee2f8fbe688c3c3bb7496ba013e4a6a7289a5beb5d530d41536b767985b99398935c64711695f08f2723624be9daeb46ef66c761e94a7c46a88a98f58750a8d6d224", @ANYRESDEC=r1, @ANYRESOCT=0x0, @ANYRESOCT=r3, @ANYRES32=r6], 0x220) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) openat(r7, &(0x7f0000000040)='./file1\x00', 0x280000, 0xe96d69f89fcfb42b) [ 3159.012835] loop4: detected capacity change from 0 to 40 [ 3159.029721] loop3: detected capacity change from 0 to 40 [ 3159.032857] loop1: detected capacity change from 0 to 40 [ 3159.054844] FAT-fs (loop1): bogus number of directory entries (63) [ 3159.055636] FAT-fs (loop1): Can't find a valid FAT filesystem 20:28:37 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(r0, &(0x7f0000000040)='./file1\x00', 0x40200, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mq_notify(0xffffffffffffffff, 0xfffffffffffffffc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x1f, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, 0x108) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000001480)) [ 3159.110904] bio_check_eod: 6 callbacks suppressed [ 3159.110925] syz-executor.3: attempt to access beyond end of device [ 3159.110925] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3159.113890] buffer_io_error: 6 callbacks suppressed [ 3159.113906] Buffer I/O error on dev loop3, logical block 10, lost async page write 20:28:37 executing program 0: syz_read_part_table(0x0, 0x700, 0x0) [ 3159.239434] syz-executor.2: attempt to access beyond end of device [ 3159.239434] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3159.241941] Buffer I/O error on dev loop2, logical block 10, lost async page write 20:28:37 executing program 0: syz_read_part_table(0x0, 0xb00, 0x0) [ 3159.314471] loop7: detected capacity change from 0 to 40 20:28:37 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x1c}}, 0x2000c004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)}], 0x1) 20:28:37 executing program 0: syz_read_part_table(0x0, 0x1800, 0x0) 20:28:52 executing program 0: syz_read_part_table(0x0, 0x2000, 0x0) 20:28:52 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(r0, &(0x7f0000000040)='\x00', 0x200002, 0x1b0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x185) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000240)) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)={[{@xattr}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) 20:28:52 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) fchmodat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xf2) 20:28:52 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file2\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b0008010100e73f002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000240)=""/175) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 20:28:52 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000400)={0x0, "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"}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x202, 0x4) write$binfmt_script(r0, &(0x7f0000000300)={'#! ', './file0', [{0x20, 'vfat\x00'}, {0x20, '\xe9/'}, {0x20, 'vfat\x00'}, {0x20, '%-^'}, {0x20, 'vfat\x00'}, {0x20, '!.{!'}], 0xa, "a589b7c8de8f74d41a87b298cd867375409c3d87bba1ae31637c439c55ff62c678d8b30293918c42150c8f08fae46ae16ac2c9af18bf7212db494a10cde271b310c278c7d6c9827fcd0be23b3f48f3ff3eb9d2e70b88a50ec6427ca54d912ff86f1da2f739191413ccb080cb4bb081b5b5985e22d06921370febb11978c97e484e7a999b77164c6b577306e39cd349fb116c7d6b112059ab50b184c8c89a0437326f83a63d09859c02f69da66dd693fb6ac66e2970d361"}, 0xe0) sendfile(r1, r0, 0x0, 0xfffffdef) sendmsg$sock(r3, &(0x7f0000000240)={&(0x7f0000000180)=@pptp={0x18, 0x2, {0x2, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x80, &(0x7f0000002880)=[{&(0x7f0000000640)="d1de145f20569faea5912d436f6d5859431cac886d44aa1939052136e032de45b0457e28eed1a9c8a9cbc64c04e6e61d95d5bdb698904e50df47cd3c963a7a4e710e007fe858af774c7290e2bdcd50e685033f182f7d61435f26959271eb966215eecbd93df662da5740b63886cbba7aa678d8d83381cebe4c855dae8a91029078e72cff6ef2bf58ba6aa5107a1a5568363c762988175c9b343de270de7e21c476ab920c6a2f7c28188cead4bc42da68df87d2674f6f45aa0f4f5cc00f", 0xbd}, {&(0x7f0000000700)="70fe6cbdf76229438f0b6a6d257f58c504958e67b8c51e9b8f6f9e065afdf3a2c0ae3f93c420720f4f3d6e7d8166ab8de29b2ed175e1fc0678e03322ac8e305d6025d05051600fd496232a5ac59dd195d6ae72a1647f95f31eec161bce8078521f2640d3400de4008a8529fbec377e5c05c3718100df692c6fe5c8aa9f2a25", 