7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) 22:15:04 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$inet_udp(0x2, 0x2, 0x0) epoll_create(0x4) r0 = epoll_create(0x4) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) 22:15:04 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$inet_udp(0x2, 0x2, 0x0) r0 = epoll_create(0x4) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)) r2 = epoll_create(0x4) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)) 22:15:04 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$inet_udp(0x2, 0x2, 0x0) r0 = epoll_create(0x4) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)) [ 707.726939] loop7: detected capacity change from 0 to 40 [ 707.786822] FAT-fs (loop7): bogus number of reserved sectors [ 707.787704] FAT-fs (loop7): Can't find a valid FAT filesystem [ 707.825767] loop6: detected capacity change from 0 to 40 [ 707.838173] FAT-fs (loop6): bogus number of reserved sectors [ 707.838979] FAT-fs (loop6): Can't find a valid FAT filesystem 22:15:04 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) 22:15:04 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) 22:15:04 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$inet_udp(0x2, 0x2, 0x0) r0 = epoll_create(0x4) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)) r2 = epoll_create(0x4) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)) [ 708.086199] loop7: detected capacity change from 0 to 40 22:15:05 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$inet_udp(0x2, 0x2, 0x0) r0 = epoll_create(0x4) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) [ 708.127331] FAT-fs (loop7): invalid media value (0x00) [ 708.128191] FAT-fs (loop7): Can't find a valid FAT filesystem 22:15:05 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$inet_udp(0x2, 0x2, 0x0) epoll_create(0x4) signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) [ 708.263478] loop6: detected capacity change from 0 to 40 [ 708.313028] FAT-fs (loop6): bogus number of reserved sectors [ 708.313871] FAT-fs (loop6): Can't find a valid FAT filesystem 22:15:05 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) [ 708.538827] FAT-fs (loop5): bogus number of reserved sectors [ 708.539714] FAT-fs (loop5): Can't find a valid FAT filesystem 22:15:21 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:15:21 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) 22:15:21 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) [ 725.074801] loop1: detected capacity change from 0 to 40 22:15:21 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$inet_udp(0x2, 0x2, 0x0) r0 = epoll_create(0x4) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) 22:15:21 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$inet_udp(0x2, 0x2, 0x0) r0 = epoll_create(0x4) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)) epoll_create(0x4) signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) 22:15:21 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) 22:15:21 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$inet_udp(0x2, 0x2, 0x0) epoll_create(0x4) 22:15:21 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) [ 725.089956] loop7: detected capacity change from 0 to 40 [ 725.092442] loop0: detected capacity change from 0 to 40 [ 725.101185] loop6: detected capacity change from 0 to 40 [ 725.104254] FAT-fs (loop7): invalid media value (0x00) [ 725.104696] FAT-fs (loop7): Can't find a valid FAT filesystem [ 725.133934] FAT-fs (loop6): bogus number of reserved sectors [ 725.135125] FAT-fs (loop6): Can't find a valid FAT filesystem [ 725.157794] FAT-fs (loop5): bogus number of reserved sectors [ 725.158819] FAT-fs (loop5): Can't find a valid FAT filesystem 22:15:22 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$inet_udp(0x2, 0x2, 0x0) r0 = epoll_create(0x4) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)) epoll_create(0x4) 22:15:22 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = epoll_create(0x4) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) 22:15:22 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$inet_udp(0x2, 0x2, 0x0) 22:15:22 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) 22:15:22 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) [ 725.348761] loop7: detected capacity change from 0 to 40 [ 725.357533] FAT-fs (loop7): invalid media value (0x00) [ 725.357904] FAT-fs (loop7): Can't find a valid FAT filesystem [ 725.397724] loop6: detected capacity change from 0 to 40 [ 725.428297] FAT-fs (loop6): bogus number of reserved sectors [ 725.428834] FAT-fs (loop6): Can't find a valid FAT filesystem 22:15:22 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) [ 725.588428] loop7: detected capacity change from 0 to 40 [ 725.604965] FAT-fs (loop7): invalid media value (0x00) [ 725.605455] FAT-fs (loop7): Can't find a valid FAT filesystem 22:15:37 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:15:37 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) 22:15:37 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:15:37 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:15:37 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$inet_udp(0x2, 0x2, 0x0) r0 = epoll_create(0x4) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)) 22:15:37 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) 22:15:37 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:15:37 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) [ 740.360315] loop0: detected capacity change from 0 to 40 22:15:37 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$inet_udp(0x2, 0x2, 0x0) epoll_create(0x4) signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) [ 740.399716] FAT-fs (loop5): bogus number of reserved sectors [ 740.400350] FAT-fs (loop5): Can't find a valid FAT filesystem [ 740.404370] loop7: detected capacity change from 0 to 40 [ 740.409705] FAT-fs (loop7): invalid media value (0x00) [ 740.410254] FAT-fs (loop7): Can't find a valid FAT filesystem [ 740.411554] loop6: detected capacity change from 0 to 40 [ 740.419214] FAT-fs (loop6): bogus number of reserved sectors [ 740.420109] FAT-fs (loop6): Can't find a valid FAT filesystem 22:15:37 executing program 3: clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 740.483308] loop1: detected capacity change from 0 to 40 22:15:37 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$inet_udp(0x2, 0x2, 0x0) epoll_create(0x4) signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) 22:15:37 executing program 4: r0 = epoll_create(0x4) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) 22:15:37 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) 22:15:37 executing program 3: clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:15:37 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) [ 740.708680] loop7: detected capacity change from 0 to 40 [ 740.719646] FAT-fs (loop7): invalid media value (0x00) [ 740.720418] FAT-fs (loop7): Can't find a valid FAT filesystem [ 740.751853] loop6: detected capacity change from 0 to 40 22:15:37 executing program 4: r0 = epoll_create(0x4) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) [ 740.778641] FAT-fs (loop6): bogus number of reserved sectors [ 740.779728] FAT-fs (loop6): Can't find a valid FAT filesystem 22:15:37 executing program 3: clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:15:37 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$inet_udp(0x2, 0x2, 0x0) epoll_create(0x4) 22:15:54 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) 22:15:54 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:15:54 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:15:54 executing program 4: r0 = epoll_create(0x4) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) 22:15:54 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$inet_udp(0x2, 0x2, 0x0) 22:15:54 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:15:54 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:15:54 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) [ 757.625235] loop6: detected capacity change from 0 to 40 [ 757.648020] FAT-fs (loop6): bogus number of reserved sectors [ 757.648821] FAT-fs (loop6): Can't find a valid FAT filesystem 22:15:54 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 757.658021] loop1: detected capacity change from 0 to 40 [ 757.668354] loop0: detected capacity change from 0 to 40 22:15:54 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 757.690381] FAT-fs (loop5): bogus number of reserved sectors [ 757.691450] FAT-fs (loop5): Can't find a valid FAT filesystem [ 757.715818] loop7: detected capacity change from 0 to 40 [ 757.733705] FAT-fs (loop7): bogus number of FAT sectors [ 757.734503] FAT-fs (loop7): Can't find a valid FAT filesystem 22:15:54 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) 22:15:54 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:15:54 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) [ 757.976326] loop6: detected capacity change from 0 to 40 [ 757.986516] FAT-fs (loop6): bogus number of reserved sectors [ 757.987436] FAT-fs (loop6): Can't find a valid FAT filesystem 22:15:54 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) [ 758.200952] loop7: detected capacity change from 0 to 40 [ 758.232219] FAT-fs (loop7): bogus number of FAT sectors [ 758.232895] FAT-fs (loop7): Can't find a valid FAT filesystem 22:16:13 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) 22:16:13 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) 22:16:13 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:16:13 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:16:13 executing program 3: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:16:13 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) 22:16:13 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:16:13 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 776.281403] loop1: detected capacity change from 0 to 40 [ 776.286707] loop6: detected capacity change from 0 to 40 [ 776.292660] FAT-fs (loop6): bogus number of reserved sectors [ 776.293228] FAT-fs (loop6): Can't find a valid FAT filesystem [ 776.371641] loop0: detected capacity change from 0 to 40 [ 776.381459] loop7: detected capacity change from 0 to 40 22:16:13 executing program 3: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 776.402109] FAT-fs (loop5): bogus number of reserved sectors [ 776.402879] FAT-fs (loop5): Can't find a valid FAT filesystem [ 776.408106] FAT-fs (loop7): bogus number of FAT sectors [ 776.408820] FAT-fs (loop7): Can't find a valid FAT filesystem 22:16:13 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) 22:16:13 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 776.527971] loop6: detected capacity change from 0 to 40 22:16:13 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) [ 776.555568] FAT-fs (loop6): bogus number of reserved sectors [ 776.556522] FAT-fs (loop6): Can't find a valid FAT filesystem 22:16:13 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) 22:16:13 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) [ 776.700445] loop7: detected capacity change from 0 to 40 22:16:13 executing program 2: clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:16:13 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) 22:16:13 executing program 2: clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:16:13 executing program 3: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 776.936910] loop6: detected capacity change from 0 to 40 [ 776.941503] FAT-fs (loop6): invalid media value (0x00) [ 776.942398] FAT-fs (loop6): Can't find a valid FAT filesystem 22:16:30 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) 22:16:30 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) 22:16:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:16:30 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:16:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:16:30 executing program 2: clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:16:30 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:16:30 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) [ 793.977770] loop7: detected capacity change from 0 to 40 22:16:30 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:16:30 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) [ 794.029717] loop6: detected capacity change from 0 to 40 [ 794.055461] loop0: detected capacity change from 0 to 40 [ 794.063119] FAT-fs (loop6): invalid media value (0x00) [ 794.064096] FAT-fs (loop6): Can't find a valid FAT filesystem [ 794.089157] FAT-fs (loop5): bogus number of reserved sectors [ 794.090232] FAT-fs (loop5): Can't find a valid FAT filesystem 22:16:31 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) 22:16:31 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:16:31 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:16:31 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) 22:16:31 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 794.360024] loop7: detected capacity change from 0 to 40 22:16:31 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:16:31 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) 22:16:31 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 794.759806] loop6: detected capacity change from 0 to 40 [ 794.813759] FAT-fs (loop6): invalid media value (0x00) [ 794.814863] FAT-fs (loop6): Can't find a valid FAT filesystem 22:16:46 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) 22:16:46 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:16:46 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) 22:16:46 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:16:46 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:16:46 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) 22:16:46 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:16:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:16:46 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) 22:16:46 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 809.429739] loop5: detected capacity change from 0 to 40 [ 809.436919] FAT-fs (loop5): bogus number of reserved sectors [ 809.437443] FAT-fs (loop5): Can't find a valid FAT filesystem [ 809.446917] loop0: detected capacity change from 0 to 40 [ 809.481691] loop6: detected capacity change from 0 to 40 [ 809.486679] loop7: detected capacity change from 0 to 40 [ 809.499115] FAT-fs (loop6): invalid media value (0x00) [ 809.499866] FAT-fs (loop6): Can't find a valid FAT filesystem 22:16:46 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) [ 809.741751] loop7: detected capacity change from 0 to 40 22:17:02 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:17:02 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) 22:17:02 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:17:02 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) 22:17:02 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) 22:17:02 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:17:02 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) 22:17:02 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) [ 825.329137] loop7: detected capacity change from 0 to 40 22:17:02 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) [ 825.387921] loop6: detected capacity change from 0 to 40 [ 825.393507] loop5: detected capacity change from 0 to 40 [ 825.401032] FAT-fs (loop5): bogus number of reserved sectors [ 825.401434] FAT-fs (loop5): Can't find a valid FAT filesystem [ 825.407607] FAT-fs (loop6): invalid media value (0x00) 22:17:02 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 825.408430] FAT-fs (loop6): Can't find a valid FAT filesystem 22:17:02 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) [ 825.480440] loop7: detected capacity change from 0 to 40 22:17:02 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) 22:17:02 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:17:02 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:17:02 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:17:18 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:17:18 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:17:18 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:17:18 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:17:18 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x0) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) 22:17:18 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) 22:17:18 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) 22:17:18 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 841.332345] loop5: detected capacity change from 0 to 40 [ 841.339709] FAT-fs (loop5): bogus number of reserved sectors [ 841.340309] FAT-fs (loop5): Can't find a valid FAT filesystem [ 841.345247] loop6: detected capacity change from 0 to 40 [ 841.348081] FAT-fs (loop6): invalid media value (0x00) [ 841.348703] FAT-fs (loop6): Can't find a valid FAT filesystem [ 841.361237] loop7: detected capacity change from 0 to 40 22:17:18 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 841.424544] FAT-fs (loop1): bogus number of reserved sectors [ 841.425209] FAT-fs (loop1): Can't find a valid FAT filesystem 22:17:18 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x0) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) 22:17:18 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) 22:17:18 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) [ 841.580507] loop7: detected capacity change from 0 to 40 22:17:18 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 841.629660] loop6: detected capacity change from 0 to 40 22:17:18 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x0) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) [ 841.653683] FAT-fs (loop6): bogus number of FAT sectors [ 841.654730] FAT-fs (loop6): Can't find a valid FAT filesystem 22:17:18 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) 22:17:18 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) [ 841.862928] loop7: detected capacity change from 0 to 40 22:17:36 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) [ 859.663503] loop7: detected capacity change from 0 to 40 22:17:36 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) 22:17:36 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) 22:17:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:17:36 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:17:36 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:17:36 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:17:36 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_create(0x4) epoll_wait(0xffffffffffffffff, &(0x7f0000000280)=[{}], 0x1, 0x4) [ 859.709901] FAT-fs (loop1): bogus number of reserved sectors [ 859.710324] FAT-fs (loop1): Can't find a valid FAT filesystem [ 859.731207] loop5: detected capacity change from 0 to 40 22:17:36 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_create(0x4) epoll_wait(0xffffffffffffffff, &(0x7f0000000280)=[{}], 0x1, 0x4) 22:17:36 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) [ 859.739956] loop6: detected capacity change from 0 to 40 [ 859.744625] FAT-fs (loop6): bogus number of FAT sectors [ 859.745016] FAT-fs (loop6): Can't find a valid FAT filesystem [ 859.748146] FAT-fs (loop5): bogus number of reserved sectors [ 859.748616] FAT-fs (loop5): Can't find a valid FAT filesystem 22:17:36 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) 22:17:36 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 859.847559] loop7: detected capacity change from 0 to 40 22:17:36 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) 22:17:36 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_create(0x4) epoll_wait(0xffffffffffffffff, &(0x7f0000000280)=[{}], 0x1, 0x4) 22:17:36 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) 22:17:36 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 860.004098] loop6: detected capacity change from 0 to 40 [ 860.013709] FAT-fs (loop6): bogus number of FAT sectors [ 860.014271] FAT-fs (loop6): Can't find a valid FAT filesystem [ 860.018549] loop7: detected capacity change from 0 to 40 22:17:36 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:17:36 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) epoll_wait(r0, 0x0, 0x0, 0x4) 22:17:50 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:17:50 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:17:50 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) 22:17:50 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) epoll_wait(r0, 0x0, 0x0, 0x4) 22:17:50 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) 22:17:50 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:17:50 executing program 3: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:17:50 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) [ 873.803931] loop6: detected capacity change from 0 to 40 [ 873.808816] loop7: detected capacity change from 0 to 40 [ 873.814564] loop5: detected capacity change from 0 to 40 [ 873.816713] FAT-fs (loop0): bogus number of reserved sectors [ 873.817240] FAT-fs (loop0): Can't find a valid FAT filesystem [ 873.821046] FAT-fs (loop5): bogus number of reserved sectors [ 873.821565] FAT-fs (loop5): Can't find a valid FAT filesystem [ 873.874326] FAT-fs (loop1): bogus number of reserved sectors [ 873.875092] FAT-fs (loop1): Can't find a valid FAT filesystem 22:17:50 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:17:50 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) epoll_wait(r0, 0x0, 0x0, 0x4) 22:17:50 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) 22:17:50 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) [ 874.081490] loop6: detected capacity change from 0 to 40 [ 874.148825] loop7: detected capacity change from 0 to 40 22:17:51 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:17:51 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) epoll_wait(r0, &(0x7f0000000280), 0x0, 0x4) 22:17:51 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) 22:17:51 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) [ 874.481424] loop6: detected capacity change from 0 to 40 [ 874.556215] loop7: detected capacity change from 0 to 40 22:18:10 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:18:10 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) 22:18:10 executing program 3: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:18:10 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:18:10 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) 22:18:10 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:18:10 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:18:10 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) epoll_wait(r0, &(0x7f0000000280), 0x0, 0x4) [ 893.279144] FAT-fs (loop1): bogus number of reserved sectors [ 893.279913] FAT-fs (loop1): Can't find a valid FAT filesystem [ 893.327801] loop6: detected capacity change from 0 to 40 [ 893.329583] loop5: detected capacity change from 0 to 40 [ 893.332863] loop7: detected capacity change from 0 to 40 [ 893.339754] FAT-fs (loop0): bogus number of reserved sectors [ 893.340530] FAT-fs (loop0): Can't find a valid FAT filesystem [ 893.350759] FAT-fs (loop5): bogus number of reserved sectors [ 893.351677] FAT-fs (loop5): Can't find a valid FAT filesystem 22:18:10 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:18:10 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) epoll_wait(r0, &(0x7f0000000280), 0x0, 0x4) 22:18:10 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) 22:18:10 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) [ 893.722722] loop7: detected capacity change from 0 to 40 22:18:10 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x0) [ 893.833106] loop6: detected capacity change from 0 to 40 22:18:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b1e}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x18292}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) preadv(r1, &(0x7f0000000400), 0x0, 0xfffffffc, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0103004d34ecc09716cf1c00000004000180"], 0x18}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0x9a, 0x30, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x10, 0x4c3, 0x14000}}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$nl_audit(0x10, 0x3, 0x9) r7 = epoll_create(0x4) r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000240)) ioctl$sock_inet_SIOCRTMSG(r8, 0x890d, &(0x7f0000000200)={0x0, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x394, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000100)='bond0\x00', 0x7fffffff, 0x40}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@loopback, @in=@broadcast, 0x4e20, 0x6, 0x4e23, 0x7000, 0x2, 0x80, 0x60, 0x73, r9, 0xffffffffffffffff}, {0x2, 0x80000000, 0x1000, 0x1bff, 0xed85, 0x6, 0x3, 0x9}, {0x9, 0x1, 0x100, 0x2}, 0x9, 0x6e6bba, 0x0, 0x1, 0x2, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d4, 0xff}, 0x0, @in6=@remote, 0x3501, 0x0, 0x3, 0xc1, 0x7, 0xb7, 0x5}}, 0xe8) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @remote, @broadcast}}}], 0x20}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000900)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x13c, r3, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x10000}, 0x4000) 22:18:10 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(0x0, 0x101) [ 894.197567] loop7: detected capacity change from 0 to 40 22:18:26 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x0) 22:18:26 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = epoll_create(0x4) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)) r3 = epoll_create(0x4) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)) setsockopt$inet_int(r4, 0x0, 0xd, &(0x7f0000000040), 0x4) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x5b}}, './file0\x00'}) r5 = epoll_create(0x4) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000240)) epoll_wait(r5, &(0x7f0000000000)=[{}], 0x1, 0x0) epoll_wait(r5, &(0x7f0000000280)=[{}], 0x1, 0x4) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) 22:18:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b1e}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x18292}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) preadv(r1, &(0x7f0000000400), 0x0, 0xfffffffc, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="0103004d34ecc09716cf1c00000004000180"], 0x18}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0x9a, 0x30, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x10, 0x4c3, 0x14000}}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$nl_audit(0x10, 0x3, 0x9) r7 = epoll_create(0x4) r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000240)) ioctl$sock_inet_SIOCRTMSG(r8, 0x890d, &(0x7f0000000200)={0x0, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x394, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000100)='bond0\x00', 0x7fffffff, 0x40}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@loopback, @in=@broadcast, 0x4e20, 0x6, 0x4e23, 0x7000, 0x2, 0x80, 0x60, 0x73, r9, 0xffffffffffffffff}, {0x2, 0x80000000, 0x1000, 0x1bff, 0xed85, 0x6, 0x3, 0x9}, {0x9, 0x1, 0x100, 0x2}, 0x9, 0x6e6bba, 0x0, 0x1, 0x2, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d4, 0xff}, 0x0, @in6=@remote, 0x3501, 0x0, 0x3, 0xc1, 0x7, 0xb7, 0x5}}, 0xe8) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @remote, @broadcast}}}], 0x20}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000900)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x13c, r3, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x10000}, 0x4000) 22:18:26 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:18:26 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) 22:18:26 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:18:26 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:18:26 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(0x0, 0x101) [ 909.663373] loop6: detected capacity change from 0 to 40 [ 909.663454] loop7: detected capacity change from 0 to 40 [ 909.673251] FAT-fs (loop1): bogus number of reserved sectors [ 909.673626] FAT-fs (loop1): Can't find a valid FAT filesystem [ 909.678278] FAT-fs (loop0): bogus number of reserved sectors [ 909.678651] FAT-fs (loop0): Can't find a valid FAT filesystem [ 909.723268] loop5: detected capacity change from 0 to 40 [ 909.745909] FAT-fs (loop5): bogus number of reserved sectors [ 909.746318] FAT-fs (loop5): Can't find a valid FAT filesystem 22:18:26 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(0x0, 0x101) 22:18:26 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) 22:18:26 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x0) 22:18:26 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 1) [ 910.001142] loop6: detected capacity change from 0 to 40 [ 910.004642] loop7: detected capacity change from 0 to 40 22:18:26 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) (fail_nth: 1) 22:18:27 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) 22:18:27 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 1) 22:18:27 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:18:27 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:18:27 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) [ 910.297112] loop6: detected capacity change from 0 to 40 [ 910.303301] loop7: detected capacity change from 0 to 40 22:18:27 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:18:46 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:18:46 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) 22:18:46 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363502, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:18:46 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:18:46 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) epoll_wait(r0, &(0x7f0000000280)=[{}], 0xf, 0x4) 22:18:46 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:18:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:18:46 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363502, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 929.605912] loop6: detected capacity change from 0 to 40 [ 929.675117] loop7: detected capacity change from 0 to 40 [ 929.686393] loop5: detected capacity change from 0 to 40 [ 929.690425] FAT-fs (loop1): bogus number of reserved sectors [ 929.691257] FAT-fs (loop1): Can't find a valid FAT filesystem [ 929.699304] FAT-fs (loop0): bogus number of reserved sectors [ 929.700363] FAT-fs (loop0): Can't find a valid FAT filesystem [ 929.716379] FAT-fs (loop5): bogus number of reserved sectors [ 929.717514] FAT-fs (loop5): Can't find a valid FAT filesystem 22:18:46 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) 22:18:46 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) 22:18:46 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363503, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:18:46 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363503, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:18:46 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) [ 929.962964] loop6: detected capacity change from 0 to 40 [ 929.975562] loop7: detected capacity change from 0 to 40 22:19:01 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363504, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 945.115793] loop5: detected capacity change from 0 to 40 [ 945.118926] FAT-fs (loop5): bogus number of reserved sectors [ 945.119374] FAT-fs (loop5): Can't find a valid FAT filesystem [ 945.136648] loop7: detected capacity change from 0 to 40 22:19:01 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xb}, 0x0, 0x4}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) 22:19:01 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:19:01 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:19:01 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363504, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:19:01 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:19:01 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:19:01 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) [ 945.142524] FAT-fs (loop7): bogus number of reserved sectors [ 945.142918] FAT-fs (loop7): Can't find a valid FAT filesystem [ 945.166064] loop6: detected capacity change from 0 to 40 [ 945.168273] loop1: detected capacity change from 0 to 40 [ 945.182215] FAT-fs (loop1): bogus number of reserved sectors [ 945.182793] FAT-fs (loop1): Can't find a valid FAT filesystem [ 945.208781] FAT-fs (loop0): bogus number of reserved sectors [ 945.209706] FAT-fs (loop0): Can't find a valid FAT filesystem 22:19:02 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363508, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:19:02 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363508, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:19:02 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) 22:19:02 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) r1 = inotify_init() r2 = epoll_create(0x4) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)) epoll_wait(r2, &(0x7f0000000000)=[{}], 0x1, 0x0) r4 = epoll_create(0x4) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000240)) r6 = epoll_create(0x4) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000240)) r8 = epoll_create(0x4) r9 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000240)) io_submit(0x0, 0x4, &(0x7f0000001480)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, r1, &(0x7f0000000100)="242156ce77de44ca25588ae9b4c4cd61f0b56c903133c38a26f46798b9463a87c0e8d97c32c0b8c685469f35496b60cf3a36cd6f0390097cb37af05f4f67a26af12cde3bf39f2827394dcff9bdb4a81959116e3d309904ad186b56537148c3353ad601e2c901b7827a9e7b928d37901ba20a07e3898c3c723ef942e288218efc7cba14168bbc65b28488ba9ae1134abe2069c742b16ab4798ad258f70f7ca49a40051cbbcb85508773d7dd664552170d0a3dfb3fd249855d11dc5c18a05704c24e68f33b08bf61838851001931bfc53163bae8517355795be07b7aee061e", 0xde, 0x3f, 0x0, 0x3}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x800, r2, &(0x7f00000002c0)="d4e7519b5cddd64bc56a253af6d907068e4e3f3b2e3f22647c0b94846934954793657ff4c0d6ae63afe566d915d32ffa09f15178634b8527acc417208199ed7930f09064148aa15594a03d514ee68ec66ea3bf9edee1b5818ef19b3401e263c3c8eb9631320b6decb3a66e14132b568c8eabf7bd1bca1f58dbef5ae11e362a87b1fca15816ebb5bb", 0x88, 0x5, 0x0, 0x2}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x2, r5, &(0x7f0000000380)="8de4c9c5785b6c5234931f4169bd75423b33e852484378019b187dd3e376cfe7fc75b068071b26a641f60fbbaf4bc433dc36f028097de1186dc6431ba2e28ca59ba1313088d0eaa6ca5e1e599f7e0fe49bd840099337212b86e846fe10ffb85052cba36798aa6b9683efec8fb30b7e81a73981746fa09424480f27fc98a5aec386c6961dcfe0208b0fe35f2c9753ce8bdeec013d4366b0a11b81fd4cc48da2d329291691ed86ea5ad89608f332da2681e8a2c909e8dcec5790ecace4c7a451e81aaf4f1bab93f0834fffac828b", 0xcd, 0x6, 0x0, 0x0, r7}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, r9, &(0x7f0000000480)="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", 0x1000, 0xc5, 0x0, 0x2}]) 22:19:02 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x12336350e, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:19:02 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x12336350e, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 945.509267] loop6: detected capacity change from 0 to 40 22:19:20 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363510, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:19:20 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) r1 = inotify_init() r2 = epoll_create(0x4) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)) epoll_wait(r2, &(0x7f0000000000)=[{}], 0x1, 0x0) r4 = epoll_create(0x4) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000240)) r6 = epoll_create(0x4) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000240)) r8 = epoll_create(0x4) r9 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000240)) io_submit(0x0, 0x4, &(0x7f0000001480)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, r1, &(0x7f0000000100)="242156ce77de44ca25588ae9b4c4cd61f0b56c903133c38a26f46798b9463a87c0e8d97c32c0b8c685469f35496b60cf3a36cd6f0390097cb37af05f4f67a26af12cde3bf39f2827394dcff9bdb4a81959116e3d309904ad186b56537148c3353ad601e2c901b7827a9e7b928d37901ba20a07e3898c3c723ef942e288218efc7cba14168bbc65b28488ba9ae1134abe2069c742b16ab4798ad258f70f7ca49a40051cbbcb85508773d7dd664552170d0a3dfb3fd249855d11dc5c18a05704c24e68f33b08bf61838851001931bfc53163bae8517355795be07b7aee061e", 0xde, 0x3f, 0x0, 0x3}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x800, r2, &(0x7f00000002c0)="d4e7519b5cddd64bc56a253af6d907068e4e3f3b2e3f22647c0b94846934954793657ff4c0d6ae63afe566d915d32ffa09f15178634b8527acc417208199ed7930f09064148aa15594a03d514ee68ec66ea3bf9edee1b5818ef19b3401e263c3c8eb9631320b6decb3a66e14132b568c8eabf7bd1bca1f58dbef5ae11e362a87b1fca15816ebb5bb", 0x88, 0x5, 0x0, 0x2}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x2, r5, &(0x7f0000000380)="8de4c9c5785b6c5234931f4169bd75423b33e852484378019b187dd3e376cfe7fc75b068071b26a641f60fbbaf4bc433dc36f028097de1186dc6431ba2e28ca59ba1313088d0eaa6ca5e1e599f7e0fe49bd840099337212b86e846fe10ffb85052cba36798aa6b9683efec8fb30b7e81a73981746fa09424480f27fc98a5aec386c6961dcfe0208b0fe35f2c9753ce8bdeec013d4366b0a11b81fd4cc48da2d329291691ed86ea5ad89608f332da2681e8a2c909e8dcec5790ecace4c7a451e81aaf4f1bab93f0834fffac828b", 0xcd, 0x6, 0x0, 0x0, r7}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, r9, &(0x7f0000000480)="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", 0x1000, 0xc5, 0x0, 0x2}]) 22:19:20 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) [ 963.330661] loop5: detected capacity change from 0 to 40 [ 963.332377] loop1: detected capacity change from 0 to 40 [ 963.337424] FAT-fs (loop5): bogus number of reserved sectors [ 963.337845] FAT-fs (loop5): Can't find a valid FAT filesystem [ 963.338301] FAT-fs (loop0): bogus number of reserved sectors [ 963.338711] FAT-fs (loop0): Can't find a valid FAT filesystem [ 963.339302] FAT-fs (loop1): bogus number of reserved sectors [ 963.339717] FAT-fs (loop1): Can't find a valid FAT filesystem 22:19:20 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x80, 0x0, 0x0, 0x0, 0x20000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x76f7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x4) r2 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x7ff, 