0x7f}, {&(0x7f0000000780)="9fa1cfe4f51207356a3f47a286909a362a20ec277a9a67865d61382073c52638dd875881493df4c2a58f0fd4a3f868b5f93c0ba587a406406926f5bcf514a47ec4c8930dfc92da23c1435a9a15cde87e5814f94705976d6b599dda63977d907261b9d739f9adeeb5967cfbbe893734568e8c048dd77986d974acca184320", 0x7e}, {&(0x7f0000000800)="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", 0x1000}, {&(0x7f0000001800)="505d1f7c5b1af52ba67d92ab786518f9821fa4eeed36153cdf38b8c0cc22dc66c9df18fbe701d1f9c223157c76db8e9ed500ae864f76adf86bca27ba129622d6d1e0fe16298f46ba9003847cea", 0x4d}, {&(0x7f0000001880)="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", 0x1000}], 0x6, &(0x7f00000000c0)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}], 0x18}, 0x44) 20:28:52 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(r0, &(0x7f0000000040)='./file1\x00', 0x40200, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mq_notify(0xffffffffffffffff, 0xfffffffffffffffc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x1f, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, 0x108) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) 20:28:52 executing program 6: fsopen(&(0x7f0000000580)='omfs\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001480)) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdded}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40d4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x1c}}, 0x2000c004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="02b2dccad213e1e6cf54b7a797f8f22a47f25b7658fb110b2e76f95b0f318b8fa745e6ffba4414d29a42bfab524bc5bffb17decc4540a6f00b9772f5f9789a9525790df8d989b23530d0a1398f2ad734c7ff47961be476ffeec81efa3d3aa64b8ea329261dfc2e1047a68670f0e5950d6a5414956bddd09e101b5b66e5742fe843413e065e3b86a242b37bc58c68153a45015f6f1ea67762c302e461e0c84bbb7f8d464f5a72d9fad56dac0c5028a4012a93dbc7da640786e3c9898cdd8fe091b166bfcd66e6257abc923ceaf90e994deded3fe8a59c2105f5caf366d32170ef51299dbf441bc3cddda352a2e0", 0xed}], 0x1) 20:28:52 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2800800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'system.', ']\x00'}, &(0x7f0000000240)=""/140, 0x8c) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 3174.013892] loop2: detected capacity change from 0 to 40 [ 3174.014812] loop4: detected capacity change from 0 to 40 [ 3174.017767] loop5: detected capacity change from 0 to 40 [ 3174.020214] loop1: detected capacity change from 0 to 40 [ 3174.021752] loop7: detected capacity change from 0 to 40 [ 3174.030227] FAT-fs (loop1): bogus number of directory entries (63) [ 3174.030795] FAT-fs (loop1): Can't find a valid FAT filesystem [ 3174.034638] loop3: detected capacity change from 0 to 40 [ 3174.099310] syz-executor.5: attempt to access beyond end of device [ 3174.099310] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3174.100589] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 3174.101180] syz-executor.4: attempt to access beyond end of device [ 3174.101180] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3174.102109] Buffer I/O error on dev loop4, logical block 10, lost async page write 20:28:52 executing program 0: syz_read_part_table(0x0, 0x6400, 0x0) [ 3174.111894] syz-executor.3: attempt to access beyond end of device [ 3174.111894] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3174.113162] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 3174.123419] syz-executor.3: attempt to access beyond end of device [ 3174.123419] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3174.124525] Buffer I/O error on dev loop3, logical block 10, lost async page write 20:28:52 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(r0, &(0x7f0000000040)='./file1\x00', 0x40200, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mq_notify(0xffffffffffffffff, 0xfffffffffffffffc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x1f, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, 0x108) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) [ 3174.181732] loop7: detected capacity change from 0 to 40 [ 3174.215842] syz-executor.2: attempt to access beyond end of device [ 3174.215842] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 3174.217032] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 