0x7, &(0x7f00000016c0)=[{&(0x7f00000002c0)="5c8d69b5b1b0ddee50e2363366d89ca253dd8c22d15cc74a169af5b92fa5c17a505e29f5dd4a9e57d9f62fe4bbe82c63a2b0d805a1b243f2ff036228a90aa83b53dc0cede240b58e27a2cb152ddbd3a3db0f55", 0x53, 0xc18}, {&(0x7f0000000340)="b6030ff7c30fa72c4ea32f2198b3a0c926f367110bfea769177fd450cc914ac4df0e1efb3aa926c8108d61eb59ec319914f7d6451bf1225cdf56b0088bcc082dca4d16f41e1bf75adcfa233814868e11ce11bd735eae10781c9c8da01a618668fdf54b90425241d54760b7e991d4d91994ca1e28d91dc53254cb43caf9b641bd6bda5865c722f0d2c849b845db7d13c936d99d8c7c2cdd0fa2b945d7492540dae277bcb9184cffac4821a2b2424ab3f3f8f9d423226c8c623b373f6f058cd3d10d609f334e08f49be828527c2ac630", 0xcf, 0x4}, {&(0x7f0000000440)="9e72dbe6ab91b1dff466ebaf4a4854fee3ffefad1cb1b9a460a0b541e0783657aa0c3b20", 0x24, 0xcd}, {&(0x7f0000000480)="62f433c4b8a2bda53e2e3629415d8bcd103b96c49e3ca8c703fda8c08dfdd51e9556bec19ebe21426107816c01f1577a610a14d3e8b18adbd85c3b1882d574aca522773459a487cf1fad0b1574dd3b62a1385a2c5049a60d0129f6ffa164a2b342cd4be328ac09bec78843e87cb180d946680ffb960a2d5e771ee0b29ec3fdfaa1daee7ef56c98657afa86ea7b03d54ea41064c847a58814e3c6b95c626e93dcb9b05fb475df983a867869d1a9ab3c85978cccc8415e0428eb78d28b7a3af64745c0b52ce9405ad2d9422630bd09630f788c58687dccccdb9128f6637bf502b33817aadffc7221d4fa741600fb4bd2f40fb823d14bad208811", 0xf9, 0xff}, {&(0x7f0000000580)="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", 0x1000, 0x8}, {&(0x7f0000001580)="49c4af67e2c01ccecf0dbcce07726593d73d6c018d18bfc7b62f552bccdcf0cf0f884a4aaea3a8", 0x27, 0x81}, {&(0x7f00000015c0)="0f7237ff07f1d46ed6f5cba860bcd1a5141451a62446d43766bd8f49fb06728e414908338f6a621a4883b6011881748327533089a3a0e4dab237328ddf22f73408d6f1a8d60961d3bfb2ba41ac4f8db3b211dc0a02d0107b313dd081c380161f9d0b458cce83b9c91bafd6c1ac870529b3a69e9a5f659e754625725c0ad68e6ff31f0b023507c89d53b2cf0f7c3e9b472a8b876e972db7d76998602e966b7e6794d299910e3d561c0081884216cdbc33f5da8d1ee0f3adbd623d3c070036f102fa053ca7c8f13367dfa642a20f8f4120cbe3765fa17033ed2436dcd1e589", 0xde, 0xffffffff}], 0x109c040, &(0x7f0000001780)={[{@dots}], [{@obj_type}, {@smackfshat={'smackfshat', 0x3d, '-}'}}, {@smackfsdef={'smackfsdef', 0x3d, '&+-'}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x34, 0x34, 0x31, 0x0, 0x31, 0x63, 0x37], 0x2d, [0x62, 0x61, 0x61, 0x35], 0x2d, [0x37, 0x37, 0x64, 0x62], 0x2d, [0x62, 0x37, 0x65, 0x32], 0x2d, [0x62, 0x63, 0x62, 0x30, 0x59, 0x35, 0x62, 0x33]}}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}]}) poll(&(0x7f0000001800)=[{r2}], 0x1, 0x3) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, @in_args={0x4}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f0000000180)={0x138f44cc8faea292}) ioctl$TIOCGPTPEER(r3, 0x5441, 0x1000000000000) epoll_wait(r1, &(0x7f0000000280)=[{}], 0x1, 0x4) 22:19:20 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) 22:19:20 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363510, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:19:20 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:19:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:19:20 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363511, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 963.385852] loop6: detected capacity change from 0 to 40 22:19:20 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363511, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:19:20 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:19:20 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) 22:19:20 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f00000005c0), 0x10001, 0x1) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xb0, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x20}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40010}, 0x8c0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x4) epoll_wait(r1, &(0x7f0000000280)=[{}], 0x1, 0x4) 22:19:20 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 963.565292] loop7: detected capacity change from 0 to 40 [ 963.592332] loop6: detected capacity change from 0 to 40 22:19:20 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:19:20 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) 22:19:20 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:19:20 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) [ 963.837615] loop6: detected capacity change from 0 to 40 [ 963.862909] loop7: detected capacity change from 0 to 40 22:19:38 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:19:38 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:19:38 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:19:38 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20804, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() capset(&(0x7f0000000240)={0x20080522, r1}, &(0x7f0000000380)) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x40, 0x1, 0x4, 0x0, 0x0, 0x8, 0xa2210, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0xffffffff}, 0x10, 0x5, 0x8, 0xf, 0x7f, 0x5, 0x8001, 0x0, 0x8, 0x0, 0x4df}, r1, 0xffffffffffffffff, r0, 0x1) r2 = epoll_create(0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/spi_transport', 0x80, 0x1) epoll_wait(r2, &(0x7f0000000280)=[{}], 0x1, 0x4) 22:19:38 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:19:38 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:19:38 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:19:38 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) 22:19:38 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 982.033920] loop6: detected capacity change from 0 to 40 [ 982.041051] loop0: detected capacity change from 0 to 40 [ 982.043337] FAT-fs (loop0): bogus number of reserved sectors [ 982.043749] FAT-fs (loop0): Can't find a valid FAT filesystem 22:19:38 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x1a4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) [ 982.055592] loop1: detected capacity change from 0 to 40 [ 982.057461] FAT-fs (loop1): bogus number of reserved sectors [ 982.057864] FAT-fs (loop1): Can't find a valid FAT filesystem [ 982.081752] loop7: detected capacity change from 0 to 40 [ 982.084228] loop5: detected capacity change from 0 to 40 [ 982.100854] FAT-fs (loop5): bogus number of reserved sectors [ 982.101873] FAT-fs (loop5): Can't find a valid FAT filesystem 22:19:39 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) 22:19:39 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:19:39 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) truncate(&(0x7f0000000180)='./file1\x00', 0x0) [ 982.362451] loop6: detected capacity change from 0 to 40 22:19:39 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x424200, 0x22) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) [ 982.428265] loop7: detected capacity change from 0 to 40 22:19:39 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:19:39 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x8}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:19:39 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x8}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:19:55 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) r1 = epoll_create(0x4) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)) sendmsg$unix(r2, &(0x7f0000000140)={&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x4084}, 0x81) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) 22:19:55 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:19:55 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:19:55 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:19:55 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) [ 999.068799] loop0: detected capacity change from 0 to 40 [ 999.073036] FAT-fs (loop0): bogus number of reserved sectors [ 999.073407] FAT-fs (loop0): Can't find a valid FAT filesystem [ 999.109231] loop5: detected capacity change from 0 to 40 [ 999.120705] FAT-fs (loop5): bogus number of reserved sectors [ 999.121139] FAT-fs (loop5): Can't find a valid FAT filesystem 22:19:56 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:19:56 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x10}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:19:56 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:19:56 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) [ 999.198469] loop6: detected capacity change from 0 to 40 [ 999.204024] loop7: detected capacity change from 0 to 40 [ 999.220845] loop1: detected capacity change from 0 to 40 [ 999.236010] FAT-fs (loop1): bogus number of reserved sectors [ 999.236542] FAT-fs (loop1): Can't find a valid FAT filesystem 22:19:56 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x10}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:19:56 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(0x0, 0x101) 22:19:56 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) r1 = epoll_create(0x4) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x2007}) 22:19:56 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:19:56 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) truncate(&(0x7f0000000180)='./file1\x00', 0x0) [ 999.425436] loop6: detected capacity change from 0 to 40 22:19:56 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:19:56 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(0x0, 0x101) 22:19:56 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) [ 999.584509] loop7: detected capacity change from 0 to 40 [ 999.665923] loop6: detected capacity change from 0 to 40 22:20:14 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:20:14 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x104}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:20:14 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:20:14 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:20:14 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7d, 0x7f, 0x6, 0x0, 0x0, 0x2, 0xa0200, 0x4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x100, 0x2, @perf_bp={&(0x7f0000000000), 0x1}, 0x12020, 0x3, 0x3, 0x1, 0x12b78946, 0xfff, 0x80, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x5, 0xffffffffffffffff, 0x2) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) 22:20:14 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x12c}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:20:14 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:20:14 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(0x0, 0x101) [ 1017.871499] loop7: detected capacity change from 0 to 40 [ 1017.872023] loop1: detected capacity change from 0 to 40 [ 1017.876817] loop0: detected capacity change from 0 to 40 [ 1017.877503] loop6: detected capacity change from 0 to 40 [ 1017.878789] loop5: detected capacity change from 0 to 40 [ 1017.889095] FAT-fs (loop1): bogus number of reserved sectors [ 1017.890099] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1017.892930] FAT-fs (loop5): invalid media value (0x00) [ 1017.893771] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1017.895945] FAT-fs (loop0): bogus number of reserved sectors [ 1017.897058] FAT-fs (loop0): Can't find a valid FAT filesystem 22:20:14 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x12c}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:20:14 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x145}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:20:14 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:20:14 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/softnet_stat\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create(0x391) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f00000002c0)={0x2, 0x1000, @status={[0x5, 0x1, 0x7, 0x7fff, 0x0, 0x9]}, [0x3, 0x81, 0x20, 0x3, 0x78c, 0xef, 0x1, 0x3, 0x7ff, 0x2, 0x5, 0x9, 0xfffffffffffffffe, 0x3, 0x2, 0x1ff, 0x3, 0x4, 0xfffffffffffffff8, 0x5, 0xdbb978e, 0x7, 0x2, 0x4, 0x1f, 0x6, 0x4, 0x18000000, 0xa5e7, 0x81, 0x1ff, 0xd2, 0x100, 0x5, 0x0, 0x0, 0x0, 0x6, 0x2, 0x1, 0x101, 0x6, 0x4, 0x400, 0x7, 0x1f, 0x1ff, 0xffffffffffff3b8f, 0x1, 0x80, 0x1, 0xfffffffffffffffa, 0x10000, 0x6, 0x20, 0x100, 0x6, 0x9, 0x5, 0x709, 0x10001, 0x0, 0x40]}) epoll_wait(r2, &(0x7f0000000280)=[{}], 0x1, 0x4) fcntl$getflags(r2, 0x401) 22:20:14 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) [ 1018.128639] loop6: detected capacity change from 0 to 40 22:20:15 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x1f4}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1018.138359] loop7: detected capacity change from 0 to 40 22:20:15 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x132}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:20:36 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:20:36 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x37, 0x4, 0x5, 0x4, 0x0, 0x100000001, 0x21040, 0xc, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_config_ext={0xfffffffffffffff7, 0xb33e}, 0x10080, 0x6, 0xff, 0x9, 0x7, 0x1, 0x7, 0x0, 0xc6d, 0x0, 0x7087}, 0x0, 0xc, r1, 0x2) r2 = gettid() r3 = gettid() capset(&(0x7f0000000240)={0x20080522, r3}, &(0x7f0000000380)) capset(&(0x7f00000001c0)={0x19980330, r3}, &(0x7f0000000380)={0x0, 0x0, 0x9, 0xfffffffc, 0x2}) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x4, 0x9, 0x24, 0x79, 0x0, 0x400, 0x200, 0x6, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0xffffffff, 0x6}, 0x4000, 0x1000, 0x4, 0x5, 0x5, 0x7fffffff, 0xffff, 0x0, 0x5, 0x0, 0x6}, r2, 0x3, 0xffffffffffffffff, 0xa) signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x200]}, 0x8, 0x40000) r4 = epoll_create(0x4) epoll_wait(r4, &(0x7f0000000280)=[{}], 0x1, 0x4) 22:20:36 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:20:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) [ 1039.423471] loop7: detected capacity change from 0 to 40 [ 1039.428690] loop5: detected capacity change from 0 to 40 [ 1039.430722] loop0: detected capacity change from 0 to 40 [ 1039.433307] loop1: detected capacity change from 0 to 40 22:20:36 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:20:36 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:20:36 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x1f6}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1039.452086] FAT-fs (loop1): bogus number of reserved sectors [ 1039.452521] FAT-fs (loop1): Can't find a valid FAT filesystem 22:20:36 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x15d}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1039.457645] capability: warning: `syz-executor.4' uses 32-bit capabilities (legacy support in use) [ 1039.467512] FAT-fs (loop5): invalid media value (0x00) [ 1039.468459] FAT-fs (loop5): Can't find a valid FAT filesystem 22:20:36 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x1f2}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1039.501267] FAT-fs (loop0): bogus number of reserved sectors [ 1039.501705] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1039.505847] loop6: detected capacity change from 0 to 40 22:20:36 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) r1 = epoll_create(0x4) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040)={0x40000000}) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) 22:20:36 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:20:36 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x1f8}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:20:36 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) [ 1039.745246] loop6: detected capacity change from 0 to 40 [ 1039.773898] loop7: detected capacity change from 0 to 40 22:20:36 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x20a}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:20:36 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x1fa}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:20:52 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x7) r1 = epoll_create(0x4) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000240)) epoll_wait(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, 0x0) readv(0xffffffffffffffff, &(0x7f0000001540)=[{&(0x7f0000000000)=""/46, 0x2e}, {&(0x7f0000000100)=""/92, 0x5c}, {&(0x7f0000000180)=""/221, 0xdd}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f0000000040)=""/6, 0x6}, {&(0x7f00000012c0)=""/91, 0x5b}, {&(0x7f0000001340)=""/194, 0xc2}, {&(0x7f0000001440)=""/221, 0xdd}], 0x8) r4 = epoll_create(0x4) r5 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000001600)={0x2008}) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000240)) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0x8]}, 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000001680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r7, @ANYBLOB="03000000000000002e2f66695a653000824ff405e654239bbbad3bb5aa695e4137fbe37b196e4c563bda506bcb5713773731317fd7ed3c6a0141fba81964"]) epoll_wait(r4, &(0x7f0000000280)=[{}], 0x1, 0x4) eventfd2(0x0, 0x80000) 22:20:52 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:20:52 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:20:52 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:20:52 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x300}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:20:52 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x1fc}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:20:52 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) [ 1056.162356] loop1: detected capacity change from 0 to 40 22:20:53 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/softnet_stat\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create(0x391) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f00000002c0)={0x2, 0x1000, @status={[0x5, 0x1, 0x7, 0x7fff, 0x0, 0x9]}, [0x3, 0x81, 0x20, 0x3, 0x78c, 0xef, 0x1, 0x3, 0x7ff, 0x2, 0x5, 0x9, 0xfffffffffffffffe, 0x3, 0x2, 0x1ff, 0x3, 0x4, 0xfffffffffffffff8, 0x5, 0xdbb978e, 0x7, 0x2, 0x4, 0x1f, 0x6, 0x4, 0x18000000, 0xa5e7, 0x81, 0x1ff, 0xd2, 0x100, 0x5, 0x0, 0x0, 0x0, 0x6, 0x2, 0x1, 0x101, 0x6, 0x4, 0x400, 0x7, 0x1f, 0x1ff, 0xffffffffffff3b8f, 0x1, 0x80, 0x1, 0xfffffffffffffffa, 0x10000, 0x6, 0x20, 0x100, 0x6, 0x9, 0x5, 0x709, 0x10001, 0x0, 0x40]}) epoll_wait(r2, &(0x7f0000000280)=[{}], 0x1, 0x4) fcntl$getflags(r2, 0x401) [ 1056.176276] loop5: detected capacity change from 0 to 40 [ 1056.189543] FAT-fs (loop1): bogus number of reserved sectors [ 1056.190367] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1056.194404] FAT-fs (loop5): invalid media value (0x00) [ 1056.195201] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1056.198793] loop0: detected capacity change from 0 to 40 [ 1056.199960] loop7: detected capacity change from 0 to 40 [ 1056.235593] FAT-fs (loop0): bogus number of reserved sectors [ 1056.236523] FAT-fs (loop0): Can't find a valid FAT filesystem 22:20:53 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x1fe}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:20:53 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x40b}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:20:53 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f00000002c0)="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", 0x1000) r1 = epoll_create(0x4) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) r3 = epoll_create(0x4) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)) r5 = epoll_create(0x4) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r3, &(0x7f0000002340)={0x60000010}) r7 = perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0xf6, 0x8, 0x20, 0x5, 0x0, 0x7, 0x10000, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7ff, 0x2, @perf_bp, 0x10, 0xfffffffffffffffb, 0xffff, 0x8, 0x9, 0x7, 0x1f, 0x0, 0xffff8001, 0x0, 0x100000000}, r2, 0x0, r4, 0x0) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002440), 0x8400, 0x0) perf_event_open(&(0x7f00000023c0)={0x4, 0x80, 0xff, 0x1, 0x7f, 0x2, 0x0, 0x5, 0x40041, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000002380), 0x4}, 0x400, 0xffffffffffffbd92, 0xff, 0x7, 0x57, 0xc5ed, 0x6, 0x0, 0x8, 0x0, 0x5}, 0x0, 0xf, r8, 0x9) epoll_wait(r1, &(0x7f0000000280)=[{}], 0x1, 0x4) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000100)={"1aef8f6b024bf38632355fdbc4d85ca0", 0x0, 0x0, {0x9, 0x7}, {0x2, 0x7}, 0xffffffffffffffff, [0xc909, 0x0, 0x3, 0x1, 0x0, 0x9, 0xaf, 0x1, 0x8, 0x100, 0x7, 0x4, 0x4, 0x4, 0xa45, 0x1]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f00000012c0)={{r0}, r9, 0x10, @unused=[0x9, 0x40, 0x20, 0x9c], @subvolid=0x6}) r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000022c0), 0xa202c0, 0x0) sendfile(r10, r7, &(0x7f0000002300)=0x1, 0xfffffffffffffff7) 22:20:53 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/softnet_stat\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create(0x391) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f00000002c0)={0x2, 0x1000, @status={[0x5, 0x1, 0x7, 0x7fff, 0x0, 0x9]}, [0x3, 0x81, 0x20, 0x3, 0x78c, 0xef, 0x1, 0x3, 0x7ff, 0x2, 0x5, 0x9, 0xfffffffffffffffe, 0x3, 0x2, 0x1ff, 0x3, 0x4, 0xfffffffffffffff8, 0x5, 0xdbb978e, 0x7, 0x2, 0x4, 0x1f, 0x6, 0x4, 0x18000000, 0xa5e7, 0x81, 0x1ff, 0xd2, 0x100, 0x5, 0x0, 0x0, 0x0, 0x6, 0x2, 0x1, 0x101, 0x6, 0x4, 0x400, 0x7, 0x1f, 0x1ff, 0xffffffffffff3b8f, 0x1, 0x80, 0x1, 0xfffffffffffffffa, 0x10000, 0x6, 0x20, 0x100, 0x6, 0x9, 0x5, 0x709, 0x10001, 0x0, 0x40]}) epoll_wait(r2, &(0x7f0000000280)=[{}], 0x1, 0x4) fcntl$getflags(r2, 0x401) 22:20:53 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:20:53 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x202}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:20:53 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x40d}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:20:53 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/softnet_stat\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create(0x391) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f00000002c0)={0x2, 0x1000, @status={[0x5, 0x1, 0x7, 0x7fff, 0x0, 0x9]}, [0x3, 0x81, 0x20, 0x3, 0x78c, 0xef, 0x1, 0x3, 0x7ff, 0x2, 0x5, 0x9, 0xfffffffffffffffe, 0x3, 0x2, 0x1ff, 0x3, 0x4, 0xfffffffffffffff8, 0x5, 0xdbb978e, 0x7, 0x2, 0x4, 0x1f, 0x6, 0x4, 0x18000000, 0xa5e7, 0x81, 0x1ff, 0xd2, 0x100, 0x5, 0x0, 0x0, 0x0, 0x6, 0x2, 0x1, 0x101, 0x6, 0x4, 0x400, 0x7, 0x1f, 0x1ff, 0xffffffffffff3b8f, 0x1, 0x80, 0x1, 0xfffffffffffffffa, 0x10000, 0x6, 0x20, 0x100, 0x6, 0x9, 0x5, 0x709, 0x10001, 0x0, 0x40]}) epoll_wait(r2, &(0x7f0000000280)=[{}], 0x1, 0x4) fcntl$getflags(r2, 0x401) 22:20:53 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000040)={0x0, 0x7f, [0x1150, 0x1, 0x7ff, 0x1, 0x100000000, 0xbe7b]}) r1 = epoll_create(0x4) epoll_wait(r1, &(0x7f0000000280)=[{}], 0x1, 0x4) [ 1056.804227] loop7: detected capacity change from 0 to 40 22:20:53 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x40e}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:21:09 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x204}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:21:09 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x1, 0x0, 0x1, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_create(0x4) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7fff}}, './file0\x00'}) r1 = epoll_create(0x4) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)) epoll_wait(r2, &(0x7f0000000040)=[{}, {}, {}], 0x3, 0x5) r3 = epoll_create(0x4) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)) epoll_wait(r3, &(0x7f0000000000)=[{}], 0x1, 0x0) epoll_wait(r3, &(0x7f0000000100)=[{}, {}, {}], 0x3, 0x3f) 22:21:09 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:21:09 executing program 7: chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:21:09 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x40f}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:21:09 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/softnet_stat\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create(0x391) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f00000002c0)={0x2, 0x1000, @status={[0x5, 0x1, 0x7, 0x7fff, 0x0, 0x9]}, [0x3, 0x81, 0x20, 0x3, 0x78c, 0xef, 0x1, 0x3, 0x7ff, 0x2, 0x5, 0x9, 0xfffffffffffffffe, 0x3, 0x2, 0x1ff, 0x3, 0x4, 0xfffffffffffffff8, 0x5, 0xdbb978e, 0x7, 0x2, 0x4, 0x1f, 0x6, 0x4, 0x18000000, 0xa5e7, 0x81, 0x1ff, 0xd2, 0x100, 0x5, 0x0, 0x0, 0x0, 0x6, 0x2, 0x1, 0x101, 0x6, 0x4, 0x400, 0x7, 0x1f, 0x1ff, 0xffffffffffff3b8f, 0x1, 0x80, 0x1, 0xfffffffffffffffa, 0x10000, 0x6, 0x20, 0x100, 0x6, 0x9, 0x5, 0x709, 0x10001, 0x0, 0x40]}) fcntl$getflags(r2, 0x401) 22:21:09 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:21:09 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) [ 1072.955898] loop1: detected capacity change from 0 to 40 [ 1072.965925] loop5: detected capacity change from 0 to 40 [ 1072.976044] FAT-fs (loop1): bogus number of reserved sectors [ 1072.976472] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1072.982159] FAT-fs (loop5): invalid media value (0x00) [ 1072.982546] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1072.991808] loop0: detected capacity change from 0 to 40 [ 1073.010697] FAT-fs (loop0): bogus number of reserved sectors [ 1073.011374] FAT-fs (loop0): Can't find a valid FAT filesystem 22:21:09 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x206}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:21:09 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0xa02}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:21:09 executing program 7: chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:21:09 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/softnet_stat\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x391) fcntl$getflags(r1, 0x401) 22:21:10 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) r2 = epoll_create(0x4) r3 = timerfd_create(0x4, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000180)={0x88000006}) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000240)) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x40, 0x7, 0x7, 0x9, 0x0, 0x6, 0x8512, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x20654, 0x1, 0xff, 0x4, 0x0, 0x7fffffff, 0x5, 0x0, 0x4, 0x0, 0x23}, r1, 0xb, r4, 0x1) 22:21:10 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0xb04}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:21:10 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x208}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:21:10 executing program 7: chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:21:28 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:21:28 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/softnet_stat\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getflags(0xffffffffffffffff, 0x401) 22:21:28 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:21:28 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x20a}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:21:28 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_create(0x4) r0 = epoll_create(0x4) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) 22:21:28 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:21:28 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0xd04}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:21:28 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) [ 1091.627658] loop5: detected capacity change from 0 to 40 [ 1091.630625] loop7: detected capacity change from 0 to 40 [ 1091.642846] loop1: detected capacity change from 0 to 40 [ 1091.647288] loop0: detected capacity change from 0 to 40 [ 1091.647379] FAT-fs (loop5): invalid media value (0x00) [ 1091.648849] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1091.665127] FAT-fs (loop0): bogus number of reserved sectors [ 1091.666427] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1091.670829] FAT-fs (loop1): bogus number of reserved sectors [ 1091.671754] FAT-fs (loop1): Can't find a valid FAT filesystem 22:21:28 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x20c}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:21:28 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0xe00}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:21:28 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/softnet_stat\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getflags(0xffffffffffffffff, 0x401) 22:21:28 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0x6}, 0x604d, 0x0, 0x3, 0x0, 0x0, 0x0, 0x510a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x4) epoll_wait(r1, &(0x7f0000000280)=[{}], 0x1, 0x4) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="0600002f66696c6530004a6d3f53543fcae7af39671ab00dff6cdba8ceb7f1a7da3bda38f3ad04c67e7ef2ea4eb47551faafb8457fad81d16ade3c743b05f96d888b55c94cf78eb211fce8637766a80a48d8a8b796bb3c8da40d326babc9ba50c1820b9f4365c6fa162838cb71e683c5ec2b3bb657aa37fad4fa8bd4eb99f2bcd2ef342707609963f8ad1c9d88"]) write$binfmt_elf64(r3, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x0, 0x3, 0x0, 0x1, 0x3, 0x3e, 0x2, 0xda, 0x40, 0x3a5, 0x80000000, 0x0, 0x38, 0x2, 0x0, 0x4, 0x2}, [{0x70000000, 0x40, 0xee, 0x2a, 0x4, 0x7e, 0x3, 0x3}, {0x6474e551, 0x1000, 0x1, 0x5, 0x3, 0x0, 0x0, 0x90000}], "438df6403c3f7a297a77cf75b9a1d5d5793686e0daa1b757913eaac7c4f68c6f7670845a12df5edadc19a46871d1ed8b1d660385bed89ea31ad1a030c937fa1610a5100145c836fcca4d6f31efd7f1d18ed147e3aefdf1457017423b880cb6c5888f7717716c65c9e47db6c168d5e53c572d26ed5894bf603df30769d9786b326329c5df287a8955f976523aadab0938cc27fb90e941a0434865deb84c3b2492469c90b9b63e67fa7a2dea0c884e7afa299376974f6b23790ab4406947c059dde1454e06a63c", ['\x00', '\x00', '\x00', '\x00']}, 0x576) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x2, 0x2, 0xff, 0x5, 0x0, 0x3f, 0x8aaa6, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x30, 0x200, 0x1000, 0x0, 0x80000001, 0x1, 0x5, 0x0, 0x5, 0x0, 0x1}, 0x0, 0x6, r2, 0x0) r4 = epoll_create(0x4) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0x52a1]}, 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x3, 0x20, 0x20, 0x32, 0x0, 0x9, 0x42101, 0x7, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x401, 0x3}, 0x10050, 0x80000000, 0x5, 0x5, 0x2000000000003f, 0xfffffffe, 0x9c3, 0x0, 0x2, 0x0, 0x5}, 0x0, 0xf, r5, 0xa) 22:21:28 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:21:28 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x20e}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1092.072166] loop7: detected capacity change from 0 to 40 22:21:28 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0xe04}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:21:29 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/softnet_stat\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getflags(0xffffffffffffffff, 0x401) 22:21:46 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:21:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:21:46 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x4) epoll_wait(r1, &(0x7f0000000280)=[{}], 0x1, 0x4) r2 = epoll_create(0x4) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xc0002016}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) dup(r4) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) 22:21:46 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) [ 1109.798566] loop0: detected capacity change from 0 to 40 [ 1109.813039] loop1: detected capacity change from 0 to 40 [ 1109.825034] FAT-fs (loop0): bogus number of reserved sectors [ 1109.826012] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1109.835072] FAT-fs (loop1): bogus number of reserved sectors [ 1109.836196] FAT-fs (loop1): Can't find a valid FAT filesystem 22:21:46 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0xf04}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:21:46 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:21:46 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/softnet_stat\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = epoll_create(0x391) fcntl$getflags(r1, 0x401) 22:21:46 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x210}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1109.862107] loop7: detected capacity change from 0 to 40 [ 1109.895478] loop5: detected capacity change from 0 to 40 [ 1109.912303] FAT-fs (loop5): invalid media value (0x00) [ 1109.913073] FAT-fs (loop5): Can't find a valid FAT filesystem 22:21:46 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x80000001}}, './file0\x00'}) openat(r1, &(0x7f0000000040)='./file0\x00', 0x40000, 0x20) r2 = epoll_create(0x4) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000001240), 0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000003c71a0f9b016d0e6b08e3faee72052c996f5e7cc12b36d1f4ed89d86e4a4ef044894be5637c715dbdd3d2dc3f1476371e11018a0ecd34c1e0e858cd800ad23b2a86a8dd9e1de3cb1f89eeed684025d28d26ebdb4ac9c7f1d8761318eec42e754cf73323ca3a572d7c2132f7b66bd8e128a1dfff07651e39a4e36b91671244478d59a8c4395ea7850c5ca985e1f30464158b25730ded26d9109e8452963d3a77f4b7439c2010000002434200c27df5e5ceb60c8ea3128de38b73a1f11dddc351500f31ac1e877db0b73d03d8b27d504297a915849ae71957b2593850f95fbce394355", @ANYRES32=r1, @ANYBLOB="00080000000000082e2f66696c653110"]) 22:21:46 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x1100}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:21:46 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:21:47 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x212}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:21:47 executing program 6: syz_open_procfs(0x0, &(0x7f00000004c0)='net/softnet_stat\x00') r0 = epoll_create(0x391) fcntl$getflags(r0, 0x401) [ 1110.362146] loop7: detected capacity change from 0 to 40 22:21:47 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x1171}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:21:47 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:21:47 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4000, 0x113) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x100) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000000010000000020", @ANYRES32=r2, @ANYBLOB="ac0000005239d5947f639df4a9b21fd5"]) [ 1110.725152] loop7: detected capacity change from 0 to 40 [ 1125.168846] loop1: detected capacity change from 0 to 40 22:22:02 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:22:02 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x300}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:22:02 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) 22:22:02 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:22:02 executing program 6: r0 = epoll_create(0x391) fcntl$getflags(r0, 0x401) 22:22:02 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x1187}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:22:02 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:22:02 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) [ 1125.185825] loop7: detected capacity change from 0 to 40 [ 1125.187451] loop0: detected capacity change from 0 to 40 [ 1125.191684] FAT-fs (loop0): bogus number of reserved sectors [ 1125.192116] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1125.194064] FAT-fs (loop1): bogus number of reserved sectors [ 1125.194838] FAT-fs (loop1): Can't find a valid FAT filesystem 22:22:02 executing program 6: r0 = epoll_create(0x0) fcntl$getflags(r0, 0x401) 22:22:02 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x349102, 0x0) r2 = accept$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000200)=0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x8000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@loose}, {@cache_loose}, {@nodevmap}, {@loose}, {@cache_loose}, {@fscache}, {@posixacl}, {@access_uid={'access', 0x3d, r3}}], [{@fsname={'fsname', 0x3d, '%/N}#)'}}, {@appraise_type}, {@appraise}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@smackfsroot={'smackfsroot', 0x3d, '\\'}}, {@dont_hash}]}}) [ 1125.247566] loop5: detected capacity change from 0 to 40 [ 1125.251453] FAT-fs (loop5): bogus number of FAT sectors [ 1125.251841] FAT-fs (loop5): Can't find a valid FAT filesystem 22:22:02 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:22:02 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x11b1}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:22:02 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x402}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:22:02 executing program 6: r0 = epoll_create(0x0) fcntl$getflags(r0, 0x401) 22:22:02 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x602}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:22:02 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x4) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x20, 0x7, 0x0, 0x1f, 0x0, 0x7, 0x80, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000180), 0x8}, 0x1, 0x3ff, 0x9, 0x9, 0x1d, 0x9, 0x4, 0x0, 0x2, 0x0, 0x2}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x1, 0x75) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x6, 0x3, 0x5, 0x1f, 0x0, 0x5, 0x1710, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_bp, 0x4000, 0x179, 0x8001, 0xc, 0x9, 0xecad, 0x3f, 0x0, 0x46, 0x0, 0x9}, r2, 0xc, r3, 0x8) epoll_wait(r1, &(0x7f0000000280)=[{}], 0x1, 0x4) 22:22:02 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:22:18 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:22:18 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:22:18 executing program 6: r0 = epoll_create(0x0) fcntl$getflags(r0, 0x401) 22:22:18 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x802}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:22:18 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x4) epoll_wait(r1, &(0x7f0000000100), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x8000) 22:22:18 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:22:18 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:22:18 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x11c5}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1141.646861] loop1: detected capacity change from 0 to 40 [ 1141.673358] FAT-fs (loop1): bogus number of reserved sectors [ 1141.674181] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1141.683377] loop5: detected capacity change from 0 to 40 [ 1141.700804] loop0: detected capacity change from 0 to 40 [ 1141.710701] FAT-fs (loop5): bogus number of FAT sectors [ 1141.711543] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1141.732704] FAT-fs (loop0): bogus number of reserved sectors [ 1141.733603] FAT-fs (loop0): Can't find a valid FAT filesystem 22:22:18 executing program 4: ioctl$CDROMCLOSETRAY(0xffffffffffffffff, 0x5319) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) lseek(r0, 0x0, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ftruncate(r1, 0x401) getdents(0xffffffffffffffff, &(0x7f00000004c0)=""/223, 0xdf) r2 = epoll_create(0x4) fdatasync(r2) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000005c0), 0x240, 0x0) write$tcp_congestion(r3, &(0x7f0000000600)='reno\x00', 0x5) write$tcp_congestion(r0, &(0x7f0000000640)='yeah\x00', 0x5) pread64(r2, &(0x7f00000003c0)=""/194, 0xc2, 0x80000000) epoll_wait(r2, &(0x7f0000000280)=[{}], 0x1, 0x4) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000002000000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="ff0f0000000000002e2f66696c653000"]) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000100)=""/89, 0x59}, {&(0x7f0000000180)=""/178, 0xb2}, {&(0x7f00000002c0)=""/228, 0xe4}], 0x3, 0xe9a0, 0x1ff) 22:22:18 executing program 6: epoll_create(0x391) fcntl$getflags(0xffffffffffffffff, 0x401) 22:22:18 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x185f}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:22:18 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:22:18 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0xa02}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1142.015234] FAT-fs (loop7): bogus number of reserved sectors [ 1142.016113] FAT-fs (loop7): Can't find a valid FAT filesystem 22:22:18 executing program 6: epoll_create(0x391) fcntl$getflags(0xffffffffffffffff, 0x401) 22:22:38 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x2000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:22:38 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x800000000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x80, 0x3, 0xf, 0x9b, 0x0, 0x4, 0x5000, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000000), 0x1}, 0x18004, 0x1000, 0x6, 0x0, 0xffff, 0x4, 0xfff, 0x0, 0x400, 0x0, 0x2}, 0xffffffffffffffff, 0x5, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000180)={0x10000000}) r2 = epoll_create(0x4) epoll_wait(r2, &(0x7f0000000280)=[{}], 0x1, 0x4) 22:22:38 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:22:38 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:22:38 executing program 6: epoll_create(0x391) fcntl$getflags(0xffffffffffffffff, 0x401) 22:22:38 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:22:38 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:22:38 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0xc02}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:22:38 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x2c01}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1161.906221] loop5: detected capacity change from 0 to 40 [ 1161.917833] loop0: detected capacity change from 0 to 40 [ 1161.923430] FAT-fs (loop5): bogus number of FAT sectors [ 1161.924196] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1161.926267] loop1: detected capacity change from 0 to 40 [ 1161.929703] FAT-fs (loop7): bogus number of reserved sectors [ 1161.930545] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1161.941451] FAT-fs (loop1): invalid media value (0x00) [ 1161.942295] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1161.945463] FAT-fs (loop0): bogus number of reserved sectors [ 1161.946597] FAT-fs (loop0): Can't find a valid FAT filesystem 22:22:38 executing program 6: r0 = epoll_create(0x391) fcntl$getflags(r0, 0x0) 22:22:38 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0xe00}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:22:38 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x50, r0, 0x9) r1 = epoll_create(0x4) epoll_wait(r1, &(0x7f0000000280)=[{}], 0x1, 0x4) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000000)) 22:22:39 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:22:39 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x3201}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:22:39 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x4) epoll_wait(r1, &(0x7f0000000280)=[{}], 0x1, 0x4) r2 = epoll_create(0x4) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000100)={0x1, 0x6, 0x2, 0x0, 0x0, [{{r3}, 0x6}, {{r4}, 0x7}]}) [ 1162.321299] FAT-fs (loop7): bogus number of reserved sectors [ 1162.322240] FAT-fs (loop7): Can't find a valid FAT filesystem 22:22:39 executing program 6: r0 = epoll_create(0x391) fcntl$getflags(r0, 0x0) 22:22:39 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x3f00}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:22:39 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0xe02}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:22:55 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:22:55 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:22:55 executing program 4: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000005, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x4) r2 = epoll_create(0x4) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)) epoll_wait(r2, &(0x7f0000000000)=[{}], 0x1, 0x0) fcntl$notify(r2, 0x402, 0x28) epoll_wait(r1, &(0x7f0000000280)=[{}], 0x1, 0x4) 22:22:55 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x1002}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:22:55 executing program 6: r0 = epoll_create(0x391) fcntl$getflags(r0, 0x0) 22:22:55 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x4000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:22:55 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:22:55 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) [ 1178.744760] loop1: detected capacity change from 0 to 40 [ 1178.771444] loop5: detected capacity change from 0 to 40 [ 1178.787742] loop0: detected capacity change from 0 to 40 [ 1178.791071] FAT-fs (loop1): invalid media value (0x00) [ 1178.791880] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1178.802960] FAT-fs (loop0): bogus number of reserved sectors [ 1178.803876] FAT-fs (loop0): Can't find a valid FAT filesystem 22:22:55 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x5d01}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1178.857362] FAT-fs (loop7): bogus number of reserved sectors [ 1178.858214] FAT-fs (loop7): Can't find a valid FAT filesystem 22:22:55 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x1100}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:22:55 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x4) epoll_wait(r1, &(0x7f0000000280)=[{}], 0x1, 0x4) r2 = epoll_create(0x4) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000100)={0x1, 0x6, 0x2, 0x0, 0x0, [{{r3}, 0x6}, {{r4}, 0x7}]}) 22:22:55 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x1202}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:22:56 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) [ 1179.376780] FAT-fs (loop7): bogus number of reserved sectors [ 1179.377946] FAT-fs (loop7): Can't find a valid FAT filesystem 22:23:14 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x5f18}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:23:14 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x4) epoll_wait(r1, &(0x7f0000000280)=[{}], 0x1, 0x4) r2 = epoll_create(0x4) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000100)={0x1, 0x6, 0x2, 0x0, 0x0, [{{r3}, 0x6}, {{r4}, 0x7}]}) 22:23:14 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:23:14 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:23:14 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x1862}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:23:14 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:23:14 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:23:14 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) [ 1197.395612] FAT-fs (loop7): bogus number of reserved sectors [ 1197.396098] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1197.405571] loop1: detected capacity change from 0 to 40 [ 1197.419906] FAT-fs (loop1): invalid media value (0x00) [ 1197.420325] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1197.467709] loop0: detected capacity change from 0 to 40 [ 1197.472203] loop5: detected capacity change from 0 to 40 22:23:14 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) epoll_create(0x6ac) [ 1197.495442] FAT-fs (loop0): invalid media value (0x00) [ 1197.496502] FAT-fs (loop0): Can't find a valid FAT filesystem 22:23:14 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x2000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:23:14 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:23:14 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x60ff}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:23:14 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x800000000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x80, 0x3, 0xf, 0x9b, 0x0, 0x4, 0x5000, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000000), 0x1}, 0x18004, 0x1000, 0x6, 0x0, 0xffff, 0x4, 0xfff, 0x0, 0x400, 0x0, 0x2}, 0xffffffffffffffff, 0x5, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000180)={0x10000000}) r2 = epoll_create(0x4) epoll_wait(r2, &(0x7f0000000280)=[{}], 0x1, 0x4) [ 1197.766548] loop7: detected capacity change from 0 to 40 22:23:14 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x4) r2 = epoll_create(0x80000001) r3 = epoll_create(0x4) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x404141, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000140)={0x20002011}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)) perf_event_open$cgroup(&(0x7f0000000000)={0x4, 0x80, 0xee, 0x5, 0x40, 0xe9, 0x0, 0x4, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x255, 0x3}, 0x1001, 0x8001, 0x1, 0x9, 0x1, 0x8001, 0x4, 0x0, 0xd956, 0x0, 0x494}, r4, 0xd, r0, 0x4) epoll_wait(r1, &(0x7f0000000280)=[{}], 0x1, 0x4) r6 = syz_open_dev$usbmon(&(0x7f00000002c0), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ffb000/0x5000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000000180)="6a8021f5b9f18d4e0d114fb62feaadd98d66bd30455aea24134f28dd8cf8cc5cfaf3b8e3c74fa94bb6ab7473158b76e6dc22c498ca3a897d2bd4948b03589736b4a3988a749143c917d2858cf0d6f214e796a0961849fa4cf0a9b8e87a929fa38f5f44fcbc42d5ade7301a6f205f5c179485a4cad11243dcd8", 0x79, r6}, 0x68) [ 1197.809508] FAT-fs (loop7): bogus number of reserved sectors [ 1197.810718] FAT-fs (loop7): Can't find a valid FAT filesystem 22:23:14 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x7111}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:23:15 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x2c01}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:23:15 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x800000000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x80, 0x3, 0xf, 0x9b, 0x0, 0x4, 0x5000, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000000), 0x1}, 0x18004, 0x1000, 0x6, 0x0, 0xffff, 0x4, 0xfff, 0x0, 0x400, 0x0, 0x2}, 0xffffffffffffffff, 0x5, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000180)={0x10000000}) r2 = epoll_create(0x4) epoll_wait(r2, &(0x7f0000000280)=[{}], 0x1, 0x4) 22:23:15 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) [ 1198.387368] loop7: detected capacity change from 0 to 40 [ 1198.392589] FAT-fs (loop7): bogus number of reserved sectors [ 1198.393435] FAT-fs (loop7): Can't find a valid FAT filesystem 22:23:34 executing program 6: r0 = epoll_create(0x391) fcntl$getflags(r0, 0x401) (fail_nth: 1) 22:23:34 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:23:34 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:23:34 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x8711}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:23:34 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x3f00}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:23:34 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:23:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) [ 1217.396160] loop5: detected capacity change from 0 to 40 [ 1217.409794] loop0: detected capacity change from 0 to 40 22:23:34 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc1}, &(0x7f00000002c0)={0x0, "608e23777c43fc9306c75638d4be45cf5df709aa8ea169c4201fc002957d61bd2676ac549b075540c2b98e1583b893cbdbf8f8ec1df63e74c0e065c23278774d", 0x3c}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000340)={r0, 0x86, 0x93}, &(0x7f0000000380)={'enc=', 'raw', ' hash=', {'sha384-ssse3\x00'}}, &(0x7f0000000400)="4fe9f86b7ef778cc30f4bd9e66329c20589f76a1c34c22fddf4214afeb1fa09cc60fba551b2c4c9170f9fc02f5f8399c12acf3753811325510050d87b9f442632fa96d9acdcab0adab326ae2f34fc723c0d6c738d4913f27e8168826baf4f7c8d11cb0e909c823e8d4626aaaadb53d4f88d82639bf03cdf7a646e3c2f47ccd15a055aff531ef", &(0x7f00000004c0)=""/147) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x28, r1, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create(0x4) epoll_wait(r2, &(0x7f0000000280), 0x0, 0x5) epoll_wait(r2, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x1a53) [ 1217.425118] FAT-fs (loop0): invalid media value (0x00) [ 1217.425488] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1217.438242] FAULT_INJECTION: forcing a failure. [ 1217.438242] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1217.440249] CPU: 0 PID: 6930 Comm: syz-executor.6 Not tainted 6.1.0-rc3-next-20221104 #1 [ 1217.441292] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1217.442405] Call Trace: [ 1217.442748] [ 1217.443120] dump_stack_lvl+0x8b/0xb3 [ 1217.443661] should_fail.cold+0x5/0xa 22:23:34 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x4000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1217.444197] _copy_to_user+0x2a/0x140 [ 1217.444808] simple_read_from_buffer+0xcc/0x160 [ 1217.445462] proc_fail_nth_read+0x198/0x230 [ 1217.446055] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1217.446710] ? security_file_permission+0xb1/0xe0 [ 1217.447413] vfs_read+0x253/0x930 [ 1217.447913] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1217.448560] ? __pfx_vfs_read+0x10/0x10 [ 1217.449110] ? __fget_files+0x270/0x450 [ 1217.449686] ksys_read+0x127/0x250 [ 1217.450176] ? __pfx_ksys_read+0x10/0x10 [ 1217.450718] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1217.451456] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1217.452180] do_syscall_64+0x3b/0x90 [ 1217.452700] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1217.453438] RIP: 0033:0x7fa2bd3f469c [ 1217.453951] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1217.456389] RSP: 002b:00007fa2ba9b7170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1217.457420] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fa2bd3f469c [ 1217.458361] RDX: 000000000000000f RSI: 00007fa2ba9b71e0 RDI: 0000000000000004 [ 1217.459295] RBP: 00007fa2ba9b71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1217.460238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1217.461138] R13: 00007fffe3890f8f R14: 00007fa2ba9b7300 R15: 0000000000022000 [ 1217.462120] [ 1217.474174] loop1: detected capacity change from 0 to 40 [ 1217.476888] loop7: detected capacity change from 0 to 40 [ 1217.478503] FAT-fs (loop1): invalid media value (0x00) [ 1217.479314] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1217.483082] FAT-fs (loop7): bogus number of reserved sectors [ 1217.483562] FAT-fs (loop7): Can't find a valid FAT filesystem 22:23:34 executing program 6: r0 = epoll_create(0x391) fcntl$getflags(r0, 0x401) 22:23:34 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0xb111}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:23:34 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x4501}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:23:34 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:23:34 executing program 6: r0 = epoll_create(0x391) fcntl$getflags(r0, 0x2) 22:23:34 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0xc511}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1217.892759] loop7: detected capacity change from 0 to 40 [ 1217.941197] FAT-fs (loop7): bogus number of reserved sectors [ 1217.942286] FAT-fs (loop7): Can't find a valid FAT filesystem 22:23:51 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x60ff}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:23:51 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:23:51 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:23:51 executing program 6: r0 = epoll_create(0x391) fcntl$getflags(r0, 0x3) 22:23:51 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0xf201}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:23:51 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:23:51 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:23:51 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) r1 = gettid() capset(&(0x7f0000000240)={0x20080522, r1}, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x9, 0x3, 0xf6, 0x7, 0x0, 0xc3, 0xe, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x47, 0x2, @perf_bp, 0x9020, 0xe05b, 0x7fffffff, 0x7, 0x6, 0x2, 0xd1, 0x0, 0x5, 0x0, 0x199d}, r1, 0x6, 0xffffffffffffffff, 0xa) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) 22:23:51 executing program 6: r0 = epoll_create(0x391) fcntl$getflags(r0, 0x4) [ 1234.498174] loop1: detected capacity change from 0 to 40 [ 1234.512764] loop0: detected capacity change from 0 to 40 [ 1234.514815] FAT-fs (loop0): invalid media value (0x00) [ 1234.515217] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1234.516641] loop5: detected capacity change from 0 to 40 [ 1234.522282] loop7: detected capacity change from 0 to 40 [ 1234.524186] FAT-fs (loop7): bogus number of reserved sectors [ 1234.524558] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1234.535758] FAT-fs (loop1): invalid media value (0x00) [ 1234.536949] FAT-fs (loop1): Can't find a valid FAT filesystem 22:23:51 executing program 6: r0 = epoll_create(0x391) fcntl$getflags(r0, 0x5) 22:23:51 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x1790b}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:23:51 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:23:51 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x6218}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:23:51 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x8, 0x1f, 0x0, 0x6, 0x0, 0x5, 0x40018, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x817, 0x2}, 0x10280, 0x3, 0x7, 0x5, 0x0, 0x2, 0x1, 0x0, 0x161, 0x0, 0x7f}, r0, 0xf, 0xffffffffffffffff, 0x3) r1 = epoll_create(0x4) epoll_wait(r1, &(0x7f0000000280)=[{}], 0x1, 0x4) 22:23:51 executing program 6: r0 = epoll_create(0x391) fcntl$getflags(r0, 0x6) [ 1234.785229] loop7: detected capacity change from 0 to 40 22:23:51 executing program 4: r0 = fsmount(0xffffffffffffffff, 0xf555d55373f9e7d5, 0xf4) ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, &(0x7f0000000000)={'\x00', 0x1ff, 0x3, 0x800}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x49, 0x0, 0xf240485518ff1406}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x4) epoll_wait(r1, &(0x7f0000000280)=[{}], 0x1, 0x4) [ 1234.824339] FAT-fs (loop7): bogus number of reserved sectors [ 1234.825149] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1251.247377] loop1: detected capacity change from 0 to 40 [ 1251.252266] FAT-fs (loop1): invalid media value (0x00) [ 1251.252650] FAT-fs (loop1): Can't find a valid FAT filesystem 22:24:08 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0xf401}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:24:08 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:24:08 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:24:08 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:24:08 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x17921}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:24:08 executing program 6: r0 = epoll_create(0x391) fcntl$getflags(r0, 0x7) 22:24:08 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x4) epoll_wait(r1, &(0x7f0000000280)=[{}], 0x1, 0x4) r2 = epoll_create(0x4) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x2) r4 = epoll_create(0x4) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000240)) epoll_wait(r4, &(0x7f0000000000)=[{}], 0x1, 0x0) r6 = fsopen(&(0x7f0000000000)='ocfs2\x00', 0x1) r7 = epoll_create(0x4) r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x351e}, {r2, 0x83}, {r3, 0x46c}, {r4, 0x2}, {}, {r6, 0x4}, {r8, 0x20}], 0x7, &(0x7f0000000140)={r9, r10+10000000}, &(0x7f0000000180)={[0xff]}, 0x8) r11 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r11, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r11) 22:24:08 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) [ 1251.261158] loop5: detected capacity change from 0 to 40 [ 1251.265924] loop7: detected capacity change from 0 to 40 [ 1251.268254] FAT-fs (loop7): bogus number of reserved sectors [ 1251.268678] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1251.281579] loop0: detected capacity change from 0 to 40 [ 1251.285717] FAT-fs (loop0): invalid media value (0x00) [ 1251.286201] FAT-fs (loop0): Can't find a valid FAT filesystem 22:24:08 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x1794b}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:24:08 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:24:08 executing program 6: r0 = epoll_create(0x391) fcntl$getflags(r0, 0x8) 22:24:08 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0xf601}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1251.444154] loop7: detected capacity change from 0 to 40 [ 1251.461371] FAT-fs (loop7): bogus number of reserved sectors [ 1251.462027] FAT-fs (loop7): Can't find a valid FAT filesystem 22:24:08 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x1795f}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:24:08 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0xf801}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:24:08 executing program 6: r0 = epoll_create(0x391) fcntl$getflags(r0, 0x9) 22:24:08 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) [ 1251.730408] loop7: detected capacity change from 0 to 40 [ 1251.737409] FAT-fs (loop7): bogus number of reserved sectors [ 1251.737844] FAT-fs (loop7): Can't find a valid FAT filesystem 22:24:25 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x20010}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:24:25 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x8, 0x1, &(0x7f0000000000)="a71c8ce1974546e0fd8b4f6e48e3df2b910e9f6d810c8888d8ad6c375c37bff3594a135c47fa3cea6c612303edda3c74dee1b703753152dd2fd05d13f6c8bd76d8c6f41f04d6708ed39f123facce48e3d6c3d59dd8c276ba1ce79911ab8df8c3e9fac4cecfa4a2e02e00eb5b4cc533bf70aaf50c1bac6aa51f39cda805", 0x58, 0x0, 0x1, {0x2}}, 0xd9) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) 22:24:25 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:24:26 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:24:26 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0xfa01}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:24:26 executing program 6: r0 = epoll_create(0x391) fcntl$getflags(r0, 0xa) 22:24:26 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:24:26 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) [ 1269.133560] loop1: detected capacity change from 0 to 40 [ 1269.140171] FAT-fs (loop1): bogus number of FAT sectors [ 1269.140543] FAT-fs (loop1): Can't find a valid FAT filesystem 22:24:26 executing program 6: r0 = epoll_create(0x391) fcntl$getflags(r0, 0xb) [ 1269.170856] loop0: detected capacity change from 0 to 40 [ 1269.181338] loop5: detected capacity change from 0 to 40 [ 1269.190475] FAT-fs (loop0): invalid media value (0x00) [ 1269.191217] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1269.211495] loop7: detected capacity change from 0 to 40 [ 1269.215041] FAT-fs (loop7): bogus number of reserved sectors [ 1269.215558] FAT-fs (loop7): Can't find a valid FAT filesystem 22:24:26 executing program 4: perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000001}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) 22:24:26 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0xfc01}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:24:26 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x3ffff}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:24:26 executing program 6: r0 = epoll_create(0x391) fcntl$getflags(r0, 0xf) 22:24:26 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:24:26 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x40000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:24:26 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0xfe01}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1269.648350] loop7: detected capacity change from 0 to 40 [ 1269.654145] FAT-fs (loop7): bogus number of reserved sectors [ 1269.654563] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1287.029758] loop7: detected capacity change from 0 to 40 22:24:43 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:24:43 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:24:43 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x20000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:24:43 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53d31e69, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x4) epoll_wait(r1, &(0x7f0000000280)=[{}], 0x1, 0x4) io_setup(0xfffffffd, &(0x7f0000000000)=0x0) r3 = syz_open_dev$rtc(&(0x7f0000000040), 0x7, 0x10140) r4 = epoll_create(0x4) epoll_pwait(r1, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x0, &(0x7f0000000300)={[0x200]}, 0x8) io_setup(0x0, &(0x7f0000000140)=0x0) io_submit(r5, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000440)={r4, 0xa5bf, 0x7, 0x20}) io_submit(r5, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x4, r0, &(0x7f0000000340)="088ac1c8088e183bcf5c15c4f0d28c8b6b3d999aff9011f0bc08294de8af6e7498014abe753a872aa8c40050ceb3efb56f2a15139491411e44db35d1e8ee638e1dd53775b5f68da4e40b168c39bd75cd9175496565b98a791ae6c454d26876c88248c5fbc2dadf80872f30cecfda1ce429bde6df260cdac4b2e3a3b079db3f9e16cf7dd7c265c993b1569964db7cfa485e8a351457236ec73552b7c8c35e74b798dc7f027ac03afe224146172c8c9162e99b399dac111346c380378bdb42f495974a0c5ec65d4e4c1d4c1d9066a347", 0xcf, 0x2, 0x0, 0x3, r6}]) r7 = epoll_create(0x4) r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000240)) r9 = signalfd4(r1, &(0x7f0000000200)={[0x80007]}, 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r9, &(0x7f0000000240)) io_submit(r2, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x81, r3, &(0x7f0000000100)="7b860db2d0aa870e5b5ff043d4b67d85bfa55a07bd472816daf160ba5ba0e57cbaa6a470d73c6b629a7b3156829ca2041ff4d9e1dd3e27f7d67c9bec40e69d14719e72a121ed7a4ee8b0b753373739f7a5ae46b4b8d4c9e6603a9123ed2bbdb5f3aa21d1707e8a8f7433fe", 0x6b, 0x3, 0x0, 0x1, r9}]) 22:24:43 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x1fffff}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:24:43 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:24:43 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:24:43 executing program 6: r0 = epoll_create(0x391) fcntl$getflags(r0, 0x10) [ 1287.048069] FAT-fs (loop7): bogus number of reserved sectors [ 1287.048865] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1287.054166] loop5: detected capacity change from 0 to 40 [ 1287.073948] loop0: detected capacity change from 0 to 40 [ 1287.093188] FAT-fs (loop0): invalid media value (0x00) [ 1287.093903] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1287.106253] loop1: detected capacity change from 0 to 40 22:24:44 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x400000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1287.123858] FAT-fs (loop1): bogus number of FAT sectors [ 1287.124643] FAT-fs (loop1): Can't find a valid FAT filesystem 22:24:44 executing program 6: r0 = epoll_create(0x391) fcntl$getflags(r0, 0x11) 22:24:44 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:24:44 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) [ 1287.214264] loop7: detected capacity change from 0 to 40 [ 1287.230456] FAT-fs (loop7): invalid media value (0x00) [ 1287.230840] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1287.234263] loop5: detected capacity change from 0 to 40 22:24:44 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x20010}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:24:44 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x80ffff}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:24:44 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:24:44 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) [ 1287.412130] loop7: detected capacity change from 0 to 40 [ 1287.416533] FAT-fs (loop7): invalid media value (0x00) [ 1287.417137] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1287.427634] loop5: detected capacity change from 0 to 40 22:25:02 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x3ffff}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:25:02 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0xf0ff1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:25:02 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:25:02 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f0000000280)=[{}], 0x1, 0x4) 22:25:02 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:25:02 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:25:02 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:25:02 executing program 6: r0 = epoll_create(0x391) fcntl$getflags(r0, 0x24) [ 1305.497133] loop5: detected capacity change from 0 to 40 [ 1305.500745] loop1: detected capacity change from 0 to 40 [ 1305.511440] FAT-fs (loop1): bogus number of FAT sectors [ 1305.511808] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1305.549505] loop0: detected capacity change from 0 to 40 [ 1305.553225] loop7: detected capacity change from 0 to 40 22:25:02 executing program 6: r0 = epoll_create(0x391) fcntl$getflags(r0, 0x25) [ 1305.576131] FAT-fs (loop7): invalid media value (0x00) [ 1305.576891] FAT-fs (loop7): Can't find a valid FAT filesystem 22:25:02 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) [ 1305.596925] FAT-fs (loop0): bogus number of FAT sectors [ 1305.597919] FAT-fs (loop0): Can't find a valid FAT filesystem 22:25:02 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x1000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:25:02 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x40000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:25:02 executing program 4: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000, 0x1}, 0x5c002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x3, 0x6, 0x8, 0x6, 0x0, 0x11, 0x40000, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xc629, 0x0, @perf_config_ext={0x800, 0x4}, 0x10044, 0x9, 0x5, 0x8, 0x9c91, 0x401, 0xaa66, 0x0, 0x7, 0x0, 0xe000}, 0xffffffffffffffff, 0xa, r0, 0x1) r1 = epoll_create(0x4) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_congestion_control\x00') epoll_wait(r1, &(0x7f0000000280)=[{}], 0x1, 0x4) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) fallocate(r3, 0x71, 0x0, 0x3) 22:25:02 executing program 6: r0 = epoll_create(0x391) fcntl$getflags(r0, 0x26) [ 1305.704791] loop5: detected capacity change from 0 to 40 22:25:02 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) [ 1305.914206] loop7: detected capacity change from 0 to 40 [ 1305.958054] FAT-fs (loop7): invalid media value (0x00) [ 1305.958837] FAT-fs (loop7): Can't find a valid FAT filesystem 22:25:26 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x1040000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:25:26 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) r1 = dup2(r0, r0) epoll_wait(r1, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x280000) 22:25:26 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:25:26 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:25:26 executing program 6: r0 = epoll_create(0x391) fcntl$getflags(r0, 0x402) 22:25:26 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x1fffff}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:25:26 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:25:26 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) [ 1330.014529] loop7: detected capacity change from 0 to 40 [ 1330.019657] FAT-fs (loop7): invalid media value (0x00) [ 1330.020569] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1330.032106] loop1: detected capacity change from 0 to 40 [ 1330.049590] loop5: detected capacity change from 0 to 40 [ 1330.052683] loop0: detected capacity change from 0 to 40 [ 1330.066688] FAT-fs (loop0): bogus number of FAT sectors [ 1330.067588] FAT-fs (loop0): Can't find a valid FAT filesystem 22:25:27 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x400000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:25:27 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x2000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:25:27 executing program 6: r0 = epoll_create(0x391) fcntl$getflags(r0, 0x406) 22:25:27 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:25:27 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x80ffff}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:25:27 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:25:27 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0xf0ff1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:25:27 executing program 6: r0 = epoll_create(0x391) fcntl$getflags(r0, 0x407) 22:25:27 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x1000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1330.479299] loop7: detected capacity change from 0 to 40 [ 1330.511595] FAT-fs (loop7): invalid media value (0x00) [ 1330.512532] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1330.551698] loop5: detected capacity change from 0 to 40 22:25:45 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x3000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:25:45 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:25:45 executing program 6: r0 = epoll_create(0x391) fcntl$getflags(r0, 0x408) 22:25:45 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x2000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:25:45 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:25:45 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2a1c, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000}, 0x1000, 0x5, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, r0, 0x1) epoll_create(0x4) 22:25:45 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) [ 1348.900146] loop1: detected capacity change from 0 to 40 [ 1348.908569] loop7: detected capacity change from 0 to 40 [ 1348.923066] FAT-fs (loop7): bogus number of FAT sectors [ 1348.923635] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1348.941909] loop0: detected capacity change from 0 to 40 [ 1348.951107] loop5: detected capacity change from 0 to 40 [ 1348.971586] FAT-fs (loop0): bogus number of FAT sectors [ 1348.972597] FAT-fs (loop0): Can't find a valid FAT filesystem 22:25:45 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:25:45 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x30, 0xffffffffffffffff, 0x0) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14, 0x800) syz_io_uring_submit(r1, 0x0, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r2, &(0x7f0000000100)}, 0xffffffe1) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x8, 0x1) 22:25:45 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x4000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:25:45 executing program 6: r0 = epoll_create(0x391) fcntl$getflags(r0, 0x409) 22:25:46 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x2020000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:25:46 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:25:46 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x8000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:25:46 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:25:46 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0xa020000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1349.461920] loop7: detected capacity change from 0 to 40 22:25:46 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x3000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1349.534547] FAT-fs (loop7): bogus number of FAT sectors [ 1349.535046] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1349.539187] loop5: detected capacity change from 0 to 40 22:25:46 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0xb040000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:25:46 executing program 6: r0 = epoll_create(0x391) fcntl$getflags(r0, 0x40a) 22:25:46 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, @perf_config_ext, 0x0, 0x0, 0x1, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) 22:26:00 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:26:00 executing program 6: r0 = epoll_create(0x391) fcntl$getflags(r0, 0x40b) 22:26:00 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) [ 1364.064145] loop5: detected capacity change from 0 to 40 [ 1364.085678] loop0: detected capacity change from 0 to 40 22:26:00 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:26:00 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x4000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:26:00 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0xb790100}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:26:00 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x4, 0xef, 0x8, 0x4, 0x0, 0x3, 0xa, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x7, 0x80000000}, 0x10, 0xe73c, 0xfffffff9, 0x0, 0x7fff, 0x0, 0x8, 0x0, 0x5, 0x0, 0x26}, r2, 0xe, r0, 0x2) epoll_wait(r1, &(0x7f0000000280)=[{}], 0x1, 0x4) 22:26:00 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) [ 1364.095637] loop1: detected capacity change from 0 to 40 22:26:01 executing program 6: r0 = epoll_create(0x391) fcntl$getflags(r0, 0x40c) [ 1364.124186] loop7: detected capacity change from 0 to 40 [ 1364.134141] FAT-fs (loop7): bogus number of FAT sectors [ 1364.134526] FAT-fs (loop7): Can't find a valid FAT filesystem 22:26:01 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x4020000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:26:01 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x4) epoll_wait(r1, &(0x7f0000000280)=[{}], 0x1, 0x4) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202701, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)={0x40000000}) 22:26:01 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:26:01 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0xd040000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:26:01 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x6020000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:26:01 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) [ 