3174.566513] ================================================================== [ 3174.567114] BUG: KASAN: use-after-free in __lock_acquire+0x42c9/0x5e70 [ 3174.567640] Read of size 8 at addr ffff88803e5b9cc8 by task syz-executor/13570 [ 3174.568193] [ 3174.568329] CPU: 1 PID: 13570 Comm: syz-executor Not tainted 5.19.0-next-20220815 #1 [ 3174.568900] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 3174.569757] Call Trace: [ 3174.569960] [ 3174.570135] dump_stack_lvl+0x8b/0xb3 [ 3174.570436] print_report.cold+0x5e/0x5e5 [ 3174.570760] ? __lock_acquire+0x42c9/0x5e70 [ 3174.571117] kasan_report+0xb1/0x1c0 [ 3174.571420] ? __lock_acquire+0x42c9/0x5e70 [ 3174.571759] __lock_acquire+0x42c9/0x5e70 [ 3174.572096] ? lock_chain_count+0x20/0x20 [ 3174.572433] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3174.572851] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3174.573265] ? finish_task_switch.isra.0+0x22d/0x8a0 [ 3174.573670] lock_acquire+0x1a2/0x530 [ 3174.573977] ? kmemleak_scan+0x21d/0x16f0 [ 3174.574311] ? lock_release+0x750/0x750 [ 3174.574626] ? mark_held_locks+0x9e/0xe0 [ 3174.574942] ? call_rcu+0x589/0xa30 [ 3174.575225] ? call_rcu+0x589/0xa30 [ 3174.575507] ? _raw_spin_lock_irq+0x41/0x50 [ 3174.575845] _raw_spin_lock_irq+0x32/0x50 [ 3174.576168] ? kmemleak_scan+0x21d/0x16f0 [ 3174.576489] kmemleak_scan+0x21d/0x16f0 [ 3174.576818] ? paint_ptr+0xc0/0xc0 [ 3174.577099] ? strncpy_from_user+0x204/0x3e0 [ 3174.577658] kmemleak_write+0x570/0x680 [ 3174.577971] ? kmemleak_scan+0x16f0/0x16f0 [ 3174.578436] ? debugfs_file_get+0x1ce/0x450 [ 3174.579101] ? debugfs_file_put+0xd0/0xd0 [ 3174.579424] full_proxy_write+0x11d/0x190 [ 3174.580072] vfs_write+0x2cb/0xd90 [ 3174.580353] ? full_proxy_poll+0x180/0x180 [ 3174.580678] ? __ia32_sys_pread64+0x220/0x220 [ 3174.581025] ? lock_release+0x3b2/0x750 [ 3174.581332] ? __up_read+0x192/0x730 [ 3174.581627] ? handle_mm_fault+0x6fd/0xa20 [ 3174.581956] ? up_write+0x480/0x480 [ 3174.582236] ? __fget_light+0x212/0x280 [ 3174.582545] ksys_write+0x127/0x250 [ 3174.582834] ? __ia32_sys_read+0xb0/0xb0 [ 3174.583141] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3174.583538] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3174.583934] do_syscall_64+0x3b/0x90 [ 3174.584223] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3174.584613] RIP: 0033:0x7f8186b685c3 [ 3174.584898] Code: 16 00 00 00 eb ae 90 b8 6e 00 00 00 eb a6 e8 44 ef 04 00 0f 1f 40 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 55 c3 0f 1f 40 00 48 83 ec 28 48 89 54 24 18 [ 3174.586238] RSP: 002b:00007ffd0827c368 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3174.586806] RAX: ffffffffffffffda RBX: 00007ffd0827c9a8 RCX: 00007f8186b685c3 [ 3174.587339] RDX: 0000000000000004 RSI: 00007f8186c1eed9 RDI: 0000000000000003 [ 3174.587866] RBP: 0000000000000002 R08: 0000000000000c66 R09: 00007ffd0827e080 [ 3174.588388] R10: 00007ffd0827e090 R11: 0000000000000246 R12: 00000000fffffff6 [ 3174.588913] R13: 00007ffd0827def1 R14: 0000000000000000 R15: 0000000000306ebb [ 3174.589447] [ 3174.589634] [ 3174.589764] Allocated by task 128: [ 3174.590032] kasan_save_stack+0x1e/0x40 [ 3174.590334] __kasan_slab_alloc+0x66/0x80 [ 3174.590642] kmem_cache_alloc+0x1b1/0x4a0 [ 3174.590950] __create_object.isra.0+0x3d/0xc10 [ 3174.591303] kmem_cache_alloc_trace+0x232/0x3d0 [ 3174.591650] kernfs_fop_open+0x9eb/0xec0 [ 3174.591968] do_dentry_open+0x4ae/0x1260 [ 3174.592279] path_openat+0x19e1/0x2800 [ 3174.592582] do_filp_open+0x1b6/0x410 [ 3174.592877] do_sys_openat2+0x171/0x4c0 [ 3174.593177] __x64_sys_openat+0x13f/0x1f0 [ 3174.593490] do_syscall_64+0x3b/0x90 [ 3174.593784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3174.594178] [ 3174.594310] Freed by task 13: [ 3174.594546] kasan_save_stack+0x1e/0x40 [ 3174.594846] kasan_set_track+0x21/0x30 [ 3174.595144] kasan_set_free_info+0x20/0x40 [ 3174.595471] __kasan_slab_free+0x108/0x190 [ 3174.595789] kmem_cache_free+0xfb/0x610 [ 3174.596085] rcu_core+0x7e2/0x2080 [ 3174.596354] __do_softirq+0x1c8/0x8d0 [ 3174.596643] [ 3174.596773] Last potentially related work creation: [ 3174.597136] kasan_save_stack+0x1e/0x40 [ 3174.597434] __kasan_record_aux_stack+0x97/0xb0 [ 3174.597800] call_rcu+0x6a/0xa30 [ 3174.598060] kmem_cache_free_bulk.part.0+0x305/0x840 [ 