1364.387604] loop5: detected capacity change from 0 to 40 [ 1364.432530] loop7: detected capacity change from 0 to 40 22:26:17 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:26:17 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:26:17 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x8000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:26:17 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) 22:26:17 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0xe000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:26:17 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:26:17 executing program 6: r0 = epoll_create(0x1391) socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$getown(0xffffffffffffffff, 0x9) close(r0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x4, 0xff, 0x40, 0xf7, 0x0, 0x9, 0x0, 0xc, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x2, @perf_bp={&(0x7f0000000000), 0x8}, 0x2800, 0x8, 0x4c, 0xe, 0x2, 0xfffffff9, 0x2, 0x0, 0x3ff, 0x0, 0x7f}, r1, 0x8, 0xffffffffffffffff, 0xa) fcntl$getflags(r0, 0x401) 22:26:17 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:26:17 executing program 6: r0 = epoll_create(0x391) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x501c0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) fcntl$getflags(r0, 0x401) [ 1380.904422] loop0: detected capacity change from 0 to 40 [ 1380.907879] loop1: detected capacity change from 0 to 40 [ 1380.956457] loop7: detected capacity change from 0 to 40 [ 1380.967102] loop5: detected capacity change from 0 to 40 22:26:17 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x8020000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:26:17 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0xe040000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:26:17 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:26:17 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb035c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x111000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000000)={0x40000008}) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) 22:26:18 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) [ 1381.163368] loop7: detected capacity change from 0 to 40 22:26:18 executing program 6: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x6, 0x1, 0x1}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000228bd7000fedbdf258600000008009f000000000008002600e0150000050018010b000000050019010800000008009f0007000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40485}, 0xc0) r1 = epoll_create(0x391) fcntl$getflags(r1, 0x401) 22:26:18 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0xf040000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1381.300501] loop5: detected capacity change from 0 to 40 22:26:32 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:26:32 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:26:32 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0xa020000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:26:32 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x10000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:26:32 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:26:32 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) 22:26:32 executing program 6: r0 = epoll_create(0x391) dup2(0xffffffffffffffff, r0) fcntl$getflags(r0, 0x401) 22:26:32 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) [ 1395.371680] loop7: detected capacity change from 0 to 40 [ 1395.414189] loop0: detected capacity change from 0 to 40 22:26:32 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40050}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x80000, 0x188) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x80, 0x20, 0x8, 0x4, 0x0, 0x8001, 0x4000, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0xb}, 0x200, 0xffffffffffffff00, 0x7ff, 0x8, 0x401, 0x1, 0x9e94, 0x0, 0x1, 0x0, 0x100}, 0xffffffffffffffff, 0x2, r0, 0xb) r1 = epoll_create(0x4) epoll_wait(r1, &(0x7f0000000280)=[{}], 0x1, 0x4) ioctl$FIONCLEX(r1, 0x5450) [ 1395.430466] loop5: detected capacity change from 0 to 40 [ 1395.437759] loop1: detected capacity change from 0 to 40 22:26:32 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:26:32 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x10000200}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:26:32 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0xc020000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:26:32 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:26:32 executing program 6: r0 = epoll_create(0x391) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = memfd_secret(0x80000) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0x4000000}, 0xc) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x80000016}) fcntl$getflags(r0, 0xb) 22:26:32 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) epoll_wait(r0, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x3) [ 1395.651725] loop5: detected capacity change from 0 to 40 [ 1395.658285] loop7: detected capacity change from 0 to 40 22:26:32 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) [ 1395.907901] loop5: detected capacity change from 0 to 40 22:26:49 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:26:49 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:26:49 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:26:49 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0xe000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:26:49 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x11000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:26:49 executing program 6: r0 = epoll_create(0x7) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)={0x0, 0xfb, 0x2c, 0x4, 0x2, "894e98608ac546ed74d5e25f829748a5", "5df045f28ea7970c4606ff46bc9dbc0fae675ba9a7f1f5"}, 0x2c, 0x0) r2 = epoll_create(0x4) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)) epoll_wait(r2, &(0x7f0000000000)=[{}], 0x1, 0x0) epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f00000000c0)={0x40000008}) fcntl$getflags(r0, 0x401) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000040)={0x10001, 0x10, '\x00', 0x0, &(0x7f0000000000)=[0x0, 0x0]}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000100)={0x10}) 22:26:49 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() capset(&(0x7f0000000240)={0x20080522, r2}, &(0x7f0000000380)) r3 = open_tree(r1, &(0x7f00000003c0)='./file0\x00', 0x800) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r3, 0x3309) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x2, 0x4, 0x1f, 0x0, 0x0, 0x80000, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x20, 0x4, @perf_bp={&(0x7f0000000280), 0x4}, 0x4400, 0x7, 0x9, 0x4, 0x8, 0x5, 0x8, 0x0, 0x1d, 0x0, 0xffffffff}, r2, 0xf, r1, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000240)) epoll_wait(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000200)=0x3c6a, 0x78df) getpid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x1, 0x2, 0x7f, 0x1f, 0x0, 0x9, 0x2200, 0x9, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x8000, 0x96f8b60, 0x7, 0x1, 0x100000001, 0x0, 0x14, 0x0, 0x401, 0x0, 0x8}, 0x0, 0x5, r0, 0x2) epoll_create(0x4) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x20, 0xfc, 0x4, 0x5, 0x0, 0x6, 0x4410, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000040)}, 0x28000, 0x3, 0x2, 0x3, 0x10000, 0xff, 0x6, 0x0, 0x4}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x18) 22:26:49 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) [ 1412.856058] loop7: detected capacity change from 0 to 40 22:26:49 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) epoll_create(0x6) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x89000) r2 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={&(0x7f0000000140), 0x6e, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/130, 0x82}], 0x1, &(0x7f0000000300)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}, 0x2001) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x4000, 0x0) sendfile(r3, r4, &(0x7f0000000400)=0x2, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x2004}) [ 1412.903738] loop1: detected capacity change from 0 to 40 [ 1412.929077] loop5: detected capacity change from 0 to 40 22:26:49 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x1fffefff}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1412.974845] loop0: detected capacity change from 0 to 40 22:26:49 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0xe020000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:26:49 executing program 6: r0 = epoll_create(0xcc) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x400040, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)) fcntl$getflags(r0, 0x401) 22:26:49 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) [ 1413.220832] loop7: detected capacity change from 0 to 40 22:27:06 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) r2 = epoll_create(0x4) epoll_wait(r2, &(0x7f0000000280)=[{}], 0x1, 0x4) 22:27:06 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x1ffff000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:27:06 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) [ 1429.179174] loop5: detected capacity change from 0 to 40 22:27:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:27:06 executing program 6: r0 = epoll_create(0x391) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0xa0000008}) fcntl$getflags(r0, 0x401) r3 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x80000001, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000140)="d2c778866ffb9ebe14ba847f84dba715ea616a6c5621badd79a44f8280afc0768c0865d4bfa0a7c983f2370412c54e38bf49edcd2db6c508af5f61f6c47d61d78d9d6f71a4a91bf7c9ff4eb5aecff939f4d07276c2ddc09fbc96f0271fe997aa3890ab200ef4cc9c86f1dc4da7162441c4e9", 0x72, 0x1}, {&(0x7f00000001c0)="857ca13bfd8633c89d97dd8c936061c25bdfaddc9b1f0cd44fb07e605c8e4b0350949004136b35a3c73b0d2899a97a7b2ada8e36cb0d627a06eaeb4f1741908d076d5303a4c45532999f098104e15801af51bc6bbe7ce0458f346bd4d9a3388ad4d17cdcd242c9874ce02ba00e16c94bb444c347cb709a96de371a3bff438cd1b4cf650626b5cab750826794ada17e1b8a4e09d936d852868b29222d42522273a38318f1733aff988dd7fc8ac8b9e5ff30e03c4352430315f36dcfef55f4601eebdb818ce4362b368d8a7a4644e7c126e373b83ed40375f1723a6e11b41f65aae5eb9e00d5f8636f22b64f88685ede983c38b6310668c1", 0xf7, 0x8001}], 0x2048011, &(0x7f0000000440)=ANY=[@ANYBLOB="73686f7274735a50353d6d697865642c73686fab746a616d653d6c6f7765726c73686f72746e616d653d77696e39352c657569643eeb7e01ffdf2a6f7b492e4918da2068a5a6e7e32d8e36e384aac607c7c7fbe48dff9fb5f7625164ea475bbacb09134a9723c1f9787f64dc0bb719644f00fff85cd64d731b6db7cae323b180de917cf3252422b84ac7d78bac2a099fd16b4f2a119b7cfc606dd92c256fa4e52ec193b3ea3663cfc543702c020cad6018ecf92cbd0ece951dcacedc4b233754b247ebe63a388fc8711dd6eaa11522a41c10d87c59eaff6d781399d1aa417c40c093b70b5c398e129bbb36d5469ad60403", @ANYRESDEC=0xee01, @ANYBLOB="84d8"]) signalfd4(r3, &(0x7f0000000380)={[0x4]}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000003c0)={0x20002014}) 22:27:06 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x10000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:27:06 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:27:06 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:27:06 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(0x0, 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) [ 1429.209798] loop0: detected capacity change from 0 to 40 [ 1429.280529] loop7: detected capacity change from 0 to 40 [ 1429.281097] loop1: detected capacity change from 0 to 40 [ 1429.286090] loop6: detected capacity change from 0 to 264192 [ 1429.308567] loop6: detected capacity change from 0 to 264192 22:27:06 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x10000200}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1429.339562] loop5: detected capacity change from 0 to 40 22:27:06 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) r1 = epoll_create(0x4) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) fsetxattr$security_ima(r1, &(0x7f0000000000), &(0x7f0000000040)=@md5={0x1, "3812831e2554cb3bd8e3e115769880e0"}, 0x11, 0x1) 22:27:06 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x20000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:27:06 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:27:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) [ 1429.438606] syz-executor.5: attempt to access beyond end of device [ 1429.438606] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1429.439502] Buffer I/O error on dev loop5, logical block 10, lost async page write 22:27:06 executing program 6: r0 = epoll_create(0x3) fcntl$getflags(r0, 0x401) [ 1429.467877] loop7: detected capacity change from 0 to 40 22:27:06 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)={0x2}) 22:27:06 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(0x0, 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) [ 1429.569050] loop1: detected capacity change from 0 to 40 22:27:06 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x10020000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1429.697879] loop5: detected capacity change from 0 to 40 [ 1429.763461] syz-executor.5: attempt to access beyond end of device [ 1429.763461] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1429.764329] Buffer I/O error on dev loop5, logical block 10, lost async page write 22:27:24 executing program 6: r0 = epoll_create(0x391) fcntl$getflags(r0, 0x401) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000000)={0x80000008}) 22:27:24 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:27:24 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x21790100}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:27:24 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:27:24 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(0x0, 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:27:24 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_read_part_table(0x2, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000000)="c9fa09343bb8fd97cd3b2abd40e23eb8b76915848124e29981a1bd8d3fe8b681f3fabb634fac1024abc0f1643d88e733fb348d73aa8350e91c48490251bf7f812e8f5d1173c0", 0x46, 0x100000000}, {0x0}]) signalfd4(r1, &(0x7f00000001c0)={[0xff8d]}, 0x8, 0x800) r2 = getpid() r3 = epoll_create(0x4) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)) epoll_wait(r3, &(0x7f0000000000)=[{}], 0x1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r0, 0x4, 0x20, 0xaf2, 0x2}) ptrace$peek(0x2, r2, &(0x7f0000000480)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x7ff}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = epoll_create(0x4) epoll_wait(r5, &(0x7f0000000280)=[{}], 0x1, 0x4) 22:27:24 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:27:24 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x11000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1447.341409] loop1: detected capacity change from 0 to 40 [ 1447.367125] loop0: detected capacity change from 0 to 40 [ 1447.382259] loop5: detected capacity change from 0 to 40 22:27:24 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) [ 1447.442769] loop7: detected capacity change from 0 to 40 [ 1447.475376] syz-executor.5: attempt to access beyond end of device [ 1447.475376] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1447.476349] Buffer I/O error on dev loop5, logical block 10, lost async page write 22:27:24 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x12020000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1447.525396] loop1: detected capacity change from 0 to 40 22:27:24 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x2c010000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:27:24 executing program 6: r0 = epoll_create(0x100) fcntl$getflags(r0, 0x401) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f00000000c0)=""/173) r2 = epoll_create(0x4) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000280)=@l2tp={0x2, 0x0, @loopback}}, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r1, 0x1ff, {0x0, r2}, 0x20, 0x5, 0x0, {0x0, 0x0, r2}}, 0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)) fsetxattr$security_ima(r3, &(0x7f0000000000), &(0x7f0000000040)=@sha1={0x1, "d45b1caea4aed0368024403d06a0612c565c58d9"}, 0x15, 0x3) 22:27:24 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:27:24 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:27:24 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) r1 = open(&(0x7f0000000000)='./file0\x00', 0x20040, 0x28) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x40000000}) 22:27:24 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:27:24 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x1fffefff}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1447.843314] loop5: detected capacity change from 0 to 40 [ 1447.851290] loop7: detected capacity change from 0 to 40 [ 1447.875519] loop1: detected capacity change from 0 to 40 22:27:41 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x32010000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:27:41 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:27:41 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:27:41 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x1ffff000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:27:41 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:27:41 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:27:41 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) r1 = epoll_create(0x4) creat(&(0x7f0000000040)='./file1\x00', 0x142) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file2\x00'}) epoll_wait(r2, &(0x7f0000000280)=[{}], 0x1, 0x4) 22:27:41 executing program 6: r0 = epoll_create(0x391) fcntl$getflags(r0, 0x401) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000000)=0x1) [ 1464.562634] loop0: detected capacity change from 0 to 40 [ 1464.563916] loop1: detected capacity change from 0 to 40 [ 1464.566900] loop7: detected capacity change from 0 to 40 22:27:41 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x20000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:27:41 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) clone3(&(0x7f0000000200)={0xa0000, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000100), {0x3a}, &(0x7f0000000140)=""/86, 0x56, &(0x7f00000002c0)=""/209, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0xa}, 0x58) r2 = epoll_create(0x4) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)) epoll_wait(r2, &(0x7f0000000000)=[{}], 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x8001}}, './file0\x00'}) kcmp$KCMP_EPOLL_TFD(r1, 0x0, 0x7, r2, &(0x7f0000000400)={r4, r0, 0x3ff}) [ 1464.624536] loop5: detected capacity change from 0 to 40 22:27:41 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:27:41 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:27:41 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:27:41 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x3f000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:27:41 executing program 6: r0 = epoll_create(0x391) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x501801, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000080)={0x4, 0x10, '\x00', 0x1, &(0x7f0000000040)=[0x0, 0x0]}) fcntl$getflags(r0, 0xb) 22:27:41 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x2c010000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1464.756516] loop1: detected capacity change from 0 to 40 [ 1464.766607] loop0: detected capacity change from 0 to 40 [ 1464.774101] loop7: detected capacity change from 0 to 40 22:27:41 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:27:41 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:27:41 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x3f000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:27:41 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:27:41 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x40000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1464.895611] loop1: detected capacity change from 0 to 40 [ 1464.930812] loop0: detected capacity change from 0 to 40 22:27:41 executing program 6: r0 = epoll_create(0x391) fcntl$getflags(r0, 0x401) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000000)={0x17}) 22:27:41 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:27:41 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x40000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1464.965148] loop5: detected capacity change from 0 to 40 22:27:41 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) [ 1465.037260] loop7: detected capacity change from 0 to 40 [ 1465.063581] loop1: detected capacity change from 0 to 40 [ 1482.130396] loop0: detected capacity change from 0 to 40 [ 1482.143062] loop7: detected capacity change from 0 to 40 [ 1482.153116] loop1: detected capacity change from 0 to 40 22:27:59 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:27:59 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:27:59 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x45010000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:27:59 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) 22:27:59 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:27:59 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x4b790100}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:27:59 executing program 6: r0 = epoll_create(0xffffffff) r1 = epoll_create(0x4) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)) sync_file_range(r0, 0x9, 0xfffffffffffffffc, 0x7) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x80000001}) fcntl$getflags(r0, 0x401) [ 1482.175796] loop5: detected capacity change from 0 to 40 22:27:59 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x48, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x44) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create(0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)={0x1c, r4, 0x5, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x1d}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x40) epoll_wait(r2, &(0x7f0000000280)=[{}], 0x1, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r3, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xffffffff, 0x71}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x814) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000840)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000429bd7000fedbdf255a0000007f000000099742678b640bc81a3425fdbf1636f799a04cbbc920", @ANYRES32=r9, @ANYBLOB="0c00990007000000690000008ad6b40452e23cddfb9a375c42249df0580f1475cd692f431e88dddd4c70f29a40e3cdb5fb6565712eb53bae92412bac9319381a92b2222a9c69ecb968b03ef767e11e0e31985e784ce92ba940dabd22d34da43235214cc493da4c0d81c5279425a0d7b8f24f4b6cfbed77b6b68aa45930bfc8b5027474a015766b31c4bcac5db4b074967a6cbfb86b46fd7dc0560e00a08fae53362f977d8a7ee0d6e68962d94afeb08c207fc6258f8e3ebfb260a1dcf9b733433dd36bff1421be272592094d53e03deb5f52a840126a17842bf03eda9e7e4a3806"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 22:27:59 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:27:59 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:27:59 executing program 6: r0 = epoll_create(0x391) fcntl$getflags(r0, 0x401) r1 = epoll_create(0x4) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x400800) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f0000000080)={0x7, 0xd9, 0x1, 'queue0\x00'}) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000240)) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) readahead(r1, 0xfffffffffffffff9, 0x3ff) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 22:27:59 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x62180000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:27:59 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x5d010000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1482.289369] loop0: detected capacity change from 0 to 40 [ 1482.303351] loop1: detected capacity change from 0 to 40 [ 1498.485418] loop7: detected capacity change from 0 to 40 22:28:15 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x5f180000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:28:15 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:28:15 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:28:15 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) 22:28:15 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:28:15 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7}, 0x0, 0x0, 0x200, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6214}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) 22:28:15 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0xe4ffffff}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:28:15 executing program 6: r0 = epoll_create(0x4) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xfd}, r5}, 0x14) sendmmsg$inet6(r2, &(0x7f00000006c0)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000001b00)=[@pktinfo={{0x24, 0x29, 0x32, {@dev, r5}}}], 0x28}}], 0x1, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)=@migrate={0x150, 0x21, 0x1, 0x70bd25, 0x25dfdbff, {{@in=@multicast1, @in=@broadcast, 0x4e22, 0x4, 0x4e23, 0x3ea, 0xa, 0x80, 0x20, 0x2, r5}, 0x6e6bba}, [@extra_flags={0x8, 0x18, 0xcc2}, @policy_type={0xa, 0x10, {0x1}}, @algo_comp={0xc5, 0x3, {{'lzjh\x00'}, 0x3e8, "d72273faf15c09db2a7e23f1270b7f3856547fbc5ae9b87ff87295470ae9015b00ac726d2f4a0098110a8ec3cf551244214512cef30e2d3855ebbd2c76bd4ee0509c2399eb43776dad1502b9c21c8590989be3d29e2825970bed8f929ba51bae18897beee67e11ea2e3ab2858931a3b3bc63b132112c02201bb2f4ff46"}}, @lifetime_val={0x24, 0x9, {0x1fc0000000000, 0x8, 0x4, 0x3fdc000}}]}, 0x150}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r6 = epoll_create(0x391) fcntl$getflags(r6, 0x401) 22:28:15 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x5f790100}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:28:15 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x4) r2 = gettid() capset(&(0x7f0000000240)={0x20080522, r2}, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x9, 0x6, 0x3f, 0xff, 0x0, 0x1800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffff000, 0x2, @perf_bp={&(0x7f0000000000), 0x4}, 0x42, 0x151, 0xa0d7, 0x2, 0x2, 0x94e8, 0x2d35, 0x0, 0x5, 0x0, 0x10001}, r2, 0xa, r0, 0x2) epoll_wait(r1, &(0x7f0000000280)=[{}], 0x1, 0x4) [ 1498.562596] loop0: detected capacity change from 0 to 40 22:28:15 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) [ 1498.567306] loop5: detected capacity change from 0 to 40 [ 1498.570780] loop1: detected capacity change from 0 to 40 22:28:15 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0xf4010000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:28:15 executing program 6: epoll_create(0x391) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) signalfd4(r0, &(0x7f0000000040)={[0x2]}, 0x8, 0x800) inotify_init1(0x800) r1 = epoll_create(0x4) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)) fcntl$getflags(r1, 0x3) 22:28:15 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x71110000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1498.663437] loop7: detected capacity change from 0 to 40 22:28:15 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) [ 1498.732368] loop5: detected capacity change from 0 to 40 22:28:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) [ 1512.382894] loop5: detected capacity change from 0 to 40 22:28:29 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:28:29 executing program 6: prctl$PR_GET_SECUREBITS(0x1b) r0 = epoll_create(0x391) fcntl$getflags(r0, 0x1) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xd, 0x1, {{0x80, 0x4}, 0x4eb8}}, 0x18) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000040)=""/55, &(0x7f0000000080)=0x37) prctl$PR_GET_SECUREBITS(0x1b) 22:28:29 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x40, 0x0, 0x0, 0x0, 0x40308, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x40, 0x200000000, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) epoll_wait(r1, &(0x7f0000000100)=[{}], 0x1, 0x8) 22:28:29 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0x87110000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:28:29 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) 22:28:29 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0xf6010000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:28:29 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) [ 1512.424834] loop7: detected capacity change from 0 to 40 [ 1512.444297] loop0: detected capacity change from 0 to 40 [ 1512.454273] loop1: detected capacity change from 0 to 40 22:28:47 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0xb1110000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:28:47 executing program 6: r0 = epoll_create(0x7ff) fcntl$getflags(r0, 0x401) 22:28:47 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(0x0, 0x0) 22:28:47 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:28:47 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) 22:28:47 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/mdstat\x00', 0x0, 0x0) r2 = openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000300), 0x2, 0x0) write$binfmt_aout(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/2148], 0x864) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) r3 = epoll_create(0x4) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000180)={0x40000000}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) r5 = socket$inet_icmp(0x2, 0x2, 0x1) r6 = epoll_create(0x4) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000c00)={0xb0000009}) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000bc0)={0x0, 0xb2}) epoll_wait(r6, &(0x7f0000000000)=[{}], 0x1, 0x0) dup2(r5, r6) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xfd, 0x0, 0x81, 0x7f, 0x0, 0x0, 0x140, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6b5, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x0, 0x400, 0x1, 0x5, 0xfff, 0x4, 0x4a4, 0x0, 0x873, 0x0, 0x1}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x9) 22:28:47 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0xf8010000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:28:47 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) [ 1530.774192] loop5: detected capacity change from 0 to 40 [ 1530.790325] loop0: detected capacity change from 0 to 40 [ 1530.795667] loop7: detected capacity change from 0 to 40 [ 1530.796876] loop1: detected capacity change from 0 to 40 22:28:47 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0xc5110000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:28:47 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0xfa010000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:28:47 executing program 6: r0 = epoll_create(0x391) r1 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) dup(r1) fcntl$getflags(r0, 0x401) 22:28:47 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:28:47 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:28:47 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(0x0, 0x0) 22:28:47 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) 22:28:47 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) r1 = epoll_create(0x4) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)) epoll_wait(r2, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x9) [ 1531.000072] loop5: detected capacity change from 0 to 40 22:28:47 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0xe4ffffff}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1531.017664] loop0: detected capacity change from 0 to 40 22:28:47 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0xfc010000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1531.021231] loop1: detected capacity change from 0 to 40 [ 1531.024652] loop7: detected capacity change from 0 to 40 22:28:47 executing program 6: pread64(0xffffffffffffffff, &(0x7f0000000000)=""/243, 0xf3, 0x6) r0 = epoll_create(0x7dff) fcntl$getflags(r0, 0x401) 22:28:47 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x4) epoll_wait(r1, &(0x7f0000000280)=[{}], 0x1, 0x4) r2 = signalfd(r0, &(0x7f0000000040)={[0x7]}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x10000000}) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x20, 0x6f, 0x71, 0xfd, 0x0, 0xfffffffffffffff8, 0x20400, 0xa, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0xe}, 0x40100, 0x5, 0xc3, 0x3, 0xf8c, 0x4, 0x5, 0x0, 0x2}, 0x0, 0x7, r2, 0x0) 22:28:47 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0x0) [ 1531.171541] loop5: detected capacity change from 0 to 40 22:29:01 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x100, 0x84) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) r1 = epoll_create(0x4) r2 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x40, 0xa0, 0x10}, 0x18) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000000180)={0x2018}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000140)={0x2010}) epoll_wait(r1, &(0x7f0000000280)=[{}], 0x1, 0x4) 22:29:01 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0xf2010000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:29:01 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0xfe010000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:29:01 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:29:01 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(0x0, 0x0) 22:29:01 executing program 6: r0 = epoll_create(0x1) r1 = dup2(r0, r0) r2 = epoll_create(0x4) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)) epoll_wait(r2, &(0x7f0000000000)=[{}], 0x1, 0x0) r4 = epoll_create(0x4) r5 = signalfd4(r1, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000180)={0x80002004}) fcntl$getflags(r0, 0x1) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000100)={0x1, 0x1, 0x1000, 0x1b, &(0x7f0000000000)="c4c3bb58828ff6802077ee097ff0570cad1fc498893c09651c0470", 0x9d, 0x0, &(0x7f0000000040)="410e50a24ee8e1bd7516b6a9f34918d3a58bde855813e5cad953b09a84751d1ed8a12c7611071fd1a23832fe4c585ac98d9d51200a9781658cbafdeb020f2143c5297a1312b97f4f6e309348fb42a283d1a2bf637d303c47114cbc0b8f88ea989c8840a9faf7f0667dbe46386ed775bb1696e730cbe4c03a8f79791946e36ea65ae6ad517bae039b02191d6e8cd1b0e48e3b92c37bf096610f2fb0b39e"}) 22:29:01 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:29:01 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0x0) [ 1544.609513] loop7: detected capacity change from 0 to 40 [ 1544.649418] loop1: detected capacity change from 0 to 40 [ 1544.673276] loop5: detected capacity change from 0 to 40 [ 1544.679468] loop0: detected capacity change from 0 to 40 22:29:01 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0xa) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6}]}) r1 = epoll_create(0x4) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000100)={0x8}) epoll_wait(r1, &(0x7f0000000140)=[{}, {}], 0x1, 0x2000004) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)) 22:29:01 executing program 6: r0 = epoll_create(0x391) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.idle_time\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f0000000140)) r2 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x280000, 0x0, 0x4}, 0x18) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)={0x2015}) fcntl$getflags(r0, 0x408) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f00000000c0)) 22:29:01 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0xff600000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:29:01 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:29:01 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) [ 1544.764732] loop7: detected capacity change from 0 to 40 [ 1544.773556] audit: type=1326 audit(1667600941.668:12): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7740 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb78eab1b19 code=0x0 22:29:01 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0xff600000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1544.807043] loop1: detected capacity change from 0 to 40 [ 1544.825056] audit: type=1326 audit(1667600941.717:13): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7740 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb78eab1b19 code=0x0 [ 1559.278344] loop1: detected capacity change from 0 to 40 22:29:16 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0xffefff1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:29:16 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0x0) 22:29:16 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4) r1 = epoll_create(0x4) epoll_wait(r1, &(0x7f0000000280)=[{}], 0x1, 0x4) 22:29:16 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:29:16 executing program 6: r0 = epoll_create(0x4) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000000)={0xffffffff, 0x0, {0x2, 0x3, 0x7, 0x3, 0x7fffffff}, 0x5}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x410800, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f00000000c0)={{0x41, 0x5}, 'port0\x00', 0x80, 0x10000, 0x4, 0x7, 0xf2, 0x5, 0xa24, 0x0, 0x7, 0x7}) r3 = epoll_create(0x391) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x8000301a}) fcntl$getflags(r3, 0x401) 22:29:16 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:29:16 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0xffefff1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:29:16 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) [ 1559.303052] loop7: detected capacity change from 0 to 40 22:29:16 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(0x0, 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:29:16 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) [ 1559.359838] loop0: detected capacity change from 0 to 40 [ 1559.362398] loop5: detected capacity change from 0 to 40 22:29:16 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0xffff0300}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1559.405264] loop1: detected capacity change from 0 to 40 [ 1559.416470] loop7: detected capacity change from 0 to 40 22:29:16 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0xffff0300}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1559.448543] syz-executor.1: attempt to access beyond end of device [ 1559.448543] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1559.449566] Buffer I/O error on dev loop1, logical block 10, lost async page write 22:29:16 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:29:16 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6818, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8018}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f0000000280)=[{}], 0x1, 0x4) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000080)=').\xf0\x00', 0x0, r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1f, 0x1, 0x0, 0x4, 0x0, 0x5, 0x22043, 0xa, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffff9, 0x0, @perf_config_ext={0xca9, 0x9}, 0x80, 0x800, 0x9, 0x4, 0x9, 0x8, 0x800, 0x0, 0xa4000000, 0x0, 0x7fff}, r1, 0x9, r0, 0x3) [ 1559.534237] loop0: detected capacity change from 0 to 40 [ 1575.031552] loop7: detected capacity change from 0 to 40 22:29:31 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:29:31 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0xffff1f00}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:29:31 executing program 6: r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000280)=@l2tp={0x2, 0x0, @loopback}}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd, 0x0, 0x0, 0x0, {0x1}}, 0x7) r3 = epoll_create(0x391) fcntl$getflags(r3, 0x401) r4 = gettid() capset(&(0x7f0000000240)={0x20080522, r4}, &(0x7f0000000380)) r5 = gettid() syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000280)=@l2tp={0x2, 0x0, @loopback}}, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000002140)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0xffff0000, 0x0, &(0x7f0000001600)="433564233216d68d7e869e7d7e164fb6bfef4e8caa7a50d6b8b2ee04f16d4403e8bd09d819132fbd7d43b55aa4156e872a0bafa3d9d14d1dc64fd1c8182d", 0xca66, 0x0, 0x1}, 0xb07b) capset(&(0x7f0000000240)={0x20080522, r5}, &(0x7f0000000380)) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001f80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/15, 0xf}, {&(0x7f0000001300)=""/223, 0xdf}, {&(0x7f0000000200)=""/31, 0x1f}, {&(0x7f0000001400)=""/162, 0xa2}], 0x4, &(0x7f00000014c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f0000001580), 0x6e, &(0x7f0000001600), 0x0, &(0x7f0000001640)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f00000016c0), 0x6e, &(0x7f0000001c80)=[{&(0x7f0000001740)=""/99, 0x63}, {&(0x7f00000017c0)=""/238, 0xee}, {&(0x7f00000018c0)=""/180, 0xb4}, {&(0x7f0000001980)=""/219, 0xdb}, {&(0x7f0000001a80)=""/30, 0x1e}, {&(0x7f0000001ac0)=""/65, 0x41}, {&(0x7f0000001b40)=""/62, 0x3e}, {&(0x7f0000001b80)=""/31, 0x1f}, {&(0x7f0000001bc0)=""/145, 0x91}], 0x9, &(0x7f0000001d40)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x130}}, {{&(0x7f0000001e80)=@abs, 0x6e, &(0x7f0000001f40)=[{&(0x7f0000001f00)=""/60, 0x3c}], 0x1}}], 0x4, 0x100, 0x0) r9 = gettid() capset(&(0x7f0000000240)={0x20080522, r9}, &(0x7f0000000380)) r10 = dup2(r0, r0) clone3(&(0x7f00000020c0)={0x200000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140), {0x3b}, &(0x7f0000000300)=""/4096, 0x1000, &(0x7f0000000180)=""/64, &(0x7f0000002080)=[0xffffffffffffffff, r4, r5, 0xffffffffffffffff, r8, r9, 0x0, 0x0], 0x8, {r10}}, 0x58) 22:29:31 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(0x0, 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:29:31 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0xffff1f00}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:29:31 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:29:31 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x7f, 0x0, 0x0, 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x1ff, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) 22:29:31 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_read_part_table(0x2, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000000)="c9fa09343bb8fd97cd3b2abd40e23eb8b76915848124e29981a1bd8d3fe8b681f3fabb634fac1024abc0f1643d88e733fb348d73aa8350e91c48490251bf7f812e8f5d1173c0", 0x46, 0x100000000}, {0x0}]) signalfd4(r1, &(0x7f00000001c0)={[0xff8d]}, 0x8, 0x800) r2 = getpid() r3 = epoll_create(0x4) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)) epoll_wait(r3, &(0x7f0000000000)=[{}], 0x1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r0, 0x4, 0x20, 0xaf2, 0x2}) ptrace$peek(0x2, r2, &(0x7f0000000480)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x7ff}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = epoll_create(0x4) epoll_wait(r5, &(0x7f0000000280)=[{}], 0x1, 0x4) [ 1575.058273] loop0: detected capacity change from 0 to 40 [ 1575.070410] loop1: detected capacity change from 0 to 40 22:29:31 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0xffff8000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:29:32 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:29:32 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0xffff8000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1575.149397] syz-executor.1: attempt to access beyond end of device [ 1575.149397] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1575.151079] Buffer I/O error on dev loop1, logical block 10, lost async page write 22:29:32 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x62, 0xaf, 0x7, 0xd8, 0x0, 0xefe, 0x8c040, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x3, 0x3}, 0x9000, 0x7, 0x80000000, 0x6, 0x6, 0xc0, 0x20, 0x0, 0x8, 0x0, 0xffffffffffffffbb}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x3) epoll_wait(0xffffffffffffffff, &(0x7f0000000280)=[{}], 0x1, 0x4) [ 1575.173896] loop5: detected capacity change from 0 to 264192 22:29:32 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) [ 1575.232497] loop7: detected capacity change from 0 to 40 22:29:32 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(0x0, 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:29:32 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0xffffff7f}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1575.303610] loop0: detected capacity change from 0 to 40 [ 1575.321517] loop1: detected capacity change from 0 to 40 22:29:32 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:29:32 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0xffffff7f}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1575.406759] syz-executor.1: attempt to access beyond end of device [ 1575.406759] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1575.408405] Buffer I/O error on dev loop1, logical block 10, lost async page write 22:29:50 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') write$binfmt_aout(0xffffffffffffffff, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:29:50 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_create(0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200080, 0xa0) epoll_create1(0x80000) clone3(&(0x7f0000000440)={0xc0000000, &(0x7f0000000000), &(0x7f0000000200)=0x0, &(0x7f0000000240), {0x11}, &(0x7f0000000280)=""/153, 0x99, &(0x7f0000000340)=""/150, &(0x7f0000000400)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x1, 0x64, 0x6, 0x40, 0x0, 0x100, 0x404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0xfff, 0x100}, 0x42111, 0x8, 0x8, 0x3, 0x2, 0x100, 0x3, 0x0, 0xe0, 0x0, 0x8}, r2, 0x1, r0, 0x2) epoll_wait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x9) 22:29:50 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:29:50 executing program 6: r0 = epoll_create(0x1ff) fcntl$getflags(r0, 0x401) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000000)) [ 1594.023748] loop1: detected capacity change from 0 to 40 22:29:50 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0xffffffe4}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:29:50 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:29:50 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0xffffffe4}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:29:50 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_read_part_table(0x2, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000000)="c9fa09343bb8fd97cd3b2abd40e23eb8b76915848124e29981a1bd8d3fe8b681f3fabb634fac1024abc0f1643d88e733fb348d73aa8350e91c48490251bf7f812e8f5d1173c0", 0x46, 0x100000000}, {0x0}]) signalfd4(r1, &(0x7f00000001c0)={[0xff8d]}, 0x8, 0x800) r2 = getpid() r3 = epoll_create(0x4) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)) epoll_wait(r3, &(0x7f0000000000)=[{}], 0x1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r0, 0x4, 0x20, 0xaf2, 0x2}) ptrace$peek(0x2, r2, &(0x7f0000000480)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x7ff}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = epoll_create(0x4) epoll_wait(r5, &(0x7f0000000280)=[{}], 0x1, 0x4) [ 1594.070086] loop0: detected capacity change from 0 to 40 [ 1594.114591] loop7: detected capacity change from 0 to 40 22:29:51 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0xffffffff}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:29:51 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:29:51 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:29:51 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {0xffffffff}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1594.227586] loop0: detected capacity change from 0 to 40 22:29:51 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x2, 0x0, 0x0}, 0x58) 22:29:51 executing program 6: r0 = epoll_create(0x391) r1 = getpgrp(0x0) r2 = getpgrp(0x0) r3 = gettid() capset(&(0x7f0000000240)={0x20080522, r3}, &(0x7f0000000380)) r4 = gettid() capset(&(0x7f0000000240)={0x20080522, r4}, &(0x7f0000000380)) clone3(&(0x7f0000000240)={0x40000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x40}, &(0x7f00000000c0)=""/211, 0xd3, &(0x7f00000001c0)=""/47, &(0x7f0000000200)=[r1, 0x0, 0xffffffffffffffff, r2, r3, 0x0, 0xffffffffffffffff, r4], 0x8}, 0x58) fcntl$getflags(r0, 0x401) fcntl$getownex(r0, 0x10, &(0x7f00000002c0)={0x0, 0x0}) setpriority(0x1, r5, 0x5) [ 1594.309309] loop1: detected capacity change from 0 to 40 22:29:51 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') write$binfmt_aout(0xffffffffffffffff, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:29:51 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:29:51 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x3, 0x0, 0x0}, 0x58) [ 1594.394797] loop5: detected capacity change from 0 to 264192 [ 1594.404670] loop0: detected capacity change from 0 to 40 [ 1594.442501] loop7: detected capacity change from 0 to 40 22:30:07 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_create(0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200080, 0xa0) epoll_create1(0x80000) clone3(&(0x7f0000000440)={0xc0000000, &(0x7f0000000000), &(0x7f0000000200)=0x0, &(0x7f0000000240), {0x11}, &(0x7f0000000280)=""/153, 0x99, &(0x7f0000000340)=""/150, &(0x7f0000000400)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x1, 0x64, 0x6, 0x40, 0x0, 0x100, 0x404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0xfff, 0x100}, 0x42111, 0x8, 0x8, 0x3, 0x2, 0x100, 0x3, 0x0, 0xe0, 0x0, 0x8}, r2, 0x1, r0, 0x2) epoll_wait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x9) 22:30:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:30:07 executing program 6: epoll_create(0x391) syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x80800) r0 = epoll_create(0x4) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)) r2 = socket$inet6(0xa, 0x1, 0x5) r3 = epoll_create(0x4) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000240)) epoll_wait(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, 0x0) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000007c0), 0x200041, 0x0) r7 = epoll_create(0x4) r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000240)) r9 = eventfd2(0xfffffffb, 0x800) io_submit(0x0, 0x9, &(0x7f0000000a00)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000080)="bb9b48a5afbcacf013772a1c59917c70ecfdbbd734c8d5a0eecddf3c7c95fdbb234e18ce7d687b95b09e1e156914519e5efe3f2011a85652c98708f78f91dd8c71b1a294ca5f8b30f141c320ee0f9989030695623698c0ef8db704a568e6555b4e86eb819a57d75447480401a15b6db61041b0069bff497c0ad0783794ba012f9803463bd0760e", 0x87, 0x4, 0x0, 0x3, r1}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xe, 0x0, r0, &(0x7f0000000280)="632727cb86a30d970b0a33cce6272cdec134e624e311a1499a29343f7c748d3538dea571248f7893e484705a9576c416bac703d0a179ec23213f47d63173c2892de091e8b970ec4447ec90416d076f0ed1494254189f44c6155e248e214c7575aea3e39f4f249db07a505eca5891d817f5868f999a5b34c90e43f3fe3cd5457b381530278d142c78230a89258a249854de8977f2e61d05f034a6e17004c9a739bdc9fd1e62ec2940ed908f4915", 0xad, 0x4, 0x0, 0x2, r4}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0xf0, 0xffffffffffffffff, &(0x7f00000001c0)="851e44ed1187853b9b51e2a8cc2162f16ed5a93ff8340185b19cb03663e97ab228e16ee236399ed87dbc401aa6c8d4d535178cc5", 0x34, 0x8, 0x0, 0x1, r4}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0xb3f6, 0xffffffffffffffff, &(0x7f0000000380)="0fe505acb296e6c32741945ee68fe2a940e503c4df85255329e926b76822dacff1e53d3b76784d6e3d0bf0393ac9e71c48a4383117531fe0c12deee03d1367160786753280022d6fdf61b0f1e4362cfeff23b4d2074ad0aa6eb6e6cc1cdcf56c3a7d7e281adf1e76d96657293ebf14f59612d00296c0f1ed962aa075ca91ef996a87990a1896936ab848", 0x8a, 0x9, 0x0, 0x3}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0x1f, r2, &(0x7f00000004c0)="36f179cd181b5fb3257dff163c5463c087d664162f7b116bf0c9a4f65205eda75763d0125b041f46071b1ceecc977d19b7a152d6feda16d400b88fce86dfbc1946f69dbcf2df970b98c0ac24a50946373ad7d33fb315882c0e86dff44d", 0x5d, 0xfffffffffffffff8, 0x0, 0x2}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x84e4, 0xffffffffffffffff, &(0x7f0000000640)="625cecb13a2a83a27fa2bf68f144a64b8f274a97273be0413462d34840f0c07eec564ac2373aa1e8eb7fc4ff363824b32af2928ec9222544cbdc8121f223d1a937162dcc5776a4e105f839301fa950c33a97c1c0ce08fa3d4cb1d3c41cd76d632e88c7215e6bdd5f943e4695adcf38f24fcfc8", 0x73, 0x1, 0x0, 0xdff1822ef5328d5a, r4}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x200, 0xffffffffffffffff, &(0x7f0000000700)="c7839ce5113372571f5a20e93eacf1cff15c6434aa3870fc53bdcb4bfba6a93a69aee1dde15ac3a176dff8b7d70afa10cdb905d0e207a51a20c4e1c3b39e2926c017be82189c493580acd1f8fa8c547ae0ffbe77248a6aefa6442f50cea0306d850ad2722e114c8ec5a142c61afad07413ac26b9e99bffa62f42e43329bcf3353720d06a2d6cf7424f5e58396cd64358691f5b73fe3b3c9f954006", 0x9b, 0x9, 0x0, 0x2, r6}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x7, r1, &(0x7f0000000840)="18ef034a", 0x4, 0x1913, 0x0, 0x2}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x7, 0x0, r8, &(0x7f00000008c0)="c172961def29b0be1c5ef0360d0c5c7d20d169e2a1f1a96a9cf9c2288efac9d3ece2df9315295102ae6bde9b57054988fb37eef3ac4c16d31fa90f74b31086f3cd189a3fca10564b8e85cf584ef80c80d9961363a0b7f839fd56644dbf4bbfb194f5918cf18a4ba30152ededbe47807313f94014271da9806b5d63a6796319ab020255daf0640bd1f72b59eea208f212f2472274ed71335ee340c179f781e504f8cc157eeec4725c5290c9bf9d67acc32166436482bd92dfa4d295b2f0579a016423271956c9bc8377ff4a2d2e", 0xcd, 0x1, 0x0, 0x0, r9}]) epoll_wait(r3, &(0x7f0000000000)=[{}], 0x1, 0x0) fcntl$getflags(r3, 0x408) 22:30:07 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:30:07 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x4, 0x0, 0x0}, 0x58) 22:30:07 executing program 4: epoll_create(0x4) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x80800) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000040)={0xa0000011}) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000000)={0x6, 0x1f}) r1 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x930c58f}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create(0x4) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x20, 0x40, 0x80, 0x1f, 0x0, 0xfffffffffffff0b2, 0x84, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2, 0x2ff}, 0x8026, 0x1ff, 0x5, 0x4, 0x6, 0x2e, 0x8, 0x0, 0xda4, 0x0, 0x3f}, 0x0, 0x3, r1, 0xf) epoll_wait(r2, &(0x7f0000000280)=[{}], 0x1, 0x4) recvmsg$unix(r0, &(0x7f00000005c0)={&(0x7f0000000180), 0x6e, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/74, 0x4a}, {&(0x7f0000000600)=""/26, 0x1a}, {&(0x7f0000000340)=""/210, 0xd2}, {&(0x7f0000000440)=""/107, 0x6b}, {&(0x7f00000004c0)=""/3, 0x3}, {&(0x7f0000000500)=""/60, 0x3c}], 0x6}, 0x42) 22:30:07 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') write$binfmt_aout(0xffffffffffffffff, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:30:07 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x2, 0x0, 0x0}, 0x58) [ 1610.773779] loop0: detected capacity change from 0 to 40 [ 1610.779898] loop7: detected capacity change from 0 to 40 [ 1610.842377] loop1: detected capacity change from 0 to 40 22:30:07 executing program 4: r0 = semget(0x0, 0x4, 0x23c) semctl$GETPID(r0, 0x3, 0xb, &(0x7f0000000000)=""/200) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0xe8) lstat(&(0x7f0000000200)='./cgroup/cgroup.procs\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000140)='./cgroup/cgroup.procs/file0\x00', &(0x7f0000000180), 0x800, &(0x7f0000000580)={'trans=unix,', {[{@debug={'debug', 0x3d, 0x5}}, {@cachetag={'cachetag', 0x3d, '[\xd4\xfb,+\'#[$$'}}, {@uname={'uname', 0x3d, ',@}'}}, {@cache_none}], [{@uid_lt={'uid<', r1}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@uid_gt={'uid>', r2}}, {@hash}]}}) fstat(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x400c2, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r4, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="f258", @ANYRES16=0x0], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x48000) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000400)={{{@in=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0xe8) lstat(&(0x7f0000000200)='./cgroup/cgroup.procs\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000140)='./cgroup/cgroup.procs/file0\x00', &(0x7f0000000180), 0x800, &(0x7f0000000640)=ANY=[@ANYBLOB="7472616e733d756e69782c64656275673d3078303030303030303030303030303030352c63616368657461673d5bd4fb2c2b27235b24242c756e616d653d2c407d2c63616368653d6e6f6e652c7569643c", @ANYRESDEC=r5, @ANYBLOB="2c6d61736b3d4941595f57eea761d75249541fbeb4e9b0fb452c7569e0ac", @ANYRESDEC=r6, @ANYBLOB=',hash,\x00']) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000340)={{0x2, r1, r3, r5, 0xee01, 0x50, 0x1}, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x38f3}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180)=0x0) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000001c0)={{0x2, r7, 0xffffffffffffffff, 0x0, 0xee00, 0x6}, 0x1, 0xff, 0x0, 0x0, 0x0, 0x0, 0x891c}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000240)=[0x1000, 0x6]) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x4, 0x3ff, 0x1800}, {0x0, 0x4c35, 0x1800}], 0x2, &(0x7f0000000100)={r8, r9+60000000}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = epoll_create(0x4) epoll_wait(r10, &(0x7f0000000280)=[{}], 0x1, 0x4) 22:30:07 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:30:07 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x8, 0x0, 0x0}, 0x58) 22:30:07 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(0x0, 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) [ 1610.938379] loop7: detected capacity change from 0 to 40 [ 1610.948038] loop0: detected capacity change from 0 to 40 22:30:07 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x3, 0x0, 0x0}, 0x58) [ 1610.993900] syz-executor.0: attempt to access beyond end of device [ 1610.993900] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1610.994846] Buffer I/O error on dev loop0, logical block 10, lost async page write 22:30:23 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x4, 0x0, 0x0}, 0x58) 22:30:23 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:30:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) 22:30:23 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_read_part_table(0x2, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000000)="c9fa09343bb8fd97cd3b2abd40e23eb8b76915848124e29981a1bd8d3fe8b681f3fabb634fac1024abc0f1643d88e733fb348d73aa8350e91c48490251bf7f812e8f5d1173c0", 0x46, 0x100000000}, {0x0}]) signalfd4(r1, &(0x7f00000001c0)={[0xff8d]}, 0x8, 0x800) r2 = getpid() r3 = epoll_create(0x4) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)) epoll_wait(r3, &(0x7f0000000000)=[{}], 0x1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r0, 0x4, 0x20, 0xaf2, 0x2}) ptrace$peek(0x2, r2, &(0x7f0000000480)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x7ff}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = epoll_create(0x4) epoll_wait(r5, &(0x7f0000000280)=[{}], 0x1, 0x4) 22:30:23 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x80000, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) 22:30:23 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(0x0, 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:30:23 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0xe, 0x0, 0x0}, 0x58) 22:30:23 executing program 6: r0 = epoll_create(0x391) r1 = epoll_create(0x4) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) r3 = gettid() capset(&(0x7f0000000240)={0x20080522, r3}, &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r5 = epoll_create(0x4) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000240)) epoll_wait(r5, &(0x7f0000000000)=[{}], 0x1, 0x0) r7 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @none}, &(0x7f0000000080)=0xe, 0x80800) kcmp$KCMP_EPOLL_TFD(0x0, r3, 0x7, r4, &(0x7f00000000c0)={r5, r7, 0x27}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)) fcntl$getflags(r2, 0xb) [ 1626.458466] loop7: detected capacity change from 0 to 40 [ 1626.463390] loop0: detected capacity change from 0 to 40 [ 1626.517404] syz-executor.0: attempt to access beyond end of device [ 1626.517404] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1626.518362] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 1626.526887] loop1: detected capacity change from 0 to 40 [ 1626.545839] loop5: detected capacity change from 0 to 264192 22:30:23 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:30:23 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x8, 0x0, 0x0}, 0x58) 22:30:23 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(0x0, 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:30:23 executing program 4: r0 = gettid() capset(&(0x7f0000000240)={0x20080522, r0}, &(0x7f0000000380)) r1 = gettid() capset(&(0x7f0000000240)={0x20080522, r1}, &(0x7f0000000380)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000005c0)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@private1}}, &(0x7f0000000200)=0xe8) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb, 0x142020}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="bc000000330004002abd7000fedbdf25ab004c80773422f186af9f206d2c047146d1c5cf2113d93c26dbd939b6009fcef3243f9f5ec6bef216499c8352121a603cd3baa0714ab53e543180eeaaaf242545f5e365ee95ea4504e47569e8db1a8d033369079b8e3e20832c08001f00", @ANYRES32, @ANYBLOB="507bee579f00d79dfc7c7e3e802db7b7608e6984cbf5e253bed17fa3d73875862f670037601ab2307bec5566e282d8705d39a11c89ec7c46b518727acd94eb3c875d1ed2a95cbca866d5"], 0xbc}, {&(0x7f00000002c0)={0x2e0, 0x41, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@typed={0x4, 0x47}, @nested={0x46, 0x62, 0x0, 0x1, [@typed={0x8, 0xe, 0x0, 0x0, @uid=0xee00}, @typed={0x8, 0x70, 0x0, 0x0, @pid=r0}, @generic="d8293e54616309a582ed4700be1e6461396a6e6e21cd6585d8900037bbdb98c3384fb7f28fbce74e9bf87561bc5679a4d258"]}, @nested={0x179, 0x3b, 0x0, 0x1, [@generic="9f6b73fba97e6ef54b00b9736b2ac54e6986611480c9964656ed6e421a5972ea6923016508b4907f3a61a7a62abc3c6ae9d3479e2fdaad1757100439", @generic="2225b6fc6c614ac2a895b602625ea9d175dd04d554ab756763146a20bbe30461f2a740be80b9712f83d84b82a3a9669ad1c58430de61798410ae5a2d6dab19691d71d1aca9359339024a4417e4e1b76a550fe8c688ee0295016473ca0d7178673e850c82663a0c171d6268f1a3304c5290e3755ea5908bff6a0366cfd8cc37e61eae69f6f05d160d6fa31499b4dc72afdaf5424c249b882e18390f62f1dde35a2611cddb6bc0f951d231583b9f62a21e30160bedaf694702c543a68f529f117acd6014bfb4f4f7dd8802f5432117136de1200b81a476e64004044382a1ddd9e3eeca6e483427f3406c", @generic="c030668640870569540614cef53cfca103f16a16edc2aaefca3501e8f124a1f43dc9043cc84b4eda6a16b8a8586a958a70cf00a83cdaa8e8e795b2c4f264861d25ca4bdcc18f5f1af9701ab38244d146"]}, @typed={0x6, 0x58, 0x0, 0x0, @str='^\x00'}, @nested={0xb9, 0x8d, 0x0, 0x1, [@generic="1c2843e3b95c08fe93b576e4a7247e29fb200042354917aed5d343382f2cd792b2a2201f6e4260dbda8df0a394f0d832a8b9b9c7b4b1aaf30bd123401ca9af6766e25e37eefbfeab3894123acd96dc3dd04ae5cee244a451833f0916b7dbe12a637506c7c68acb362a369ede4f09b91e5e15916dc0c57f1fe9c64b8381b5a453ef3dab35826e8a49f9d48805c261e6021644525deb3caebaff8440a3732de88369b53e3216c151a3a10d4357f8521ba8c3c2f3ab72"]}, @generic="50132b530d1b41db33be4a83e985adf3582308f59b944f11c33cbc68b12cf81ae0d2c8377f3d3545e591c423ad019aede4eb7870fe6aab396f8dab238dfd371821f280"]}, 0x2e0}, {&(0x7f0000000040)={0x24, 0x16, 0x300, 0x70bd2d, 0x25dfdbff, "", [@typed={0x14, 0x8d, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x24}], 0x3, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {r1, r2}}}], 0x20, 0x4001000}, 0x80) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = epoll_create(0x4) epoll_wait(r3, &(0x7f0000000280)=[{}], 0x1, 0x4) 22:30:23 executing program 6: r0 = epoll_create(0x391) fcntl$getflags(r0, 0x401) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file0\x00'}) r2 = socket$unix(0x1, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0x10}) [ 1626.664145] loop0: detected capacity change from 0 to 40 22:30:23 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x10, 0x0, 0x0}, 0x58) [ 1626.686323] loop7: detected capacity change from 0 to 40 22:30:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) [ 1626.711840] syz-executor.0: attempt to access beyond end of device [ 1626.711840] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1626.712724] Buffer I/O error on dev loop0, logical block 10, lost async page write 22:30:23 executing program 4: sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x1, 0x200, 0x400, 0xe7, 0x800, 0x4, 0x5, 0x1}, 0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x101, 0x0, 0xfffffffffffffffd, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x8) sched_setattr(0xffffffffffffffff, &(0x7f00000001c0)={0x38, 0x3, 0x10000000, 0x45b9, 0x1, 0x6c, 0x4, 0x9, 0x1, 0xff}, 0x0) r0 = epoll_create(0x4) r1 = getpid() r2 = syz_io_uring_complete(0x0) r3 = epoll_create(0x4) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)) ioctl$SNAPSHOT_SET_SWAP_AREA(r4, 0x400c330d, &(0x7f0000000200)={0x800, 0x2}) sched_setattr(r1, &(0x7f0000000180)={0x38, 0x0, 0x10000028, 0x1a5, 0x80, 0x3, 0x1000, 0x1000000000, 0x3ff, 0x10001}, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000140)=0x0) ioprio_get$pid(0x1, r5) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100)={0x120000002}) sched_setattr(r1, &(0x7f0000000040)={0x38, 0x3, 0x1, 0x120000, 0x3, 0x8, 0x2e2e, 0x4a2, 0x8, 0x5}, 0x0) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) 22:30:23 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:30:23 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0xe, 0x0, 0x0}, 0x58) [ 1626.822872] loop1: detected capacity change from 0 to 40 [ 1626.853930] loop0: detected capacity change from 0 to 40 22:30:23 executing program 7: chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:30:39 executing program 6: epoll_create(0x391) r0 = epoll_create(0x24) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0) openat(r1, &(0x7f0000000040)='./file0\x00', 0x602403, 0x21) fcntl$getflags(r0, 0x408) 22:30:39 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x11, 0x0, 0x0}, 0x58) 22:30:39 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:30:39 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() capset(&(0x7f0000000240)={0x20080522, r0}, &(0x7f0000000380)) r1 = perf_event_open$cgroup(&(0x7f0000000180)={0x4, 0x80, 0xc2, 0x59, 0x1, 0x9, 0x0, 0x4, 0x5, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000040), 0x1}, 0x2000, 0x2, 0x200, 0x6, 0x2, 0xffffffff, 0x6, 0x0, 0x1fde, 0x0, 0x9220}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x1f, 0x3, 0x5, 0x0, 0x0, 0xa04, 0x6, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x800, 0x9, 0xd8d0, 0x2, 0x1, 0x7, 0x7, 0x0, 0x5, 0x0, 0x8001}, r0, 0xa, r1, 0x6) r2 = clone3(&(0x7f0000001540)={0x0, &(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400), {0xc}, &(0x7f0000000440)=""/4096, 0x1000, &(0x7f0000001440)=""/160, &(0x7f0000001500)=[r0, r0], 0x2}, 0x58) perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0x6, 0x1, 0x3, 0x14, 0x0, 0x5, 0x101, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000200), 0x9}, 0x10808, 0x2, 0xffffff62, 0x7, 0x1ff, 0x1, 0x5, 0x0, 0xffffffff, 0x0, 0x8000}, r2, 0x8, 0xffffffffffffffff, 0x2) r3 = epoll_create(0x4) epoll_wait(r3, &(0x7f0000000280)=[{}], 0x1, 0x4) 22:30:39 executing program 7: chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:30:39 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) 22:30:39 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x10, 0x0, 0x0}, 0x58) 22:30:39 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) [ 1642.653994] loop0: detected capacity change from 0 to 40 [ 1642.657346] loop5: detected capacity change from 0 to 40 22:30:39 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x11, 0x0, 0x0}, 0x58) 22:30:39 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x104, 0x0, 0x0}, 0x58) [ 1642.704638] loop1: detected capacity change from 0 to 40 22:30:39 executing program 7: chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:30:39 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 1642.848458] loop0: detected capacity change from 0 to 40 [ 1642.900117] audit: type=1400 audit(1667601039.794:14): avc: denied { checkpoint_restore } for pid=7981 comm="syz-executor.4" capability=40 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 22:30:54 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x12c, 0x0, 0x0}, 0x58) [ 1657.657814] loop1: detected capacity change from 0 to 40 22:30:54 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x8, 0x78, 0x8, 0x80, 0x0, 0x1, 0x18211, 0xe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7f, 0xb6b4e32f8b4529df, @perf_bp={&(0x7f0000000000), 0xa}, 0x8, 0x3ff, 0x3, 0x5, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x3) r0 = epoll_create(0x4) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) 22:30:54 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) 22:30:54 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:30:54 executing program 6: epoll_create(0x391) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10102, 0x8c) fcntl$getflags(r0, 0x3) 22:30:54 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x12c, 0x0, 0x0}, 0x58) 22:30:54 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_read_part_table(0x2, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000000)="c9fa09343bb8fd97cd3b2abd40e23eb8b76915848124e29981a1bd8d3fe8b681f3fabb634fac1024abc0f1643d88e733fb348d73aa8350e91c48490251bf7f812e8f5d1173c0", 0x46, 0x100000000}, {0x0}]) signalfd4(r1, &(0x7f00000001c0)={[0xff8d]}, 0x8, 0x800) r2 = getpid() r3 = epoll_create(0x4) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)) epoll_wait(r3, &(0x7f0000000000)=[{}], 0x1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r0, 0x4, 0x20, 0xaf2, 0x2}) ptrace$peek(0x2, r2, &(0x7f0000000480)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x7ff}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = epoll_create(0x4) epoll_wait(r5, &(0x7f0000000280)=[{}], 0x1, 0x4) 22:30:54 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) 22:30:54 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) [ 1657.712248] loop7: detected capacity change from 0 to 40 [ 1657.742040] loop0: detected capacity change from 0 to 40 [ 1657.776907] loop1: detected capacity change from 0 to 40 22:30:54 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x132, 0x0, 0x0}, 0x58) 22:30:54 executing program 6: prctl$PR_SET_FP_MODE(0x2d, 0x1) prctl$PR_SET_FP_MODE(0x2d, 0x3) r0 = epoll_create(0x2) fcntl$getflags(r0, 0x401) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000280)=@l2tp={0x2, 0x0, @loopback}}, 0x0) r4 = syz_io_uring_complete(r2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000040)={0x40000006}) ioctl$BLKSECDISCARD(r4, 0x127d, &(0x7f0000000080)=0x1) 22:30:54 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:30:54 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) 22:30:54 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x145, 0x0, 0x0}, 0x58) 22:30:54 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x76, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x16004, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) r1 = epoll_create(0x4) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)={0x20000002}) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x5) 22:30:54 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x15d, 0x0, 0x0}, 0x58) 22:30:54 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) 22:30:54 executing program 6: r0 = epoll_create(0x391) fcntl$getflags(r0, 0x401) dup(r0) sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200488c0}, 0x50) r1 = epoll_create(0x4) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r3, 0x29, 0xcd, &(0x7f0000000000), &(0x7f0000000380)) r4 = memfd_secret(0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r5, 0x809, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004880}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)={0x80000010}) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000340)=ANY=[@ANYBLOB="01006ade6c23d4d7196aa48da1fc1963ab00000000000000"]) [ 1657.939761] loop5: detected capacity change from 0 to 264192 [ 1657.997347] loop7: detected capacity change from 0 to 40 22:30:54 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x1f2, 0x0, 0x0}, 0x58) 22:30:54 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0x0) [ 1658.063803] loop1: detected capacity change from 0 to 40 [ 1658.064325] loop0: detected capacity change from 0 to 40 22:31:11 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_read_part_table(0x2, 0x2, &(0x7f0000001f00)=[{&(0x7f0000000000)="c9fa09343bb8fd97cd3b2abd40e23eb8b76915848124e29981a1bd8d3fe8b681f3fabb634fac1024abc0f1643d88e733fb348d73aa8350e91c48490251bf7f812e8f5d1173c0", 0x46, 0x100000000}, {0x0}]) signalfd4(r1, &(0x7f00000001c0)={[0xff8d]}, 0x8, 0x800) r2 = getpid() r3 = epoll_create(0x4) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)) epoll_wait(r3, &(0x7f0000000000)=[{}], 0x1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r0, 0x4, 0x20, 0xaf2, 0x2}) ptrace$peek(0x2, r2, &(0x7f0000000480)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x7ff}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = epoll_create(0x4) epoll_wait(r5, &(0x7f0000000280)=[{}], 0x1, 0x4) 22:31:11 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x1f4, 0x0, 0x0}, 0x58) 22:31:11 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) 22:31:11 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0x0) 22:31:11 executing program 6: r0 = epoll_create(0x4) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "41ac67303e5ae1932dbc7dc76c237a0a"}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = epoll_create(0x391) fcntl$getflags(r5, 0x401) 22:31:11 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x20a, 0x0, 0x0}, 0x58) 22:31:11 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:31:11 executing program 4: r0 = gettid() capset(&(0x7f0000000240)={0x20080522, r0}, &(0x7f0000000380)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10050}, r0, 0x2, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create(0x4) epoll_wait(r1, &(0x7f0000000280)=[{}], 0x1, 0x4) r2 = gettid() capset(&(0x7f0000000240)={0x20080522, r2}, &(0x7f0000000380)) capset(&(0x7f0000000100)={0x20071026, r0}, &(0x7f0000000140)={0x0, 0x2, 0x7fffffff, 0x5a7b, 0x6, 0x581aea88}) capset(&(0x7f0000000000)={0x20080522, r2}, &(0x7f0000000040)={0xf3, 0x2, 0x4, 0x3, 0x2e, 0x5}) [ 1674.266067] loop7: detected capacity change from 0 to 40 [ 1674.276164] loop1: detected capacity change from 0 to 40 [ 1674.279602] loop5: detected capacity change from 0 to 264192 [ 1674.282479] capability: warning: `syz-executor.4' uses deprecated v2 capabilities in a way that may be insecure [ 1674.310216] loop0: detected capacity change from 0 to 40 22:31:11 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x1f6, 0x0, 0x0}, 0x58) 22:31:11 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0x0) 22:31:11 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xcc0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) epoll_wait(r0, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x4) [ 1674.421075] loop1: detected capacity change from 0 to 40 22:31:11 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x300, 0x0, 0x0}, 0x58) 22:31:11 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:31:11 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x1f8, 0x0, 0x0}, 0x58) 22:31:11 executing program 6: r0 = epoll_create(0x391) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r1, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000140)="8f857635", 0x4}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) fcntl$getflags(r0, 0x401) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000001780)=""/99, &(0x7f0000001800)=0x63) r3 = syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x7, &(0x7f00000015c0)=[{&(0x7f0000000140)="cc1bc2ce82ce89313905b090b1da6a21720ee3365141b15a5d3947c7334f764e78be35588f3d711ecfe8e752a87d60d67c906b17eaa60577c80f5e779992cb1f6b05c9174cd498c972de80f0ca64e6918a61d87235e2ca2e14ce95dde4dc07dd66c6d8a567de84951033828a85934b4f3aafba7fba7a19c7cab364e9092daf6737", 0x81, 0x6}, {&(0x7f0000000200)="9aecb87653cc7ed6f27c070eb88c9dcdf522e93df03e9eb711ec5f61c73f9ef4ad7b869aa5bc1a688823f60c7fc0b9e2a4806bc4bd486b13a6ad88c9519e1416626d659e6abca4335beb1b0fccd20afc88cf230be81a17caa65924c419fcaa5150c108e8b9bbc400969a3fd1c9d83b964b6cdd42db0b5c90e97ee0653763967e3b3848932ffdb0d799e15c29226b07b94b35", 0x92, 0x3}, {&(0x7f00000002c0)="c49b63070b0b79c8263483196de2cf5e5ea977374f2a7f9655c5a5e7c5d9bbb2f69554353c6ae7eb7f1c4a7669ae0af2896e12a0ad23fe7a78774fc42edda4116db4bfbe6eecff382c4fb747bd628791764c8f57f98d583dcc1a3504036ad6e10abb501f52a2d0387c2cc06048200ab11673cc649a4246c86c3d0434b67379402ffd5ba953e774ba2951a6d2f56d795ed8694512024dfe263e13ac088cc22ac662a7a7f2d77c0c5647f2a3d7cbd3a61de690b82819823e37", 0xb8, 0x7ff}, {&(0x7f0000000380)="6f3bbc4b56aaffb31d4d8278008a30d027725cd6d53829037091f193ab8487841db75d1b31430a0b1d1eee433c9aeacb120e21b42a02a1b642165e0e", 0x3c, 0x4}, {&(0x7f00000003c0)="79569882646073373cad965ad752dd09526cc984cec8c78fca2bbd95f819d28bc18f642333b22bc3b4dfc07c03616cedeaf29438739be06b08ea7b26b557f0e029de5c032a0829292f504fb2f4a4060070c84a397ff38307bd0cdb46c6cfdbcdc8185c41251fc3b365d9e7664c22a5f624c96ae096f3c6532b678c107b2dbfa1fd64b524485d07681a48feda19a2323e7382fc424f063583d9d3d33f377dd12497985d32a8c8993f53dbfcda80e162210c9e47c0bb31fbd087330a662c1226310bab1d2bf06615860114bd2b914b27c85a184bcce9f00d8b202f", 