3174.598444] kfree_rcu_work+0x3fa/0xbd0 [ 3174.598747] process_one_work+0xa0f/0x1690 [ 3174.599077] worker_thread+0x637/0x1260 [ 3174.599390] kthread+0x2ed/0x3a0 [ 3174.599649] ret_from_fork+0x22/0x30 [ 3174.599939] [ 3174.600067] Second to last potentially related work creation: [ 3174.600489] kasan_save_stack+0x1e/0x40 [ 3174.600787] __kasan_record_aux_stack+0x97/0xb0 [ 3174.601143] call_rcu+0x6a/0xa30 [ 3174.601410] kmem_cache_free_bulk.part.0+0x305/0x840 [ 3174.601787] kfree_rcu_work+0x3fa/0xbd0 [ 3174.602074] process_one_work+0xa0f/0x1690 [ 3174.602385] worker_thread+0x637/0x1260 [ 3174.602683] kthread+0x2ed/0x3a0 [ 3174.602935] ret_from_fork+0x22/0x30 [ 3174.603206] [ 3174.603334] The buggy address belongs to the object at ffff88803e5b9cb0 [ 3174.603334] which belongs to the cache kmemleak_object of size 368 [ 3174.604228] The buggy address is located 24 bytes inside of [ 3174.604228] 368-byte region [ffff88803e5b9cb0, ffff88803e5b9e20) [ 3174.605043] [ 3174.605172] The buggy address belongs to the physical page: [ 3174.605571] page:0000000012978c1e refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3e5b8 [ 3174.606260] head:0000000012978c1e order:1 compound_mapcount:0 compound_pincount:0 [ 3174.606793] flags: 0x100000000010200(slab|head|node=0|zone=1) [ 3174.607221] raw: 0100000000010200 ffffea0001144280 dead000000000004 ffff888007c4f780 [ 3174.607770] raw: 0000000000000000 0000000000120012 00000001ffffffff 0000000000000000 [ 3174.608310] page dumped because: kasan: bad access detected [ 3174.608705] [ 3174.608831] Memory state around the buggy address: [ 3174.609176] ffff88803e5b9b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3174.609694] ffff88803e5b9c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc [ 3174.610204] >ffff88803e5b9c80: fc fc fc fc fc fc fa fb fb fb fb fb fb fb fb fb [ 3174.610720] ^ [ 3174.611127] ffff88803e5b9d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3174.611669] ffff88803e5b9d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3174.612208] ================================================================== [ 3174.612746] Disabling lock debugging due to kernel taint VM DIAGNOSIS: 20:28:53 Registers: info registers vcpu 0 RAX=ffffffff841ffe90 RBX=ffffffff85232900 RCX=ffffffff841e1d02 RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000000 RBP=0000000000000000 RSP=ffffffff85207e18 R8 =0000000000000001 R9 =ffff88806ce33b53 R10=ffffed100d9c676a R11=0000000000000001 R12=fffffbfff0a46520 R13=ffffffff85aedf90 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff841ffe9b RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffd14408bb8 CR3=000000004a906000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff4ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000900000004 0000564294d73910 YMM02=0000000000000000 0000000000000000 ffffff0f0e0d0c0b 0a09080706050403 YMM03=0000000000000000 0000000000000000 696e656420737365 636341002f737973 YMM04=0000000000000000 0000000000000000 0033333631343333 323d44455a494c41 YMM05=0000000000000000 0000000000000000 3d4d554e51455300 383d5145534b5349 YMM06=0000000000000000 0000000000000000 706f6f6c2f766564 2f3d454d414e5645 YMM07=0000000000000000 0000000000000000 5f4b534944006b63 6f6c623d4d455453 YMM08=0000000000000000 0000000000000000 49006d756e203c20 69000a313a56000a YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff824089d1 RDI=ffffffff8762a680 RBP=ffffffff8762a640 RSP=ffff88804201f268 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000034 R11=0000000000000001 R12=0000000000000034 R13=ffffffff8762a640 R14=0000000000000010 R15=ffffffff824089c0 RIP=ffffffff82408a29 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055555611a400 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007feaa88a2ae0 CR3=000000001b44a000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff4ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000ff00ff000000 0000000000000000 YMM02=0000000000000000 0000000000000000 ffff000000000000 ffff0000ff000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f YMM05=0000000000000000 0000000000000000 ffffffffffff0000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000006561 6124242f6867632f YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000564292751eec 00007ffd00363a37 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000