0xda, 0xffffffffffffffff}, {&(0x7f00000004c0)="83b4af9d164e0bfb33a87e909d7716fdd5c376cfdb675957e247729563ac36cb8d700754add303421476734f4819e475df68a670488e4e0754ef7f9c6cd9b3a4bc8b8cb6818354cbc157d5c9e2aac757dad001758d371f44c93f5d6898d084682ecc8007cbdd1ce0835c82de7a5be8e329928249bdaf7cdf08134d58ab110cea90706e030cf1ea8c6a39ef3e072bf748aeb207ca06888c208bddfca158e1610bb5eafce16a2f01365a157e8ece6cc4fbde2d9c97223645be596b8ed861a02b73ba2892074df3e561644a8c", 0xcb, 0x800}, {&(0x7f00000005c0)="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", 0x1000, 0xee}], 0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="636865636b3d7265ec617865642c6e6f726f636b2c73657373696f6e3d3078303030303030303030303030303031342c6f76657272696465726f636b7065726d2c6d6f64653d3078303030303030303030303030303030302c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030306130302c757466382c61756469742c00"]) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000001740)={0x90002005}) epoll_wait(r0, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0xa, 0x3) 22:31:11 executing program 4: r0 = epoll_create(0x4) r1 = epoll_create(0x4) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) dup2(r0, r1) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000240)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, r3, 0x0) r4 = epoll_create(0x4) epoll_wait(r4, &(0x7f0000000280)=[{}], 0x1, 0x4) [ 1674.553751] loop7: detected capacity change from 0 to 40 [ 1674.599508] loop6: detected capacity change from 0 to 264192 22:31:26 executing program 6: r0 = epoll_create(0x391) fcntl$getflags(r0, 0x401) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x123) 22:31:26 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:31:26 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) 22:31:26 executing program 4: r0 = epoll_create(0x4) r1 = epoll_create(0x4) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x400000, 0x0) r3 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) write$rfkill(r2, &(0x7f00000007c0)={0x8000, 0x9, 0x1, 0x1, 0x1}, 0x8) epoll_create(0x1000) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) flock(r2, 0xc32290b509cf856d) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000480)=ANY=[@ANYRESDEC, @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='./file0\x00']) r6 = epoll_create(0x4) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000240)) r8 = epoll_create(0x4) r9 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000040)) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x1000, r5, &(0x7f0000000080)="cc31cf800ca2180dc956f7d5010ad08f0592f3236b6c2d77c783c6bb46a21a8eded2a570e356ffd0e453349426de78ee62a57a87cbb44c412ea56c413830500a4cf2445d81289f1cabef48409543f8af97d79c35e8acf94b67beeb06ebe524844e4a9d7308d6529a9f2639258fc486a93447c8be2c8b8c67ecff1c72c1d4511bfb36adbecfc7cf3c33f927d4f68249a6472211c40cd00e04fa3f71a3606670fa9d61991018b938eae8b1b1ab7ad08aeeb74611ba160853a9b53dae60b66ce6e10e102457cb4f919422fbbcf0f93566318f4cc231fc341f205723bc926a33e6ee4bd0674b", 0xe4, 0xbb, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0x2, r8, &(0x7f00000001c0)="3d4dbd41dbc9835c14d2c7549c4244e6a598adcb76", 0x15, 0x3ff, 0x0, 0x1, r3}]) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) 22:31:26 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x1fa, 0x0, 0x0}, 0x58) 22:31:26 executing program 5: r0 = epoll_create(0x4) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "41ac67303e5ae1932dbc7dc76c237a0a"}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = epoll_create(0x391) fcntl$getflags(r5, 0x401) 22:31:26 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x40b, 0x0, 0x0}, 0x58) [ 1689.317399] Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 1689.330808] loop7: detected capacity change from 0 to 40 [ 1689.378793] loop0: detected capacity change from 0 to 40 22:31:26 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x1fc, 0x0, 0x0}, 0x58) 22:31:26 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40050}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x80000, 0x188) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x80, 0x20, 0x8, 0x4, 0x0, 0x8001, 0x4000, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0xb}, 0x200, 0xffffffffffffff00, 0x7ff, 0x8, 0x401, 0x1, 0x9e94, 0x0, 0x1, 0x0, 0x100}, 0xffffffffffffffff, 0x2, r0, 0xb) r1 = epoll_create(0x4) epoll_wait(r1, &(0x7f0000000280)=[{}], 0x1, 0x4) ioctl$FIONCLEX(r1, 0x5450) 22:31:26 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:31:26 executing program 6: r0 = epoll_create(0x391) fcntl$getflags(r0, 0x401) clock_gettime(0x0, &(0x7f00000031c0)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003040)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000001380)=[{&(0x7f0000000080)=""/198, 0xc6}, {&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000340)=""/31, 0x1f}, {&(0x7f0000000380)=""/4096, 0x1000}], 0x5, &(0x7f0000001400)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001480)=""/174, 0xae}], 0x1, &(0x7f0000001580)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f00000015c0)=""/16, 0x10}, {&(0x7f0000001600)=""/237, 0xed}, {&(0x7f0000001700)=""/50, 0x32}], 0x3}}, {{&(0x7f0000001780), 0x6e, &(0x7f00000028c0)=[{&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000002800)=""/140, 0x8c}], 0x2}}, {{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000002900)=""/162, 0xa2}, {&(0x7f00000029c0)=""/158, 0x9e}, {&(0x7f0000002a80)=""/21, 0x15}, {&(0x7f0000002ac0)=""/150, 0x96}], 0x4, &(0x7f0000002bc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000002cc0)=""/2, 0x2}, {&(0x7f0000002d00)=""/155, 0x9b}, {&(0x7f0000002dc0)=""/65, 0x41}, {&(0x7f0000002e40)=""/240, 0xf0}, {&(0x7f0000002f40)=""/116, 0x74}], 0x5}}], 0x6, 0x0, &(0x7f0000003200)={r1, r2+60000000}) sendto$inet(r3, &(0x7f0000003240)="053aac35337b89656d351719f07ae5b3af65fe969fde3538856532a2297bfc406100a9ca803c19a4ab2c4fbe107431d5fa7bc0edf61a276341a020111eb9e748d7ea6baf947c03ff90df637ab3acbdf89a3ab3f2299f83a1773db15562aea6409b08df80b02d29aac2882424b4aaf5a4d79c4e51a9e938a72ade9401bbd1eadbbe0ded7ae92fb1296a73ef05120fa212b8c1c253e336f50a66cf7d0d7dfae96b6d55c749e960e3ed84", 0xa9, 0x1, &(0x7f0000003300)={0x2, 0x4e21, @local}, 0x10) r4 = epoll_create(0x4) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000240)) epoll_wait(r4, &(0x7f0000000000)=[{}], 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000003340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) 22:31:26 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x40d, 0x0, 0x0}, 0x58) [ 1689.561661] loop7: detected capacity change from 0 to 40 22:31:26 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) 22:31:26 executing program 4: r0 = memfd_secret(0x80000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff800, 0xbe2}, 0x6508, 0x6, 0x807}, 0x0, 0x0, r0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0xe8) lstat(&(0x7f0000000200)='./cgroup/cgroup.procs\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000140)='./cgroup/cgroup.procs/file0\x00', &(0x7f0000000180), 0x800, &(0x7f0000000580)={'trans=unix,', {[{@debug={'debug', 0x3d, 0x5}}, {@cachetag={'cachetag', 0x3d, '[\xd4\xfb,+\'#[$$'}}, {@uname={'uname', 0x3d, ',@}'}}, {@cache_none}], [{@uid_lt={'uid<', r1}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@uid_gt={'uid>', r2}}, {@hash}]}}) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000140)='./file0\x00', 0x2, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000180)="790e06b5c14b78ccd6d3b76d01e1f48ec862b8a3ca4abce1fc6a29ee039ab69ef63678f0895ec0fd4756673a", 0x2c, 0x3}], 0x9400, &(0x7f0000000280)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80000}}, {@jqfmt_vfsv1}, {@grpjquota}, {@noacl}, {@nomblk_io_submit}, {@nombcache}, {@minixdf}], [{@fowner_eq={'fowner', 0x3d, r1}}]}) epoll_create(0x4) r3 = epoll_create(0x4) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)) epoll_wait(r3, &(0x7f0000000000)=[{}], 0x1, 0x0) r5 = epoll_create(0x4) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000240)) epoll_wait(r5, &(0x7f0000000000)=[{}], 0x1, 0x0) r7 = epoll_create(0x4) r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000240)) epoll_wait(r7, &(0x7f0000000000)=[{}], 0x1, 0x0) epoll_wait(r7, &(0x7f0000000040)=[{}, {}], 0x2, 0x5) 22:31:26 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x1fe, 0x0, 0x0}, 0x58) 22:31:26 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40050}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x80000, 0x188) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x80, 0x20, 0x8, 0x4, 0x0, 0x8001, 0x4000, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0xb}, 0x200, 0xffffffffffffff00, 0x7ff, 0x8, 0x401, 0x1, 0x9e94, 0x0, 0x1, 0x0, 0x100}, 0xffffffffffffffff, 0x2, r0, 0xb) r1 = epoll_create(0x4) epoll_wait(r1, &(0x7f0000000280)=[{}], 0x1, 0x4) ioctl$FIONCLEX(r1, 0x5450) 22:31:26 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) r1 = gettid() capset(&(0x7f0000000240)={0x20080522, r1}, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x9, 0x3, 0xf6, 0x7, 0x0, 0xc3, 0xe, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x47, 0x2, @perf_bp, 0x9020, 0xe05b, 0x7fffffff, 0x7, 0x6, 0x2, 0xd1, 0x0, 0x5, 0x0, 0x199d}, r1, 0x6, 0xffffffffffffffff, 0xa) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) [ 1689.713507] loop0: detected capacity change from 0 to 40 22:31:41 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:31:41 executing program 6: r0 = epoll_create(0x1) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x108, 0x12, 0x2, 0x5, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x2}, [@typed={0x8, 0x6d, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="08209ac9bffa94094ae55472fcbed1dd6774d88789760afaee9056adc331443788b79a11412b9f23a267de022ba1f84a7e25796d6693c3bfc822830d01dfd76b3bd474282f2b2dcc3f33f0014b9657c991595b77aaec93f13188de4f66ed8ccde44685fc09279dd6534105adec065c58e947fb1d66352424fe8bc40b4cfd6b9022e9a6b1e759c8b8173f863588fba3f10406436d079973b6ddf988c4db6872a5be52b9633f5ca5266f934cc115ceef1864cc86bf3b1ac225f1d8c478a9007f0aad4051f9e6a5847af9bfaf8e9c0b58637b8d12803cec46a4e5614ca45343228e1acf39b587d0378c5078b3"]}, 0x108}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000010) fstat(r0, &(0x7f0000000000)) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000300)={0x1, 0x4}) r1 = epoll_create(0x4) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) r3 = epoll_create(0x4) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)) dup2(r2, r4) r5 = syz_open_dev$vcsu(&(0x7f0000000280), 0x7, 0x402000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r5, &(0x7f00000002c0)={0x30000000}) fcntl$getflags(r0, 0x401) 22:31:41 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x202, 0x0, 0x0}, 0x58) 22:31:41 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40050}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x80000, 0x188) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x80, 0x20, 0x8, 0x4, 0x0, 0x8001, 0x4000, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0xb}, 0x200, 0xffffffffffffff00, 0x7ff, 0x8, 0x401, 0x1, 0x9e94, 0x0, 0x1, 0x0, 0x100}, 0xffffffffffffffff, 0x2, r0, 0xb) r1 = epoll_create(0x4) epoll_wait(r1, &(0x7f0000000280)=[{}], 0x1, 0x4) ioctl$FIONCLEX(r1, 0x5450) 22:31:41 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/icmp\x00') epoll_wait(r1, &(0x7f0000000040)=[{}, {}, {}], 0x3, 0x5) 22:31:41 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) 22:31:41 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) r1 = gettid() capset(&(0x7f0000000240)={0x20080522, r1}, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x9, 0x3, 0xf6, 0x7, 0x0, 0xc3, 0xe, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x47, 0x2, @perf_bp, 0x9020, 0xe05b, 0x7fffffff, 0x7, 0x6, 0x2, 0xd1, 0x0, 0x5, 0x0, 0x199d}, r1, 0x6, 0xffffffffffffffff, 0xa) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) 22:31:41 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x40e, 0x0, 0x0}, 0x58) [ 1704.586347] loop0: detected capacity change from 0 to 40 22:31:41 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x40f, 0x0, 0x0}, 0x58) 22:31:41 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() capset(&(0x7f0000000240)={0x20080522, r1}, &(0x7f0000000380)) r2 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x9, 0x8, 0x3, 0x81, 0x0, 0x8, 0x100, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, @perf_config_ext={0xfffffffffffffffc, 0x6}, 0x8000, 0xffffffffffffffc1, 0x1f, 0x9, 0xff, 0x9, 0x2, 0x0, 0x6, 0x0, 0x85}, r1, 0x2, 0xffffffffffffffff, 0x19) r3 = epoll_create(0x4) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)) r5 = gettid() close_range(r2, r0, 0x2) capset(&(0x7f0000000240)={0x20080522, r5}, &(0x7f0000000380)) fcntl$setown(r4, 0x8, r5) r6 = epoll_create(0x4) epoll_wait(r6, &(0x7f0000000280)=[{}], 0x1, 0x4) 22:31:41 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:31:41 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 1) 22:31:41 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0x0) [ 1704.755032] loop1: detected capacity change from 0 to 40 [ 1704.761865] loop0: detected capacity change from 0 to 40 22:31:57 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0xa02, 0x0, 0x0}, 0x58) 22:31:57 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:31:57 executing program 6: r0 = epoll_create(0x391) fcntl$getflags(r0, 0x401) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x120400, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) fcntl$dupfd(r1, 0x0, r2) 22:31:57 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x204, 0x0, 0x0}, 0x58) 22:31:58 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40050}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x80000, 0x188) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x80, 0x20, 0x8, 0x4, 0x0, 0x8001, 0x4000, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0xb}, 0x200, 0xffffffffffffff00, 0x7ff, 0x8, 0x401, 0x1, 0x9e94, 0x0, 0x1, 0x0, 0x100}, 0xffffffffffffffff, 0x2, r0, 0xb) r1 = epoll_create(0x4) ioctl$FIONCLEX(r1, 0x5450) 22:31:58 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0x0) 22:31:58 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 2) 22:31:58 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x4) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x3, 0x8, 0x3f, 0x8, 0x0, 0xf0, 0x44090, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x20, 0x7, @perf_bp={&(0x7f0000000100), 0x9}, 0x1500, 0x1f, 0x9, 0x2, 0xffffffffffff0000, 0x7fff, 0xe33b, 0x0, 0xff}, 0x0, 0xc, r0, 0x9) epoll_wait(r1, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x2) fallocate(r1, 0x4a, 0x401, 0x8) 22:31:58 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x206, 0x0, 0x0}, 0x58) 22:31:58 executing program 6: r0 = epoll_create(0x8) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x20800, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffffffffffe0, 0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x6}) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0xf2d) fcntl$getflags(r0, 0x401) [ 1721.185750] loop0: detected capacity change from 0 to 40 [ 1721.194897] loop1: detected capacity change from 0 to 40 22:31:58 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) acct(0x0) 22:31:58 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40050}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x80000, 0x188) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x80, 0x20, 0x8, 0x4, 0x0, 0x8001, 0x4000, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0xb}, 0x200, 0xffffffffffffff00, 0x7ff, 0x8, 0x401, 0x1, 0x9e94, 0x0, 0x1, 0x0, 0x100}, 0xffffffffffffffff, 0x2, r0, 0xb) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) 22:31:58 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0xb04, 0x0, 0x0}, 0x58) 22:31:58 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0x0) 22:31:58 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x208, 0x0, 0x0}, 0x58) [ 1721.307718] syz-executor.1: attempt to access beyond end of device [ 1721.307718] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1721.309394] Buffer I/O error on dev loop1, logical block 10, lost async page write 22:31:58 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:31:58 executing program 6: r0 = epoll_create(0x4) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x88, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vcan0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'sit0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x44000}, 0x4008811) r2 = epoll_create(0x391) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0) fcntl$getflags(r2, 0x401) r3 = epoll_create(0x4) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)) sendmsg$AUDIT_USER_TTY(r4, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="880000000300000026bd7000fcdbdf25c217a6416748659afbf4bfd6aae5918cadae7a3b936fbb43d6954beb3ef71f7f379c825ac0e078a83ebd5a602a8a7024f1209864e09c592d21fc35902b632e8245c8378b8180cfc3670308b58e58aa012b3cb5f94a130626d4ba7f7e6cc9cb6afbb4e59127a9e05b8f2d7c46a9f800"/136], 0x88}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000) [ 1721.380744] loop0: detected capacity change from 0 to 40 [ 1721.398004] FAT-fs (loop7): bogus number of reserved sectors [ 1721.398409] FAT-fs (loop7): Can't find a valid FAT filesystem 22:32:14 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x20a, 0x0, 0x0}, 0x58) 22:32:14 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40050}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x80000, 0x188) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x80, 0x20, 0x8, 0x4, 0x0, 0x8001, 0x4000, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0xb}, 0x200, 0xffffffffffffff00, 0x7ff, 0x8, 0x401, 0x1, 0x9e94, 0x0, 0x1, 0x0, 0x100}, 0xffffffffffffffff, 0x2, r0, 0xb) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) 22:32:14 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x4) epoll_wait(r1, &(0x7f0000000280)=[{}], 0x1, 0x4) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="85008401ff0000004a02000007000000fc010000ff010000000000000000000074f4d4e6299aa9ded6532f1fbf7af9b031d7e25c9051f3ae4115eba0a7879a2f8b653c4a0ffa7a9648956908f01d7483dff9e614d187fed08590c25a789e78706c4a02a6cc536d4c1f7bb80dbf9e1604cc64341bc0a2559a7ea4053f6f9fdda49b2d14355ac9b8bdd69fd82595424647883de4a697bcab4512722cc4ca126b777b4192373060de1798da72bde282d91ccfcb1c568eec46bb15edaa31d6d58c00c90000000000000000000000000000000000000000000000000000000000000000000000000000001000"/449], 0x1c1) 22:32:14 executing program 6: r0 = epoll_create(0x391) fcntl$getflags(r0, 0x401) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = epoll_create(0x4) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)) fcntl$dupfd(r3, 0x0, r0) openat(r3, &(0x7f0000000080)='./file0\x00', 0x103100, 0x21) fcntl$setlease(r1, 0x400, 0x0) r4 = epoll_create(0x4) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000240)) getsockopt$inet6_int(r5, 0x29, 0x46, &(0x7f0000000000), &(0x7f0000000040)=0x4) 22:32:14 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 3) 22:32:14 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:32:14 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0xd04, 0x0, 0x0}, 0x58) 22:32:14 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 1) [ 1737.789869] loop1: detected capacity change from 0 to 40 [ 1737.806384] loop0: detected capacity change from 0 to 40 22:32:14 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0xe00, 0x0, 0x0}, 0x58) 22:32:14 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x76, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x4) [ 1737.849715] FAT-fs (loop7): bogus number of reserved sectors [ 1737.850627] FAT-fs (loop7): Can't find a valid FAT filesystem 22:32:14 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40050}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x80000, 0x188) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x80, 0x20, 0x8, 0x4, 0x0, 0x8001, 0x4000, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0xb}, 0x200, 0xffffffffffffff00, 0x7ff, 0x8, 0x401, 0x1, 0x9e94, 0x0, 0x1, 0x0, 0x100}, 0xffffffffffffffff, 0x2, r0, 0xb) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) 22:32:14 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 4) 22:32:14 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 2) 22:32:14 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 1) [ 1737.966247] loop1: detected capacity change from 0 to 40 22:32:14 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x20c, 0x0, 0x0}, 0x58) 22:32:14 executing program 6: r0 = epoll_create(0x391) r1 = epoll_create(0x4) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)) dup(r2) fcntl$getflags(r0, 0x401) 22:32:14 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) [ 1738.037802] syz-executor.1: attempt to access beyond end of device [ 1738.037802] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1738.038770] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 1738.063126] loop0: detected capacity change from 0 to 40 [ 1738.151097] FAT-fs (loop7): bogus number of reserved sectors [ 1738.151518] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1738.165499] syz-executor.0: attempt to access beyond end of device [ 1738.165499] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1738.167192] Buffer I/O error on dev loop0, logical block 10, lost async page write 22:32:30 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40050}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x80000, 0x188) r0 = epoll_create(0x4) ioctl$FIONCLEX(r0, 0x5450) 22:32:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 3) 22:32:30 executing program 6: epoll_create(0x391) r0 = epoll_create(0x4) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0) r2 = ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) fcntl$getflags(r2, 0x0) 22:32:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 5) 22:32:30 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0xe04, 0x0, 0x0}, 0x58) [ 1753.160554] loop0: detected capacity change from 0 to 40 [ 1753.166857] loop1: detected capacity change from 0 to 40 22:32:30 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:32:30 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x20e, 0x0, 0x0}, 0x58) 22:32:30 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:32:30 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0xf04, 0x0, 0x0}, 0x58) 22:32:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 4) 22:32:30 executing program 6: r0 = epoll_create(0x2) fcntl$getflags(r0, 0x401) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x81, &(0x7f0000000040)={[0x35ba9a32]}, 0x8) 22:32:30 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x210, 0x0, 0x0}, 0x58) 22:32:30 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40050}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) ioctl$FIONCLEX(r0, 0x5450) [ 1753.309996] FAT-fs (loop7): bogus number of reserved sectors [ 1753.310510] FAT-fs (loop7): Can't find a valid FAT filesystem 22:32:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 6) [ 1753.358554] loop0: detected capacity change from 0 to 40 22:32:30 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x1100, 0x0, 0x0}, 0x58) 22:32:30 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) [ 1753.467827] loop1: detected capacity change from 0 to 40 [ 1753.479434] syz-executor.0: attempt to access beyond end of device [ 1753.479434] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1753.481488] Buffer I/O error on dev loop0, logical block 10, lost async page write 22:32:30 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x212, 0x0, 0x0}, 0x58) [ 1753.595430] syz-executor.1: attempt to access beyond end of device [ 1753.595430] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1753.596414] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 1753.652479] FAT-fs (loop7): bogus number of reserved sectors [ 1753.652990] FAT-fs (loop7): Can't find a valid FAT filesystem 22:32:46 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 5) [ 1769.848196] loop1: detected capacity change from 0 to 40 22:32:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 7) 22:32:46 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r2, r1, 0x0, 0xfffffdef) 22:32:46 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x300, 0x0, 0x0}, 0x58) 22:32:46 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40050}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) ioctl$FIONCLEX(r0, 0x5450) 22:32:46 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x1171, 0x0, 0x0}, 0x58) 22:32:46 executing program 6: ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000000)) r0 = epoll_create(0x391) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000080)={0x3, 0x8000}) fcntl$getflags(r0, 0x401) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000040)) 22:32:46 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) [ 1769.896995] loop0: detected capacity change from 0 to 40 [ 1769.899768] FAT-fs (loop7): bogus number of reserved sectors [ 1769.900468] FAT-fs (loop7): Can't find a valid FAT filesystem 22:32:46 executing program 5: r0 = epoll_create(0x4) ioctl$FIONCLEX(r0, 0x5450) [ 1769.967757] syz-executor.1: attempt to access beyond end of device [ 1769.967757] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1769.968628] Buffer I/O error on dev loop1, logical block 10, lost async page write 22:32:46 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x1187, 0x0, 0x0}, 0x58) 22:32:46 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:32:46 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x402, 0x0, 0x0}, 0x58) 22:32:46 executing program 6: r0 = epoll_create(0x391) r1 = gettid() capset(&(0x7f0000000240)={0x20080522, r1}, &(0x7f0000000380)) epoll_create(0x4) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r5 = epoll_create(0x4) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000240)) dup(r6) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000000000000019353f6d908c8aec47cb336777a7066c1f90e2b4de14774e272cd09315b95a9f1b93d436c36a2cde775d9d860f94f3bf15a5d6fcecacc539080000009fbe9ef619ecb40713df6d52cf0101a6fd0b3f8fb061f5781dd6eff87abd69e3801b2fb9394cefbf4a1c9bbea2de2df41d78c32bbdecd5afaece69e36408cb0864338a75f89c255df1bdfc0d040a56fb2170fac201ec131cdfad168ede3c11355ed11e1a60729823ca7f801c543dd4c52262c1d657fef32bcf8c8f39e25476bfb6a8704f858a5e8b"]) kcmp$KCMP_EPOLL_TFD(r1, 0xffffffffffffffff, 0x7, r2, &(0x7f0000000040)={r0, r4, 0x80000000}) fcntl$getflags(r0, 0x401) 22:32:46 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 6) [ 1770.167683] loop7: detected capacity change from 0 to 40 [ 1770.181081] loop0: detected capacity change from 0 to 40 [ 1770.186055] FAT-fs (loop7): bogus number of reserved sectors [ 1770.186451] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1770.267820] syz-executor.0: attempt to access beyond end of device [ 1770.267820] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1770.268744] Buffer I/O error on dev loop0, logical block 10, lost async page write 22:33:04 executing program 5: r0 = epoll_create(0x4) ioctl$FIONCLEX(r0, 0x5450) 22:33:04 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x11b1, 0x0, 0x0}, 0x58) 22:33:04 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') stat(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000380)) r0 = epoll_create(0x4) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)) openat(r1, &(0x7f00000000c0)='./file1\x00', 0x4100, 0x100) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200000, 0x100) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000001c0)={0x70002001}) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) r4 = accept4$inet(r2, &(0x7f0000000280)={0x2, 0x0, @loopback}, &(0x7f0000000340)=0x10, 0x80800) sendfile(r3, r4, 0x0, 0x80000000) 22:33:04 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 7) 22:33:04 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x602, 0x0, 0x0}, 0x58) 22:33:04 executing program 6: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x52, 0x0, 0x1, {0x2, 0x9}, {0x101, 0x5}, @period={0x5d, 0x7, 0xfff8, 0x3, 0x538, {0x9, 0x9, 0x0, 0x2}, 0x8, &(0x7f0000000080)=[0x606, 0x6, 0x1, 0x6, 0x80, 0x8001, 0xffe1, 0x2]}}) r0 = gettid() capset(&(0x7f0000000240)={0x20080522, r0}, &(0x7f0000000380)) syz_open_procfs$userns(r0, &(0x7f0000000040)) r1 = epoll_create(0x391) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x210000, 0x0) fcntl$getflags(r1, 0x1) 22:33:04 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:33:04 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 8) [ 1787.816735] loop0: detected capacity change from 0 to 40 [ 1787.835092] loop1: detected capacity change from 0 to 40 [ 1787.865419] loop7: detected capacity change from 0 to 40 [ 1787.890206] FAT-fs (loop7): bogus number of reserved sectors [ 1787.891128] FAT-fs (loop7): Can't find a valid FAT filesystem 22:33:04 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x11c5, 0x0, 0x0}, 0x58) [ 1787.929287] syz-executor.0: attempt to access beyond end of device [ 1787.929287] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1787.931062] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 1787.943479] syz-executor.1: attempt to access beyond end of device [ 1787.943479] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1787.945043] Buffer I/O error on dev loop1, logical block 10, lost async page write 22:33:04 executing program 5: r0 = epoll_create(0x4) ioctl$FIONCLEX(r0, 0x5450) 22:33:04 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x802, 0x0, 0x0}, 0x58) 22:33:04 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:33:04 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 8) 22:33:04 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 9) 22:33:04 executing program 6: r0 = epoll_create(0x391) fcntl$getflags(r0, 0x401) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x18, r2, 0x301, 0x0, 0x0, {0xf}, [@ETHTOOL_A_PAUSE_HEADER={0x4}]}, 0x18}}, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xfd}, r7}, 0x14) sendmmsg$inet6(r4, &(0x7f00000006c0)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000001b00)=[@pktinfo={{0x24, 0x29, 0x32, {@dev, r7}}}], 0x28}}], 0x1, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$inet6(0xa, 0x1, 0x0) r10 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r9, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xfd}, r11}, 0x14) sendmmsg$inet6(r8, &(0x7f00000006c0)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000001b00)=[@pktinfo={{0x24, 0x29, 0x32, {@private2, r11}}}], 0x28}}], 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x2f, 0x38, 0xff, 0x6, 0x4, @mcast1, @empty, 0x20, 0x1, 0xffff, 0x81}}) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x168, r2, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_PAUSE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PAUSE_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x488c1}, 0x8080) 22:33:04 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x9d19}], 0x1c8060, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x50001, 0x82) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) [ 1788.184442] loop7: detected capacity change from 0 to 40 [ 1788.199866] FAT-fs (loop7): bogus number of reserved sectors 22:33:05 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x185f, 0x0, 0x0}, 0x58) [ 1788.200856] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1788.241609] loop0: detected capacity change from 0 to 40 [ 1788.259862] loop1: detected capacity change from 0 to 40 22:33:05 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) ioctl$FIONCLEX(r0, 0x5450) [ 1788.407006] syz-executor.0: attempt to access beyond end of device [ 1788.407006] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1788.408767] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 1788.433409] syz-executor.1: attempt to access beyond end of device [ 1788.433409] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1788.435576] Buffer I/O error on dev loop1, logical block 10, lost async page write 22:33:23 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:33:23 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0xa02, 0x0, 0x0}, 0x58) 22:33:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 10) 22:33:23 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x2000, 0x0, 0x0}, 0x58) 22:33:23 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:33:23 executing program 6: r0 = epoll_create(0x6) fcntl$getflags(r0, 0x401) 22:33:23 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) ioctl$FIONCLEX(r0, 0x5450) 22:33:23 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 9) [ 1806.796414] loop1: detected capacity change from 0 to 40 [ 1806.803113] loop7: detected capacity change from 0 to 40 [ 1806.807595] loop0: detected capacity change from 0 to 40 [ 1806.826640] FAT-fs (loop7): bogus number of reserved sectors [ 1806.827443] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1806.867822] syz-executor.0: attempt to access beyond end of device [ 1806.867822] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1806.869285] Buffer I/O error on dev loop0, logical block 10, lost async page write 22:33:23 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0xc02, 0x0, 0x0}, 0x58) 22:33:23 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) ioctl$FIONCLEX(r0, 0x5450) 22:33:23 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 10) 22:33:23 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x2c01, 0x0, 0x0}, 0x58) [ 1806.976850] syz-executor.1: attempt to access beyond end of device [ 1806.976850] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1806.978630] Buffer I/O error on dev loop1, logical block 10, lost async page write 22:33:23 executing program 6: r0 = epoll_create(0xbda1) r1 = epoll_create(0x4) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0xd0000000}) r3 = epoll_create(0x4) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)) epoll_pwait2(r4, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000080), &(0x7f00000000c0)={[0x81]}, 0x8) fcntl$getflags(r0, 0x401) 22:33:23 executing program 5: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40050}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) ioctl$FIONCLEX(r0, 0x5450) 22:33:23 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:33:23 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x3201, 0x0, 0x0}, 0x58) [ 1807.115317] loop0: detected capacity change from 0 to 40 [ 1807.268482] syz-executor.0: attempt to access beyond end of device [ 1807.268482] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1807.270226] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 1807.288827] loop7: detected capacity change from 0 to 40 [ 1807.313090] FAT-fs (loop7): bogus number of reserved sectors [ 1807.314183] FAT-fs (loop7): Can't find a valid FAT filesystem 22:33:41 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:33:41 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0xe00, 0x0, 0x0}, 0x58) 22:33:41 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') write$binfmt_aout(r0, &(0x7f0000000240)={{0x107, 0x11, 0x80, 0xfb, 0x5, 0xaefe, 0x299, 0x5}, "dfd21666a5737422001095fec3fef79643795e8011e5923e3df2430b7398a1153e607912fe2e2b22500cf134d30e03332ce96aa6e785ff4be8b35cc3068ec76e0093852777b36e5a88ed043dc44fabac96b9f1831626bddbe6d2d47b8be774d985ea62624db36242abdd4a9371d6522c29ce0f7052ebc8fc8235abbcbb38b643644eafd6b5e12235779c62bccd7542f99726ae09893fa58543095d06a83f8accb420cdb3", ['\x00']}, 0x1c4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r2, r1, 0x0, 0xfffffdef) 22:33:41 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 11) 22:33:41 executing program 5: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40050}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) ioctl$FIONCLEX(r0, 0x5450) 22:33:41 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x3f00, 0x0, 0x0}, 0x58) 22:33:41 executing program 6: r0 = epoll_create(0xfffffff8) fcntl$getflags(r0, 0x401) dup(r0) 22:33:42 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 11) [ 1825.142574] loop0: detected capacity change from 0 to 40 22:33:42 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x4000, 0x0, 0x0}, 0x58) [ 1825.159797] loop7: detected capacity change from 0 to 40 [ 1825.167152] FAT-fs (loop7): bogus number of reserved sectors [ 1825.167580] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1825.186180] syz-executor.0: attempt to access beyond end of device [ 1825.186180] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1825.187318] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 1825.214242] loop1: detected capacity change from 0 to 40 22:33:42 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:33:42 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 12) 22:33:42 executing program 6: readahead(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r0 = epoll_create(0x391) fcntl$getflags(r0, 0x401) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x6007, &(0x7f0000000040)=0x2) [ 1825.313439] syz-executor.1: attempt to access beyond end of device [ 1825.313439] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1825.314398] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 1825.333276] loop7: detected capacity change from 0 to 40 [ 1825.343677] FAT-fs (loop7): bogus number of reserved sectors [ 1825.344104] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1825.360082] loop0: detected capacity change from 0 to 40 [ 1825.403854] syz-executor.0: attempt to access beyond end of device [ 1825.403854] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1825.404785] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 1839.921775] loop7: detected capacity change from 0 to 40 [ 1839.925402] FAT-fs (loop7): bogus number of reserved sectors [ 1839.925801] FAT-fs (loop7): Can't find a valid FAT filesystem 22:33:56 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x5d01, 0x0, 0x0}, 0x58) 22:33:56 executing program 5: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40050}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) ioctl$FIONCLEX(r0, 0x5450) 22:33:56 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:33:56 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 12) 22:33:56 executing program 6: r0 = epoll_create(0x391) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000001030000180000003e8e890e83a5ab399098c9bbc952a138a6fb240525c7776f7ba66acdf1b549365774892548574ac8fa682c13e8932ecbc9293d362b384169fe7fc5c5ba3c1b252efa297c88ac22d7ba9d19ea9a8a97e9859a6f237ade837967b80a600f9c4a80e11c", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\b\x00\x00\x00I\x00\x00\x00./file0\x00']) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) fcntl$getflags(r1, 0x401) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000000000)={0x400, 0xf942}) 22:33:56 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 13) 22:33:56 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0xe02, 0x0, 0x0}, 0x58) 22:33:56 executing program 4: r0 = epoll_create(0x4) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000080)="60c861cdc4791c6d6b646f7366d8a02b00080101000440220923fa312216970aedd3", 0x22}, {0x0, 0x0, 0x1}], 0x18c84, &(0x7f0000001300)=ANY=[@ANYRESOCT, @ANYBLOB="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", @ANYRES64, @ANYRES64=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRESOCT]) r2 = epoll_create(0x4) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)) epoll_wait(r2, &(0x7f0000000000)=[{}], 0x1, 0x0) openat$incfs(r1, &(0x7f00000012c0)='.log\x00', 0x40040, 0x100) signalfd4(r2, &(0x7f00000001c0)={[0x1]}, 0x8, 0x100800) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r5, r4, 0x0, 0xfffffdef) r6 = fsmount(r5, 0x1, 0xf7) r7 = open(&(0x7f0000000040)='./file1\x00', 0x1a0400, 0xb3a20379742fc72d) ioctl$EXT4_IOC_SWAP_BOOT(r7, 0x6611) ioctl$RNDCLEARPOOL(r6, 0x5206, &(0x7f0000000000)=0x1) 22:33:56 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40050}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) ioctl$FIONCLEX(r0, 0x5450) 22:33:56 executing program 6: r0 = epoll_create(0x4) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)) r2 = epoll_create(0x4) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)) epoll_wait(r2, &(0x7f0000000000)=[{}], 0x1, 0x0) r4 = openat(r1, &(0x7f0000000080)='./file0\x00', 0x80, 0x4d) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000280)={0x20000004}) pwritev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)}, {&(0x7f00000000c0)="51365abced3e961ee5203d877141293d81822fe3f2a357dffed658e99800dc27cd60b209713f7c", 0x27}, {&(0x7f0000000100)="74fda7e3ad9458e99de5ae5c0a2a07604253de646e5e8643446360a49562f8014bc2429659a1eb2eb6ffb769dbd2bd35d5abfabdd29f70be4657945510a607d378dc233c15c8e8da3ee8f887b02814f5761fdd4f7aeeb1088805fa919dfb9bf53c2992c538dbebe26fca5344eb841c62af1252c0723fec065df1fda417d8c2091d30e46e66b4f2f4affb55fb25ecc704ba053bbda7470589062ae32c2a81351c418170078fd476bc0f56b3362edefa158acf", 0xb2}], 0x3, 0x80, 0x4) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f00000002c0)=0xfff) epoll_create(0x391) openat(r3, &(0x7f0000000340)='./file0\x00', 0x104100, 0x1da) r5 = epoll_create(0x4) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r7, 0xf502, 0x0) epoll_wait(r5, &(0x7f0000000000)=[{}], 0x1, 0x0) fcntl$getflags(r5, 0x401) [ 1839.939578] loop0: detected capacity change from 0 to 40 [ 1839.940615] loop1: detected capacity change from 0 to 40 [ 1840.015331] syz-executor.1: attempt to access beyond end of device [ 1840.015331] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1840.016203] Buffer I/O error on dev loop1, logical block 10, lost async page write 22:33:56 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x1002, 0x0, 0x0}, 0x58) 22:33:56 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:33:56 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x5f18, 0x0, 0x0}, 0x58) 22:33:56 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40050}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) ioctl$FIONCLEX(r0, 0x5450) 22:33:56 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 14) 22:33:57 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 13) [ 1840.153531] loop7: detected capacity change from 0 to 40 22:33:57 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40050}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) ioctl$FIONCLEX(r0, 0x5450) [ 1840.184274] FAT-fs (loop7): bogus number of reserved sectors [ 1840.185361] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1840.323773] loop0: detected capacity change from 0 to 40 [ 1840.367310] syz-executor.0: attempt to access beyond end of device [ 1840.367310] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1840.368349] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 1840.373512] loop1: detected capacity change from 0 to 40 22:34:11 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x60ff, 0x0, 0x0}, 0x58) 22:34:11 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x0, 0x8) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) setxattr$security_capability(&(0x7f0000000040)='./file2\x00', &(0x7f00000000c0), &(0x7f00000001c0)=@v3={0x3000000, [{0xfffffff9, 0xfffffff9}, {0x0, 0xa577}], 0xffffffffffffffff}, 0x18, 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) close(r1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/class/devlink', 0x24000, 0x88) r4 = epoll_create(0x4) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000240)) write$binfmt_aout(r3, &(0x7f0000000280)=ANY=[@ANYRESDEC=r3, @ANYRESHEX, @ANYBLOB="be01c294", @ANYBLOB="69c5527aa6081e50f3d33e56aa6ef72266c441a8507a17445702a19ecd17997118b0ffb90346569ed85dd2ea051dbfe9d398dd486be960eb48ffc71c15d581906f0af975f046", @ANYRES32=r5], 0xffffffffffffffc9) pwritev(r4, &(0x7f0000002640)=[{&(0x7f0000000340)="ed06483c54a408fb24cede96ba047620767d81b57bf5fc28b4d96248912365a7aa697ef0be7387f7e5d1397c5a3b180314ec5aa450a720", 0x37}, {&(0x7f0000000380)="24a211bb593ab3ab71d6ddb9aed2fc41878d44c919d8b88e41911549231dd1b5149e40430805b50cfd82f227bbaff2e2528ecf19622ee04ae69dbb6f9b84ee74670252f57457f4b7328e876a4de5e29b661c329bafec2936155fd8d4bca0d217ac203b37298d99cddb31ae0da1e57ad0e6c754f6b0440ccb6d244b774b518668fd58d027005e20df2f68cb6f4bed7f8a8f137b6c8ecfdb3b5ee3d4b05dffbf595825fe57ae558029d62568906964920afbe835c2fd0dd9ae9a17c41f1db8f92c045d5d", 0xc3}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="01968928229b1dfc202e5a806e9ebe5c34f97e14cf539cad934f617c08b2a94789264db02c5c2d34fe27eedeb3227632507b480bb8100399c94e146e9759680c1fc8ff250c5f3b3811a2aa644fdc85a34491a52e11b2", 0x56}, {&(0x7f0000001500)="44963334091b0ede419d9b4f0466a25b550e00f9e2c94d432ebc2f59086ec3a9c1dfb81bcb81a0945e7eb2fb5bf18a284bd863f42c90f5fbd14202a821d4dc7ee8ba8ab71c126bbd63cf5c71d946efd357828c9b93844a40dc5f0611d1591a301137977b1ba0e7f18ab1b26344ef18317b8f1a1a39a0", 0x76}, {&(0x7f0000001580)="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", 0x1000}, {&(0x7f0000002580)="304a1b64338c5a48652d34ba28d2c97db1d778155f8bc72cd3786fc51946186e7267adda32339157444b4293e1e8b9ec8a349ad1fec7e754294d02f3c19fd0aa0fab8aa0c1d3d2879299075dfabb7280f6a0ee547b2042592fc843834e26c665325b16965a4b5bc586258a3cb8d53a9d43f7f78e5f7d05f6498128e8611ea2fa334d3e218bbcfdd446ea1fb8fe5cc3494f7d15d088bf756acca5fb040bdb4ad602a91c1806ef87151fe82bed85c666ae8efc36df", 0xb4}], 0x7, 0x1ff, 0x6) truncate(&(0x7f0000000180)='./file1\x00', 0x101) r6 = epoll_create(0x4) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000240)) openat(r7, &(0x7f00000026c0)='./file0\x00', 0x8000, 0xd2) sendfile(r3, r2, 0x0, 0xfffffdef) 22:34:11 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 14) 22:34:11 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x1100, 0x0, 0x0}, 0x58) [ 1854.287647] loop1: detected capacity change from 0 to 40 22:34:11 executing program 6: r0 = epoll_create(0x391) fcntl$getflags(r0, 0x401) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x80800) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r3) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f00000005c0)={'NETMAP\x00'}, &(0x7f0000000600)=0x1e) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000006b7cb8efe8cdaee50e23317e2ee5a3e6849e49ed15947d680fc9d2e1c0741cd5681231ca905f9a5885f7c62683327d9bd0a6acf40a26c3da26877e23c9c6351966e4eb58eac29ef79c7cbcb36bacc475ab41866f5e80c1bbbf32430000000000", @ANYRES16=r7, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r8, @ANYBLOB], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r7, 0x824, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x3, 0x16}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40003) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendmsg$SMC_PNETID_DEL(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x20, 0x0, 0x800, 0x70bd2c, 0x10001, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x20}}, 0x81) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000640)={'HL\x00'}, &(0x7f0000000680)=0x1e) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x88, r4, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x5, 0x5c}}}}, [@NL80211_ATTR_IE={0x45, 0x2a, [@mesh_config={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x40}}, @tim={0x5, 0x12, {0x3, 0xb8, 0x2, "be59790b9a047167390c51bdc54b34"}}, @link_id={0x65, 0x12, {@from_mac=@broadcast, @broadcast}}, @cf={0x4, 0x6, {0xff, 0x5, 0x9, 0x4}}, @cf={0x4, 0x6, {0x7, 0x81, 0x0, 0xe}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x88}, 0x1, 0x0, 0x0, 0x2000000}, 0x20000000) [ 1854.303751] loop7: detected capacity change from 0 to 40 22:34:11 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:34:11 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 15) 22:34:11 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) ioctl$FIONCLEX(r0, 0x5450) [ 1854.334889] FAT-fs (loop7): bogus number of reserved sectors [ 1854.337356] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1854.348628] loop0: detected capacity change from 0 to 40 22:34:11 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) ioctl$FIONCLEX(r0, 0x5450) [ 1854.394898] syz-executor.1: attempt to access beyond end of device [ 1854.394898] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1854.395731] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 1854.396757] syz-executor.0: attempt to access beyond end of device [ 1854.396757] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1854.397659] Buffer I/O error on dev loop0, logical block 10, lost async page write 22:34:11 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x7111, 0x0, 0x0}, 0x58) 22:34:11 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x1202, 0x0, 0x0}, 0x58) 22:34:11 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 16) 22:34:11 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 15) 22:34:11 executing program 6: epoll_create(0x391) 22:34:11 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:34:11 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) ioctl$FIONCLEX(r0, 0x5450) [ 1854.523783] loop0: detected capacity change from 0 to 40 22:34:11 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x8711, 0x0, 0x0}, 0x58) [ 1854.561741] loop1: detected capacity change from 0 to 40 22:34:11 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)=']%+[!*\x00', &(0x7f00000001c0)='vfat\x00'], &(0x7f0000000480)=[&(0x7f0000000280)='vfat\x00', &(0x7f00000002c0)='\\@]/%%\'[$\\:-++*[#\x00', &(0x7f0000000300)='/%]&#-$\\(\x00', &(0x7f0000000340)='vfat\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='vfat\x00', &(0x7f0000000440)='vfat\x00']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) [ 1854.588782] syz-executor.0: attempt to access beyond end of device [ 1854.588782] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1854.589630] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 1854.614579] loop7: detected capacity change from 0 to 40 22:34:11 executing program 6: r0 = epoll_create(0x391) fcntl$getflags(r0, 0x401) r1 = epoll_create(0x4) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)) dup(r2) [ 1854.631818] FAT-fs (loop7): bogus number of reserved sectors [ 1854.632776] FAT-fs (loop7): Can't find a valid FAT filesystem 22:34:11 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x1862, 0x0, 0x0}, 0x58) 22:34:11 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40050}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x0) ioctl$FIONCLEX(r0, 0x5450) [ 1854.682211] syz-executor.1: attempt to access beyond end of device [ 1854.682211] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1854.683964] Buffer I/O error on dev loop1, logical block 10, lost async page write 22:34:25 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 17) 22:34:25 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = epoll_create(0x4) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)) openat(r3, &(0x7f0000000300)='./file0\x00', 0x12500, 0x120) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0xa0, 0x3, 0x1, 0x201, 0x0, 0x0, {0xc, 0x0, 0x2}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_LABELS_MASK={0x20, 0x17, [0x0, 0x9, 0x3, 0x400, 0x1000, 0x0, 0x20]}, @CTA_TUPLE_MASTER={0x64, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) sendfile(r4, r1, 0x0, 0xfffffdef) 22:34:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 16) 22:34:25 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x2000, 0x0, 0x0}, 0x58) 22:34:25 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0xb111, 0x0, 0x0}, 0x58) 22:34:25 executing program 6: r0 = epoll_create(0xfa0000) fcntl$getflags(r0, 0x401) r1 = epoll_create(0x4) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)) 22:34:25 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40050}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x0) ioctl$FIONCLEX(r0, 0x5450) 22:34:25 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) [ 1868.860175] loop0: detected capacity change from 0 to 40 [ 1868.862860] loop7: detected capacity change from 0 to 40 [ 1868.877919] FAT-fs (loop7): bogus number of reserved sectors [ 1868.878491] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1868.883838] loop1: detected capacity change from 0 to 40 [ 1868.923643] syz-executor.0: attempt to access beyond end of device [ 1868.923643] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1868.924727] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 1869.014138] syz-executor.1: attempt to access beyond end of device [ 1869.014138] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1869.015285] Buffer I/O error on dev loop1, logical block 10, lost async page write 22:34:40 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = request_key(&(0x7f0000000040)='trusted\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000180)='\x00', 0xfffffffffffffffa) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000240)={@id={0x2, 0x0, @c}, 0x40, r1, '\x00', @a}) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000000)='./file0\x00', 0x100) sendfile(r3, r2, 0x0, 0xfffffdef) 22:34:40 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 17) 22:34:40 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 18) 22:34:40 executing program 6: r0 = epoll_create(0x391) fcntl$getflags(r0, 0x401) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xfd}, r3}, 0x14) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000006c0)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000001b00)=ANY=[@ANYBLOB="246ba282ccffffffff00000032000000fe8000"/32, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x28}}], 0x1, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xfd}, r7}, 0x14) sendmmsg$inet6(r4, &(0x7f00000006c0)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000001b00)=[@pktinfo={{0x24, 0x29, 0x32, {@dev, r7}}}], 0x28}}], 0x1, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$inet6(0xa, 0x1, 0x0) r10 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r9, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xfd}, r11}, 0x14) sendmmsg$inet6(r8, &(0x7f00000006c0)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000001b00)=[@pktinfo={{0x24, 0x29, 0x32, {@dev, r11}}}], 0x28}}], 0x1, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x130, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x40011}, 0x40050) 22:34:40 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:34:40 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x2c01, 0x0, 0x0}, 0x58) 22:34:40 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0xc511, 0x0, 0x0}, 0x58) 22:34:40 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40050}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x0) ioctl$FIONCLEX(r0, 0x5450) [ 1883.446387] loop1: detected capacity change from 0 to 40 [ 1883.465172] loop7: detected capacity change from 0 to 40 [ 1883.467512] FAT-fs (loop7): invalid media value (0x00) [ 1883.467906] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1883.473474] loop0: detected capacity change from 0 to 40 22:34:40 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40050}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_create(0x4) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) 22:34:40 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0xf201, 0x0, 0x0}, 0x58) [ 1883.529216] syz-executor.1: attempt to access beyond end of device [ 1883.529216] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1883.530071] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 1883.564061] syz-executor.0: attempt to access beyond end of device [ 1883.564061] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1883.564890] Buffer I/O error on dev loop0, logical block 10, lost async page write 22:34:40 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x3f00, 0x0, 0x0}, 0x58) 22:34:40 executing program 6: r0 = epoll_create(0x391) epoll_wait(r0, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x9) fcntl$getflags(r0, 0x401) 22:34:40 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:34:40 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 18) 22:34:40 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40050}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_create(0x4) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) 22:34:40 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x1790b, 0x0, 0x0}, 0x58) [ 1883.854239] loop1: detected capacity change from 0 to 40 [ 1883.857750] loop7: detected capacity change from 0 to 40 [ 1883.865918] FAT-fs (loop7): invalid media value (0x00) [ 1883.866769] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1883.890849] syz-executor.1: attempt to access beyond end of device [ 1883.890849] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1883.891807] Buffer I/O error on dev loop1, logical block 10, lost async page write 22:34:56 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40050}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_create(0x4) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) 22:34:56 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:34:56 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f00000001c0)=0xe8) setxattr$security_capability(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), &(0x7f0000000340)=@v3={0x3000000, [{0x0, 0x9}, {0x8001, 0x12}], r0}, 0x18, 0x3) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r2, r1, 0x0, 0xfffffdef) 22:34:56 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x17921, 0x0, 0x0}, 0x58) 22:34:56 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 19) 22:34:56 executing program 6: r0 = epoll_create(0x391) fcntl$addseals(r0, 0x409, 0x0) fcntl$getflags(r0, 0x401) 22:34:56 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x4000, 0x0, 0x0}, 0x58) 22:34:56 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 19) [ 1899.363811] loop0: detected capacity change from 0 to 40 [ 1899.425896] loop7: detected capacity change from 0 to 40 [ 1899.438548] loop1: detected capacity change from 0 to 40 [ 1899.444748] FAT-fs (loop7): invalid media value (0x00) [ 1899.445584] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1899.471726] syz-executor.0: attempt to access beyond end of device [ 1899.471726] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1899.473649] Buffer I/O error on dev loop0, logical block 10, lost async page write 22:34:56 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40050}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) ioctl$FIONCLEX(r0, 0x5450) (fail_nth: 1) 22:34:56 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) [ 1899.587110] syz-executor.1: attempt to access beyond end of device [ 1899.587110] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1899.588731] Buffer I/O error on dev loop1, logical block 10, lost async page write 22:34:56 executing program 6: r0 = epoll_create(0x391) r1 = fsmount(0xffffffffffffffff, 0x1, 0xc) r2 = epoll_create(0x4) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f00000001c0)) fcntl$getflags(r0, 0x401) r4 = epoll_create(0x4) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000240)) r6 = epoll_create(0x4) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000240)) getsockopt$netlink(r7, 0x10e, 0x1, &(0x7f0000000080)=""/237, &(0x7f0000000180)=0xed) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000040)={0x3, 0x10, [0x3, 0x7, 0x5, 0x4], &(0x7f0000000000)=[0x0, 0x0]}) 22:34:56 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x4501, 0x0, 0x0}, 0x58) [ 1899.624848] loop7: detected capacity change from 0 to 40 22:34:56 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x1794b, 0x0, 0x0}, 0x58) [ 1899.656063] FAT-fs (loop7): invalid media value (0x00) [ 1899.656764] FAT-fs (loop7): Can't find a valid FAT filesystem 22:34:56 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 20) [ 1899.705869] FAULT_INJECTION: forcing a failure. [ 1899.705869] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1899.707584] CPU: 0 PID: 8669 Comm: syz-executor.5 Not tainted 6.1.0-rc3-next-20221104 #1 [ 1899.708572] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1899.709564] Call Trace: [ 1899.709897] [ 1899.710203] dump_stack_lvl+0x8b/0xb3 [ 1899.710719] should_fail.cold+0x5/0xa [ 1899.711233] _copy_to_user+0x2a/0x140 [ 1899.711746] simple_read_from_buffer+0xcc/0x160 [ 1899.712363] proc_fail_nth_read+0x198/0x230 [ 1899.712932] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1899.713549] ? security_file_permission+0xb1/0xe0 [ 1899.714197] vfs_read+0x253/0x930 [ 1899.714660] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1899.715321] ? __pfx_vfs_read+0x10/0x10 [ 1899.715956] ? __fget_files+0x270/0x450 [ 1899.716574] ksys_read+0x127/0x250 [ 1899.717078] ? __pfx_ksys_read+0x10/0x10 [ 1899.717681] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1899.718415] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1899.719146] do_syscall_64+0x3b/0x90 [ 1899.719678] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1899.720368] RIP: 0033:0x7f0c1325e69c [ 1899.720910] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1899.723336] RSP: 002b:00007f0c10821170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1899.724375] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0c1325e69c [ 1899.725378] RDX: 000000000000000f RSI: 00007f0c108211e0 RDI: 0000000000000005 [ 1899.726374] RBP: 00007f0c108211d0 R08: 0000000000000000 R09: 0000000000000000 [ 1899.727366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1899.728353] R13: 00007fff757bc5df R14: 00007f0c10821300 R15: 0000000000022000 [ 1899.729422] 22:34:56 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 20) 22:34:56 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x60ff, 0x0, 0x0}, 0x58) 22:34:56 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) [ 1899.911755] loop0: detected capacity change from 0 to 40 [ 1899.970201] syz-executor.0: attempt to access beyond end of device [ 1899.970201] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1899.971735] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 1899.983163] loop1: detected capacity change from 0 to 40 22:34:56 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x1795f, 0x0, 0x0}, 0x58) [ 1900.010535] loop7: detected capacity change from 0 to 40 [ 1900.052332] FAT-fs (loop7): invalid media value (0x00) [ 1900.053109] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1900.137497] syz-executor.1: attempt to access beyond end of device [ 1900.137497] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1900.139066] Buffer I/O error on dev loop1, logical block 10, lost async page write 22:35:15 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 21) 22:35:15 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 21) 22:35:15 executing program 6: epoll_create(0x391) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fcntl$getflags(r0, 0x1) 22:35:15 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:35:15 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40050}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) ioctl$FIONCLEX(r0, 0x5450) 22:35:15 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000000)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:35:15 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x6218, 0x0, 0x0}, 0x58) 22:35:15 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x20010, 0x0, 0x0}, 0x58) [ 1919.090204] loop0: detected capacity change from 0 to 40 [ 1919.098081] loop1: detected capacity change from 0 to 40 [ 1919.102475] loop7: detected capacity change from 0 to 40 [ 1919.124545] FAT-fs (loop7): invalid media value (0x00) [ 1919.125280] FAT-fs (loop7): Can't find a valid FAT filesystem 22:35:16 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40050}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) ioctl$FIONCLEX(r0, 0x2) 22:35:16 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 22) 22:35:16 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 22) 22:35:16 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0xf401, 0x0, 0x0}, 0x58) 22:35:16 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x3ffff, 0x0, 0x0}, 0x58) 22:35:16 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:35:16 executing program 6: prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/242) r0 = epoll_create(0x391) fcntl$getflags(r0, 0x401) [ 1919.362708] loop1: detected capacity change from 0 to 40 [ 1919.367749] loop0: detected capacity change from 0 to 40 [ 1919.439566] syz-executor.1: attempt to access beyond end of device [ 1919.439566] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1919.441200] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 1919.486358] syz-executor.0: attempt to access beyond end of device [ 1919.486358] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1919.488048] Buffer I/O error on dev loop0, logical block 10, lost async page write 22:35:16 executing program 6: epoll_create(0x391) r0 = epoll_create(0x4) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0) r2 = epoll_create(0x4) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)) r4 = epoll_create(0x4) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000240)) epoll_wait(r4, &(0x7f0000000000)=[{}], 0x1, 0x0) r6 = epoll_create(0x4) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000240)) r8 = gettid() capset(&(0x7f0000000240)={0x20080522, r8}, &(0x7f0000000380)) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x7, 0x58, 0x80, 0x80, 0x0, 0x9, 0x2000, 0xf, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000080)}, 0x14cc, 0x4, 0xd5cb, 0x1, 0x7, 0xa39, 0x3, 0x0, 0x9, 0x0, 0x40}, r8, 0xb, r7, 0x1) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000040)=0x9) fcntl$getflags(r0, 0x3) [ 1919.580406] loop7: detected capacity change from 0 to 40 [ 1919.602055] FAT-fs (loop7): bogus number of FAT sectors [ 1919.602770] FAT-fs (loop7): Can't find a valid FAT filesystem 22:35:32 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 23) 22:35:32 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x40000, 0x0, 0x0}, 0x58) 22:35:32 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x440a01, 0x2) sendfile(r1, r0, 0x0, 0xfffffdef) 22:35:32 executing program 6: r0 = epoll_create(0x391) fcntl$getflags(r0, 0x401) r1 = epoll_create(0x4) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) r3 = getpgrp(0xffffffffffffffff) r4 = epoll_create(0x4) r5 = creat(&(0x7f0000000100)='./file0\x00', 0x8) r6 = signalfd4(r5, &(0x7f0000000200), 0x8, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000240)) epoll_wait(r4, &(0x7f0000000000)=[{}], 0x1, 0x0) kcmp$KCMP_EPOLL_TFD(r3, 0x0, 0x7, r0, &(0x7f0000000080)={r1, r4, 0xcbe7}) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={{r2}, 0xc00, 0x3, 0xd93}) ioctl$EXT4_IOC_CHECKPOINT(r6, 0x4004662b, &(0x7f00000000c0)=0x5) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x80000008}) dup(r2) [ 1935.417979] loop1: detected capacity change from 0 to 40 22:35:32 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40050}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) ioctl$FIONCLEX(r0, 0x4b47) 22:35:32 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0xf601, 0x0, 0x0}, 0x58) 22:35:32 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:35:32 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 23) [ 1935.443517] loop7: detected capacity change from 0 to 40 [ 1935.450176] loop0: detected capacity change from 0 to 40 [ 1935.463350] FAT-fs (loop7): bogus number of FAT sectors [ 1935.463734] FAT-fs (loop7): Can't find a valid FAT filesystem 22:35:32 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) [ 1935.539388] syz-executor.0: attempt to access beyond end of device [ 1935.539388] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1935.540422] Buffer I/O error on dev loop0, logical block 10, lost async page write 22:35:32 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40050}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) ioctl$FIONCLEX(r0, 0x4b49) [ 1935.545185] syz-executor.1: attempt to access beyond end of device [ 1935.545185] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1935.546354] Buffer I/O error on dev loop1, logical block 10, lost async page write 22:35:32 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0xf801, 0x0, 0x0}, 0x58) 22:35:32 executing program 6: r0 = epoll_create(0x4) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)) ioctl$TIOCCONS(r1, 0x541d) r2 = epoll_create(0x391) epoll_wait(r2, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x6) dup(r2) fcntl$getflags(r2, 0x401) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000000e06010200000000000000000000000805000100000000000000000073797a310000000005000100070000000900020073797a30000000000900020073000000000000009e55b1b7dc9017e1a284db56b20a6438d4d268f5c0ed8ff6ad14bf877a9082874b4038bab1bb1a58468c4378106a9fb9d693afeab5ace8aeab3942267fb5536ff21e3f8ce889548510df0952dcae12ce60698bab4437a2125680b45c51a49417d960e5c065077ecbb641798ddcdcb1d35d90b439cc34c517f3de99259ec660a42c359e6df7e35435f8f082b42e0600a426390fc40662bf90e2bac08b6c2c0ed77f9e00"/246], 0x48}}, 0x0) r3 = openat$cgroup_int(r0, &(0x7f0000000280)='cpuset.mems\x00', 0x2, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r3, 0x8008f512, &(0x7f0000000080)) 22:35:32 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 24) 22:35:32 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x1fffff, 0x0, 0x0}, 0x58) [ 1935.651793] loop7: detected capacity change from 0 to 40 22:35:32 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x400000, 0x0, 0x0}, 0x58) [ 1935.710138] FAT-fs (loop7): bogus number of FAT sectors [ 1935.711230] FAT-fs (loop7): Can't find a valid FAT filesystem 22:35:32 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 24) [ 1935.833224] loop0: detected capacity change from 0 to 40 [ 1935.862067] loop1: detected capacity change from 0 to 40 22:35:32 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:35:32 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x80ffff, 0x0, 0x0}, 0x58) [ 1935.953772] syz-executor.0: attempt to access beyond end of device [ 1935.953772] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1935.955735] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 1936.050783] loop7: detected capacity change from 0 to 40 [ 1936.068493] syz-executor.1: attempt to access beyond end of device [ 1936.068493] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1936.070026] Buffer I/O error on dev loop1, logical block 10, lost async page write 22:35:53 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 25) 22:35:53 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) linkat(r0, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000040)='./file0\x00', 0x0) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r2, r1, 0x0, 0xfffffdef) 22:35:53 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:35:53 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0xfa01, 0x0, 0x0}, 0x58) 22:35:53 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40050}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) ioctl$FIONCLEX(r0, 0x541b) 22:35:53 executing program 6: r0 = epoll_create(0x3ff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x80000000}) fcntl$getflags(r0, 0x401) 22:35:53 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0xf0ff1f, 0x0, 0x0}, 0x58) 22:35:53 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 25) [ 1956.150538] loop0: detected capacity change from 0 to 40 [ 1956.158378] loop7: detected capacity change from 0 to 40 [ 1956.200728] loop1: detected capacity change from 0 to 40 22:35:53 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0xfc01, 0x0, 0x0}, 0x58) 22:35:53 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x1000000, 0x0, 0x0}, 0x58) 22:35:53 executing program 6: r0 = epoll_create(0x391) r1 = epoll_create(0x4) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0x20000000}) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x60002003}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x2, 0xf, 0x3f, 0x9}, {0x903, 0x88, 0xff, 0x400}]}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x101100, 0x100) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x6]}, 0x8, 0x800) fcntl$getflags(r0, 0x401) [ 1956.240347] syz-executor.0: attempt to access beyond end of device [ 1956.240347] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1956.241164] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 1956.283716] syz-executor.1: attempt to access beyond end of device [ 1956.283716] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1956.285393] Buffer I/O error on dev loop1, logical block 10, lost async page write 22:35:53 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:35:53 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40050}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) ioctl$FIONCLEX(r0, 0x5421) 22:35:53 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 26) 22:35:53 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 26) 22:35:53 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x1040000, 0x0, 0x0}, 0x58) [ 1956.447919] loop7: detected capacity change from 0 to 40 [ 1956.493156] loop0: detected capacity change from 0 to 40 22:35:53 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0xfe01, 0x0, 0x0}, 0x58) [ 1956.547445] syz-executor.0: attempt to access beyond end of device [ 1956.547445] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1956.548366] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 1956.621490] loop1: detected capacity change from 0 to 40 [ 1956.707549] syz-executor.1: attempt to access beyond end of device [ 1956.707549] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1956.708473] Buffer I/O error on dev loop1, logical block 10, lost async page write 22:36:09 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 27) 22:36:09 executing program 6: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000040)=""/248) r1 = epoll_create(0x3) r2 = epoll_create(0x4) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)) ioctl$int_out(r3, 0x0, &(0x7f0000000140)) fcntl$getflags(r1, 0x401) 22:36:09 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) utimensat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)={{0x0, 0xea60}, {r2, r3/1000+60000}}, 0x100) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:36:09 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 27) 22:36:09 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:36:09 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x20000, 0x0, 0x0}, 0x58) 22:36:09 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40050}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) ioctl$FIONCLEX(r0, 0x5451) 22:36:09 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x2000000, 0x0, 0x0}, 0x58) [ 1973.001432] loop7: detected capacity change from 0 to 40 [ 1973.056484] loop0: detected capacity change from 0 to 40 [ 1973.079183] loop1: detected capacity change from 0 to 40 22:36:09 executing program 6: r0 = epoll_create(0x2000391) fcntl$getflags(r0, 0x401) [ 1973.144096] syz-executor.1: attempt to access beyond end of device [ 1973.144096] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1973.145074] Buffer I/O error on dev loop1, logical block 10, lost async page write 22:36:10 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:36:10 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x20010, 0x0, 0x0}, 0x58) [ 1973.177805] syz-executor.0: attempt to access beyond end of device [ 1973.177805] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1973.178653] Buffer I/O error on dev loop0, logical block 10, lost async page write 22:36:10 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40050}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) ioctl$FIONCLEX(r0, 0x5452) 22:36:10 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 28) [ 1973.253851] loop7: detected capacity change from 0 to 40 22:36:10 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x3000000, 0x0, 0x0}, 0x58) [ 1973.482221] loop1: detected capacity change from 0 to 40 [ 1973.572235] syz-executor.1: attempt to access beyond end of device [ 1973.572235] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1973.573839] Buffer I/O error on dev loop1, logical block 10, lost async page write 22:36:28 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 28) 22:36:28 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:36:28 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 29) 22:36:28 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x4000000, 0x0, 0x0}, 0x58) 22:36:28 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40050}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) ioctl$FIONCLEX(r0, 0x5460) 22:36:28 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x3ffff, 0x0, 0x0}, 0x58) [ 1991.505086] loop7: detected capacity change from 0 to 40 22:36:28 executing program 6: r0 = epoll_create(0x391) io_setup(0x8, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x6, r0, &(0x7f0000000040)="8978453aae09419ba617b8343962175611e6fc1b97e2ca732d", 0x19, 0x4, 0x0, 0x2}]) fcntl$getflags(r0, 0x401) [ 1991.521536] loop1: detected capacity change from 0 to 40 22:36:28 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000340)=ANY=[@ANYRES16=0x0]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = epoll_create(0x4) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)) epoll_wait(r3, &(0x7f0000000000)=[{}], 0x1, 0x0) fallocate(r3, 0x9, 0x0, 0x9ec) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat(r0, &(0x7f0000000000)='./file0\x00', 0x383080, 0x158) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x54802, 0xab) truncate(&(0x7f0000000180)='./file1\x00', 0x101) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000300)=@v3={0x3000000, [{0x1000, 0x81}, {0x2, 0x200}], r5}, 0x18, 0x1) sendfile(r2, r1, 0x0, 0xfffffdef) [ 1991.535768] loop0: detected capacity change from 0 to 40 22:36:28 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x8000000, 0x0, 0x0}, 0x58) [ 1991.589365] syz-executor.0: attempt to access beyond end of device [ 1991.589365] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1991.590372] Buffer I/O error on dev loop0, logical block 10, lost async page write 22:36:28 executing program 6: r0 = epoll_create(0x4) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)) fcntl$getflags(r1, 0x401) 22:36:28 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x40000, 0x0, 0x0}, 0x58) 22:36:28 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 29) 22:36:28 executing program 6: fcntl$getflags(0xffffffffffffffff, 0x400) r0 = epoll_create(0x4) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "0bcdc17d03d8ffc89fef5511a96363d0"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x9}, @NL80211_ATTR_PMKID={0x14, 0x55, "4c752643b7472ee3ec0253af8976a704"}, @NL80211_ATTR_PMKID={0x14, 0x55, "c881863d684b91577c67152b04ac9610"}, @NL80211_ATTR_PMK={0x14, 0xfe, "8b4402873d7f5584c829ce650ad6df8f"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x1c000}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8040}, 0x40) [ 1991.717972] loop0: detected capacity change from 0 to 40 22:36:28 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40050}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) ioctl$FIONCLEX(r0, 0x40049409) 22:36:28 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 30) 22:36:28 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:36:28 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0xa020000, 0x0, 0x0}, 0x58) [ 1991.865712] loop7: detected capacity change from 0 to 40 [ 1991.883379] loop1: detected capacity change from 0 to 40 [ 1991.942688] syz-executor.1: attempt to access beyond end of device [ 1991.942688] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1991.943643] Buffer I/O error on dev loop1, logical block 10, lost async page write 22:36:47 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 30) 22:36:47 executing program 6: r0 = epoll_create(0x391) fcntl$getflags(r0, 0x401) r1 = epoll_create(0x4) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000000000)) 22:36:47 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000000)={0x9, 0x7, 0x3, 0x2, @msf={0xc1, 0x2, 0x2}, 0xf8}) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 22:36:47 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 31) 22:36:47 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x1fffff, 0x0, 0x0}, 0x58) 22:36:47 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0xb040000, 0x0, 0x0}, 0x58) 22:36:47 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:36:47 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40050}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) ioctl$FIONCLEX(r0, 0x40086602) [ 2010.722191] loop7: detected capacity change from 0 to 40 22:36:47 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x274, r1, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x176, 0x33, @data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0x8}, {0x6}, @device_a, @broadcast, @from_mac=@device_b, {0x7, 0x7}}, {0x4, 0x1, 0x1, 0x0, 0x80}}, {@type11={{0x0, 0x2, 0xe, 0x1, 0x1, 0x0, 0x1}, {0x40}, @broadcast, @device_b, @initial, {0x7, 0x3}, @broadcast}, {0x7, 0x0, 0x3, 0x1, 0xa5}}}, @a_msdu=[{@device_b, @broadcast, 0x1f, "5200f76d858de63a43883a1a8f7844039a2fffd53821d01e39092f56642f58"}, {@broadcast, @device_b, 0xb9, "17e957ece84e6d6c8cec021498fe89d33242d568fa96acc7c977c660260987763442b3b3fc2aa20b7a9861361c31675aeabee741ca5b3fbc2c29c40fc906a73203c7156123161a25ef4c8aae4afaaeeeab5f6737a593f75d6b71afb8a110d2fb1bdd413c9113196e23d6709787993e4f459b26dcf0cb3f58841362f5bd85c040fb3e7182c20a17ce93f5238f6738bfce5d62bb890b4be5ac2f89d72add45e1ef6b0d905113d8c4d9c1b26ebdf124c534d766e1e415dc76189f"}, {@device_a, @device_b, 0x32, "208ee8e49471ceb87fec07fd2aab7584e38ad3bbc41d8e266f0da4036cec25ad4027a86ea1f95308e2a6898521e2cfc2f6a2"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x1c}, @NL80211_ATTR_FRAME={0x18, 0x33, @ctrl_frame=@bar={{}, {0x7fc0}, @broadcast, @device_a, @basic={{0x1, 0x0, 0x0, 0x0, 0x2}, {0x3, 0xf75}}}}, @NL80211_ATTR_FRAME={0xa4, 0x33, @mgmt_frame=@assoc_resp={@with_ht={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x8}, @device_a, @device_a, @random="2da0236146a9", {0x6, 0xffa}}, @ver_80211n={0x0, 0x6, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x786, 0x33, @default, @void, @val={0x2d, 0x1a, {0x2, 0x0, 0x4, 0x0, {0x14, 0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x6, 0x10001, 0x4}}, [{0xdd, 0x60, "d5e91e7fee9d3a664edf841cb050813f7aeaca6c4aa4449e30d0d862555ccf0233d02303b9a99307eeb0fa02dade2279c5ba7b775025ef6bc10c203b48ab96af6ff378a8df996ce6a81870abc5a96ddf54fab465a6c0e1f2bfadab3c01f1a5fe"}]}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x16}]}, 0x274}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) r3 = epoll_create(0x391) fcntl$getflags(r3, 0x401) [ 2010.763127] loop1: detected capacity change from 0 to 40 [ 2010.767153] loop0: detected capacity change from 0 to 40 22:36:47 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x400000, 0x0, 0x0}, 0x58) 22:36:47 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) [ 2010.850114] syz-executor.1: attempt to access beyond end of device [ 2010.850114] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2010.851069] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 2010.870325] syz-executor.0: attempt to access beyond end of device [ 2010.870325] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2010.871313] Buffer I/O error on dev loop0, logical block 10, lost async page write 22:36:47 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0xb790100, 0x0, 0x0}, 0x58) 22:36:47 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40050}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) ioctl$FIONCLEX(r0, 0x40087602) 22:36:47 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 32) 22:36:47 executing program 6: r0 = epoll_create(0x1f) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000100)={0x2022}) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000002c0)={0x400000000000000, 0x10, '\x00', 0x1, &(0x7f0000000280)=[0x0, 0x0]}) r1 = creat(&(0x7f00000000c0)='./file1\x00', 0x2b) fcntl$getflags(r0, 0x401) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) openat(r2, &(0x7f00000001c0)='./file0\x00', 0x800, 0x88) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000)) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x100000000, 0x0) r4 = epoll_create(0x4) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000240)) epoll_wait(r4, &(0x7f0000000000)=[{}], 0x1, 0x0) fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000040), &(0x7f0000000140), 0x2, 0x0) close_range(0xffffffffffffffff, r3, 0x0) 22:36:47 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 31) 22:36:47 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x80ffff, 0x0, 0x0}, 0x58) [ 2011.035436] loop7: detected capacity change from 0 to 40 [ 2011.072112] loop0: detected capacity change from 0 to 40 [ 2011.122778] loop1: detected capacity change from 0 to 40 22:36:48 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0xd040000, 0x0, 0x0}, 0x58) [ 2011.165437] syz-executor.0: attempt to access beyond end of device [ 2011.165437] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2011.166475] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2011.236779] syz-executor.1: attempt to access beyond end of device [ 2011.236779] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2011.237806] Buffer I/O error on dev loop1, logical block 10, lost async page write 22:37:06 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) r1 = epoll_create(0x4) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)) sendfile(r0, r2, 0x0, 0x80000003) 22:37:06 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:37:06 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0xe000000, 0x0, 0x0}, 0x58) 22:37:06 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40050}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) ioctl$FIONCLEX(r0, 0x401c5820) 22:37:06 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0xf0ff1f, 0x0, 0x0}, 0x58) 22:37:06 executing program 6: epoll_create(0x391) r0 = epoll_create(0x4) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0) fcntl$getflags(r0, 0xb) r2 = epoll_create(0x4) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000000000)) 22:37:06 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 32) 22:37:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 33) [ 2029.680213] loop0: detected capacity change from 0 to 40 [ 2029.713607] syz-executor.0: attempt to access beyond end of device [ 2029.713607] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2029.714480] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2029.729672] loop1: detected capacity change from 0 to 40 [ 2029.751550] loop7: detected capacity change from 0 to 40 22:37:06 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 33) 22:37:06 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x1000000, 0x0, 0x0}, 0x58) [ 2029.788437] syz-executor.1: attempt to access beyond end of device [ 2029.788437] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2029.789293] Buffer I/O error on dev loop1, logical block 10, lost async page write 22:37:06 executing program 6: sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3f9, 0x400, 0x70bd2b, 0x25dfdbfb, {0x0, 0x1}, ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x40084}, 0x24000080) r0 = epoll_create(0x391) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x40c400, 0x0) r2 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="b406005a", @ANYRES16=r2, @ANYBLOB="02002bbd7000ffdbdf250e000000340003800800030038b60000080003000101000008000200090000000800010000000000080002000010000008000300020000006c0005804c00028008000400f8ffffff08000400ff03000008004200080000000800020004000000080002000300000008000400811a0000080003000500000008000200ed000000080003002000000008000100756470000c00028008000100050000000800010065746800"], 0xb4}, 0x1, 0x0, 0x0, 0x2004c010}, 0x4000) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000180)={0x3e0, r2, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0xac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xa4, 0x3, "37c68ae26c3f86badc19689b17548e154fbd8030330c2c89bd7138a17f82ad79a135c74118689a993382d97d9c520b26913f1923b3688ac5b8fdb84c0171ace1321b3f5e742a31fc6cc480bc703f24e8c7fadfd6afc2b99ec514ba24ca710af703a5d8eb565f94a7e606adfd678de8febe5cf41967a64e25d4854cf93dadbb01bd57b275f9d2318b323b466d974298a4ca6f875080a239d8592207dff63f7b9c"}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x28a}]}, @TIPC_NLA_BEARER={0xcc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_virt_wifi\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x20, @loopback, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x9, @rand_addr=' \x01\x00', 0x1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe793}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5c}]}, @TIPC_NLA_BEARER={0xc8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'ib', 0x3a, 'batadv_slave_1\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x62}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @empty}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}]}, @TIPC_NLA_MEDIA={0xc4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x812}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x974}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4d0b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x235b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x602f}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x908}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x58d, @empty, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x16}}}}}]}]}, 0x3e0}, 0x1, 0x0, 0x0, 0x8004}, 0x814) fcntl$getflags(r0, 0x401) 22:37:06 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40050}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) ioctl$FIONCLEX(r0, 0x4020940d) 22:37:06 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0xe040000, 0x0, 0x0}, 0x58) 22:37:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 34) [ 2029.883580] loop0: detected capacity change from 0 to 40 22:37:06 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x2000000, 0x0, 0x0}, 0x58) 22:37:06 executing program 6: epoll_create(0x392) r0 = epoll_create(0x4) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)) epoll_create(0x1000000) fcntl$getflags(r1, 0x400) 22:37:06 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1/file0\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000380), &(0x7f00000003c0), 0x2, 0x3) readlinkat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)=""/212, 0xd4) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) setxattr$incfs_id(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000040), &(0x7f00000000c0)={'0000000000000000000000000000000', 0x31}, 0x20, 0x1) [ 2029.957540] syz-executor.0: attempt to access beyond end of device [ 2029.957540] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2029.958568] Buffer I/O error on dev loop0, logical block 10, lost async page write 22:37:06 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:37:06 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40050}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) ioctl$FIONCLEX(r0, 0x80086601) 22:37:06 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x2020000, 0x0, 0x0}, 0x58) [ 2030.043863] loop7: detected capacity change from 0 to 40 [ 2030.057012] loop1: detected capacity change from 0 to 40 [ 2030.133795] syz-executor.1: attempt to access beyond end of device [ 2030.133795] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2030.134661] Buffer I/O error on dev loop1, logical block 10, lost async page write 22:37:22 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 35) 22:37:22 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x3000000, 0x0, 0x0}, 0x58) 22:37:22 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40050}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) ioctl$FIONCLEX(r0, 0x80087601) 22:37:22 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) open(&(0x7f0000000000)='./file1\x00', 0x101000, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) r2 = epoll_create(0x4) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', r3) sendfile(r1, r0, 0x0, 0xfffffdef) 22:37:22 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:37:22 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0xf040000, 0x0, 0x0}, 0x58) 22:37:22 executing program 6: r0 = epoll_create(0x391) r1 = epoll_create(0x4) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f00000000c0)={0x10000001}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) r4 = epoll_create(0x4) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000240)) epoll_wait(r4, &(0x7f0000000000)=[{}], 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r5, {0x7}}, './file0\x00'}) fcntl$getflags(r6, 0xb) 22:37:22 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 34) [ 2045.397376] loop0: detected capacity change from 0 to 40 [ 2045.423688] loop1: detected capacity change from 0 to 40 [ 2045.445104] syz-executor.0: attempt to access beyond end of device [ 2045.445104] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2045.446015] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2045.461294] loop7: detected capacity change from 0 to 40 22:37:22 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x10000000, 0x0, 0x0}, 0x58) 22:37:22 executing program 6: r0 = epoll_create(0x391) epoll_create(0x4) fcntl$getflags(r0, 0x401) fcntl$dupfd(r0, 0x406, r0) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000000)={0x3, 0x9}) [ 2045.486034] syz-executor.1: attempt to access beyond end of device [ 2045.486034] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2045.486865] Buffer I/O error on dev loop1, logical block 10, lost async page write 22:37:22 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 35) 22:37:22 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x4000000, 0x0, 0x0}, 0x58) 22:37:22 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 36) [ 2045.556316] loop0: detected capacity change from 0 to 40 [ 2045.581093] syz-executor.0: attempt to access beyond end of device [ 2045.581093] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2045.581897] Buffer I/O error on dev loop0, logical block 10, lost async page write 22:37:22 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40050}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) ioctl$FIONCLEX(r0, 0x801c581f) 22:37:22 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 36) 22:37:22 executing program 6: r0 = epoll_create(0x391) fcntl$getflags(r0, 0x401) epoll_create(0x200) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10010, r0, 0x3cf8f000) [ 2045.739749] loop1: detected capacity change from 0 to 40 22:37:22 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) [ 2045.803276] syz-executor.1: attempt to access beyond end of device [ 2045.803276] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2045.804196] Buffer I/O error on dev loop1, logical block 10, lost async page write 22:37:22 executing program 6: r0 = epoll_create(0x391) fcntl$getflags(r0, 0x401) r1 = epoll_create(0x4) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) r3 = epoll_create(0x4) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)) epoll_wait(r3, &(0x7f0000000000)=[{}], 0x1, 0x0) dup2(r1, r3) 22:37:22 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x4020000, 0x0, 0x0}, 0x58) 22:37:22 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 37) [ 2045.930007] loop7: detected capacity change from 0 to 40 [ 2046.000336] loop1: detected capacity change from 0 to 40 [ 2046.075238] syz-executor.1: attempt to access beyond end of device [ 2046.075238] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2046.076185] Buffer I/O error on dev loop1, logical block 10, lost async page write 22:37:37 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:37:37 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 37) 22:37:37 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x10000200, 0x0, 0x0}, 0x58) 22:37:37 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40050}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) ioctl$FIONCLEX(r0, 0xc0045878) 22:37:37 executing program 6: r0 = epoll_create(0x391) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$getflags(r0, 0x402) 22:37:37 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:37:37 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x6020000, 0x0, 0x0}, 0x58) 22:37:37 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 38) [ 2060.363715] loop0: detected capacity change from 0 to 40 [ 2060.388768] loop1: detected capacity change from 0 to 40 [ 2060.409109] loop7: detected capacity change from 0 to 40 [ 2060.490550] syz-executor.0: attempt to access beyond end of device [ 2060.490550] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2060.491965] Buffer I/O error on dev loop0, logical block 10, lost async page write 22:37:37 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40050}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) ioctl$FIONCLEX(r0, 0xc0045878) 22:37:37 executing program 6: r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000000)) r1 = epoll_create(0x391) fcntl$getflags(r1, 0x401) [ 2060.536775] syz-executor.1: attempt to access beyond end of device [ 2060.536775] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2060.538121] Buffer I/O error on dev loop1, logical block 10, lost async page write 22:37:37 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x11000000, 0x0, 0x0}, 0x58) 22:37:37 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x8000000, 0x0, 0x0}, 0x58) 22:37:37 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:37:37 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 38) 22:37:37 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 39) [ 2060.743294] loop7: detected capacity change from 0 to 40 22:37:37 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40050}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) ioctl$FIONCLEX(r0, 0xc0189436) [ 2060.802835] loop0: detected capacity change from 0 to 40 [ 2060.895435] syz-executor.0: attempt to access beyond end of device [ 2060.895435] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2060.896542] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2060.898250] loop1: detected capacity change from 0 to 40 [ 2060.957641] syz-executor.1: attempt to access beyond end of device [ 2060.957641] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2060.958675] Buffer I/O error on dev loop1, logical block 10, lost async page write 22:37:54 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 39) 22:37:54 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40050}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) ioctl$FIONCLEX(r0, 0xc020660b) 22:37:54 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 40) 22:37:54 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x8000}], 0x400, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) openat(r0, &(0x7f0000000000)='./file1\x00', 0x28400, 0x2) r2 = epoll_create(0x4) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)) epoll_wait(r2, &(0x7f0000000000)=[{}], 0x1, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f0000000040)=0x1) r4 = epoll_create(0x4) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000240)) openat(r5, &(0x7f00000000c0)='./file1\x00', 0x202000, 0x48) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240)) epoll_wait(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f00000001c0)=0x5) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="cc0002807703000027000000000000002202000002000000000000000000000089b24f1db89701506a0b9d2ffd9a37a487cb5859bf9c815b78934535870ee20ce6172a592ca4aa62f4ea69f8eb97e33ffd8e5cea3a2d407725c3a7e96cdd62c31ac407d074e4f3e748624cd22046e679d10152382013bb31d4a4ad7e08c70382f47448a3e88748fe57b54a85a957080001e695cc33ce56aa9f63b5ff94"], 0x9e) sendfile(r1, 0xffffffffffffffff, 0x0, 0xfffffdef) 22:37:54 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x8020000, 0x0, 0x0}, 0x58) 22:37:54 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x1fffefff, 0x0, 0x0}, 0x58) 22:37:54 executing program 6: r0 = epoll_create(0x391) r1 = epoll_create(0x4) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000440)={0xe000001b}) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000000000)) fcntl$getflags(r0, 0x401) 22:37:55 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(0x0, 0x0) [ 2078.121644] loop7: detected capacity change from 0 to 40 [ 2078.154908] loop1: detected capacity change from 0 to 40 22:37:55 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(0x0, 0x0) [ 2078.197727] loop0: detected capacity change from 0 to 40 22:37:55 executing program 6: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000000)={0x2, 0xab, 0x5, 0x3ff, 0x5, [{0x1, 0x4, 0x2, '\x00', 0x2484}, {0x7, 0x0, 0xb59}, {0x8, 0xffffffffffffff7e, 0x2, '\x00', 0xb81}, {0x8000, 0x20, 0x800, '\x00', 0x100}, {0x8, 0xffffffffffffffff, 0x0, '\x00', 0x902}]}) r0 = epoll_create(0x391) fcntl$getflags(r0, 0x408) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) r2 = epoll_create(0x4) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)) epoll_wait(r2, &(0x7f0000000000)=[{}], 0x1, 0x0) kcmp$KCMP_EPOLL_TFD(r1, 0x0, 0x7, r2, &(0x7f00000001c0)={r0, r0, 0x4}) 22:37:55 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x1ffff000, 0x0, 0x0}, 0x58) [ 2078.246580] loop7: detected capacity change from 0 to 40 [ 2078.260203] syz-executor.1: attempt to access beyond end of device [ 2078.260203] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2078.262000] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 2078.276184] syz-executor.0: attempt to access beyond end of device [ 2078.276184] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2078.277091] Buffer I/O error on dev loop0, logical block 10, lost async page write 22:37:55 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, @out_args}, './file1\x00'}) r3 = epoll_create(0x4) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000000040)='!^&:$/\x00', &(0x7f00000000c0)='./file2\x00', r4) 22:37:55 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0xa020000, 0x0, 0x0}, 0x58) 22:37:55 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x40050, 0xb01, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f0000001140)={0x1, &(0x7f0000001100)=[{0x8, 0x1000, &(0x7f0000000100)="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", 0x0, 0x1}]}) r2 = epoll_create(0x4) ioctl$FIONCLEX(r2, 0x5450) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x103040, 0x0) ioctl$FICLONE(r3, 0x40049409, r0) 22:37:55 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(0x0, 0x0) 22:37:55 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x20000000, 0x0, 0x0}, 0x58) [ 2078.386300] loop7: detected capacity change from 0 to 40 22:38:11 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 40) 22:38:11 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) clone3(&(0x7f00000007c0)={0x11018300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="0103a2bf3901977c64ba0000", @ANYRES32=r0, @ANYBLOB="03000000000000002e2f66696c653100"]) r2 = epoll_create(0x4) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)) epoll_wait(r2, &(0x7f0000000000)=[{}], 0x1, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, 0x0) r4 = epoll_create(0x4) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000240)) epoll_wait(r4, &(0x7f0000000000)=[{}], 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f00000000c0)={0x14}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0x1}) r6 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x141040, 0x0) write$binfmt_aout(r6, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r6, r0, 0x0, 0xfffffdef) 22:38:11 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x40050}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) ioctl$FIONCLEX(r0, 0x5450) 22:38:11 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x21790100, 0x0, 0x0}, 0x58) 22:38:11 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 41) 22:38:11 executing program 6: r0 = epoll_create(0x392) fcntl$getflags(r0, 0x401) 22:38:11 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0xc020000, 0x0, 0x0}, 0x58) 22:38:11 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40050}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) ioctl$FIONCLEX(r0, 0x5452) [ 2094.404370] loop0: detected capacity change from 0 to 40 [ 2094.412016] loop1: detected capacity change from 0 to 40 [ 2094.448274] syz-executor.0: attempt to access beyond end of device [ 2094.448274] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2094.449111] Buffer I/O error on dev loop0, logical block 10, lost async page write 22:38:11 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0xe000000, 0x0, 0x0}, 0x58) 22:38:11 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40050}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) ioctl$FIONCLEX(r0, 0x5421) [ 2094.489190] syz-executor.1: attempt to access beyond end of device [ 2094.489190] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2094.490034] Buffer I/O error on dev loop1, logical block 10, lost async page write 22:38:11 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 41) [ 2094.600317] loop0: detected capacity change from 0 to 40 [ 2094.622178] syz-executor.0: attempt to access beyond end of device [ 2094.622178] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2094.623018] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2109.395469] loop0: detected capacity change from 0 to 40 [ 2109.420960] loop7: detected capacity change from 0 to 40 22:38:26 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 42) 22:38:26 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x139542, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:38:26 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0xe020000, 0x0, 0x0}, 0x58) 22:38:26 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 42) 22:38:26 executing program 6: r0 = epoll_create(0x391) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = epoll_create(0x4) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)) epoll_wait(r2, &(0x7f0000000000)=[{}], 0x1, 0x0) clone3(&(0x7f0000002200)={0x2000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0), {0x1e}, &(0x7f00000001c0)=""/4096, 0x1000, &(0x7f00000011c0)=""/4096, &(0x7f00000021c0)=[0x0, 0x0], 0x2, {r1}}, 0x58) close_range(r2, r4, 0x2) fcntl$getflags(r0, 0x401) io_getevents(0x0, 0x5, 0x4, &(0x7f0000000100)=[{}, {}, {}, {}], &(0x7f0000000180)) 22:38:26 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) (fail_nth: 1) 22:38:26 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x2c010000, 0x0, 0x0}, 0x58) 22:38:26 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40050}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) ioctl$FIONCLEX(r0, 0x5450) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000000)={0x4e82, {0x8, 0x8, 0x1ff, 0x5, 0xffffffffffffffff}}) epoll_wait(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, 0x0) r1 = epoll_create(0xffffffff) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)) r3 = epoll_create(0x4) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)) epoll_wait(r3, &(0x7f0000000000)=[{}], 0x1, 0x0) r5 = epoll_create(0x4) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000240)) r7 = epoll_create(0x4) r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000240)) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000540), 0x400000, 0x0) io_submit(0x0, 0x5, &(0x7f00000005c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x59d9, r0, &(0x7f0000000100)="4ecd81c0dc1a92d0c6162a55ef915623e8ca8a07bfa0933b0f4678358e367b26668cb991cfdc94aafa4ad0fbef0b90ff2c0079a01daf1c99c52179f2a057e654a6db29f711d36f", 0x47, 0x631}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f0000000240)="3e1ec85a8c1fc0d1e399a2a7c491beaf67ed15f6ebdb30df94841d85a4e7db39365043b4275213927a386dadd696ca965d571d940347ddf67b95f2a9cd62613630", 0x41, 0x5, 0x0, 0x2}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000300)="d7b06b8a49e947526cde1a91436afdcfb94e8d8446c73e7b436fa747a16c0be924ba5d89d5f64eb2e2b1225ab2baa8e0b0414f8deeabff0b55c3af5e7a3ef821920ea460530804090c9c7fdf5ff8686d2eab92918dc9b24b160336aabcff3a52c01f2e62a4dcc0122752d0e9b9db196bedd141c9ccd67b5e10c87e7d6e367a3e80c566aee0a061fd0dd57cf6feb1419ceb6725890317c1c2890358e6cf81b62248423876b97182465e", 0xa9, 0x2, 0x0, 0x2, r2}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x8, r3, &(0x7f0000000400)="b70759c8c9ca29550bf932819f994766ba11e3e874dc2066d7b9f58d35739601e282483b0ee3f7db7e9d3ac81de7b266690ceb37f7ffea8350982b51eaec", 0x3e, 0xffffffffffffffc0, 0x0, 0x0, r6}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x101, r8, &(0x7f0000000480)="8fc95d172f436b3a6e0a3c9c08f9993d57eb5e81f3f546352fcadc5cf753305e247bfa2de53bbdf48b1f27548f9ef4d2176dc1b2fc8fe695ea4311554b91fd8e0825acc5b58f5db60a7f83e23fb12efe4051cb1cc0c58a4e17ce80b8e9437ed0e67ff809d6e88cc9b518dc45c963bae54c2a9a45224c7d36da376f41ad6b9ff57c7df9cfe046a710b6d8b9e56d882ae137bc805d414e856335cdca8d912a58390f5cc8c02c4cca077f", 0xa9, 0xffffffffffffffe1, 0x0, 0x1, r9}]) [ 2109.451643] loop1: detected capacity change from 0 to 40 [ 2109.463815] syz-executor.0: attempt to access beyond end of device [ 2109.463815] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2109.464713] Buffer I/O error on dev loop0, logical block 10, lost async page write 22:38:26 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfe8}, 0x40050}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x1f, 0x6, 0x2, 0x20, 0x0, 0x1, 0x904, 0x6, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb46, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x10, 0x7, 0x1000, 0x6, 0x7, 0x3, 0xfe00, 0x0, 0x5a76d3eb, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r0, 0x2) r1 = gettid() ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) recvmmsg$unix(r2, &(0x7f0000000d80)=[{{&(0x7f0000000280), 0x6e, &(0x7f0000000200), 0x0, &(0x7f0000000580)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000000ec0), 0x6e, &(0x7f0000000800), 0x0, &(0x7f0000000780)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f00000008c0)=""/91, 0x5b}, {&(0x7f0000000940)=""/152, 0x98}, {&(0x7f0000000300)=""/101, 0x65}, {&(0x7f0000000a80)=""/19, 0x13}, {&(0x7f0000000ac0)}, {&(0x7f0000000b00)=""/47, 0x2f}, {&(0x7f0000000b40)=""/33, 0x21}, {&(0x7f0000000f40)=""/223, 0xdf}, {&(0x7f0000000c80)=""/49, 0x31}], 0x9}}], 0x3, 0x40032012, &(0x7f0000000e40)) syz_open_procfs(r3, &(0x7f0000000e80)='net/snmp6\x00') capset(&(0x7f0000000240)={0x20080522, r1}, &(0x7f0000000380)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x1, 0x4, 0xfb, 0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x32b4, 0x4}, 0x4002, 0x8, 0x8, 0x8, 0x0, 0x3ff, 0x8, 0x0, 0x20, 0x0, 0xe54}, r1, 0x0, 0xffffffffffffffff, 0x8) r5 = epoll_create(0x4) ioctl$FIONCLEX(r5, 0x5450) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) [ 2109.517509] syz-executor.1: attempt to access beyond end of device [ 2109.517509] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2109.518688] Buffer I/O error on dev loop1, logical block 10, lost async page write 22:38:26 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 43) [ 2109.607165] loop0: detected capacity change from 0 to 40 [ 2109.644142] syz-executor.0: attempt to access beyond end of device [ 2109.644142] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2109.645135] Buffer I/O error on dev loop0, logical block 10, lost async page write 22:38:40 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) (fail_nth: 2) 22:38:40 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 44) 22:38:40 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 43) 22:38:40 executing program 6: r0 = epoll_create(0x391) r1 = epoll_create(0x4) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)) signalfd4(r2, &(0x7f0000000000)={[0xe00000000]}, 0x8, 0x80800) fcntl$getflags(r0, 0x401) epoll_create(0x81) 22:38:40 executing program 4: pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000200), 0x90020, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:38:40 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x10000000, 0x0, 0x0}, 0x58) [ 2123.859471] loop7: detected capacity change from 0 to 40 [ 2123.863987] loop1: detected capacity change from 0 to 40 22:38:40 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x32010000, 0x0, 0x0}, 0x58) 22:38:40 executing program 5: r0 = fork() perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x9, 0x6}, 0x40052}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_secret(0x80000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) waitid(0x0, r2, &(0x7f0000000200), 0x20000000, &(0x7f0000000280)) setpgid(r0, r0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x6, 0xfb, 0x9, 0x49, 0x0, 0x100000001, 0x20, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x462, 0x5, @perf_config_ext={0x8, 0x5a}, 0x200, 0x8, 0xfffffffb, 0x3, 0x5, 0x0, 0x800, 0x0, 0x99b, 0x0, 0x8}, r0, 0x10, r1, 0x1) r3 = epoll_create(0x4) ioctl$FIONCLEX(r3, 0x5450) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/uts\x00') [ 2123.911750] syz-executor.1: attempt to access beyond end of device [ 2123.911750] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2123.912618] Buffer I/O error on dev loop1, logical block 10, lost async page write 22:38:40 executing program 6: r0 = epoll_create(0x391) fcntl$getflags(r0, 0x401) pipe(&(0x7f0000000000)) r1 = epoll_create(0x4) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc1}) [ 2123.958572] loop0: detected capacity change from 0 to 40 22:38:40 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) (fail_nth: 3) 22:38:40 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 44) [ 2124.063128] loop1: detected capacity change from 0 to 40 22:38:40 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x10000200, 0x0, 0x0}, 0x58) 22:38:40 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x3f000000, 0x0, 0x0}, 0x58) [ 2124.108194] loop7: detected capacity change from 0 to 40 [ 2124.109635] syz-executor.1: attempt to access beyond end of device [ 2124.109635] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2124.110505] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 2124.111201] syz-executor.0: attempt to access beyond end of device [ 2124.111201] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2124.112754] Buffer I/O error on dev loop0, logical block 10, lost async page write 22:38:41 executing program 5: perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x40050, 0x2, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_create(0x4) r0 = epoll_create(0x4) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_wait(r1, &(0x7f0000000280)=[{}, {}], 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)) ioctl$FIONCLEX(r1, 0x5450) r2 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x80013, r2, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r5, 0x80, &(0x7f0000000180)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}, 0x4}}, 0x0) r6 = epoll_create(0x4) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'veth0_vlan\x00'}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x77359400}, 0x1, 0x1, 0x1}, 0x1) [ 2124.168644] FAULT_INJECTION: forcing a failure. [ 2124.168644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2124.170288] CPU: 0 PID: 9270 Comm: syz-executor.7 Not tainted 6.1.0-rc3-next-20221104 #1 [ 2124.171355] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2124.172433] Call Trace: [ 2124.172783] [ 2124.173096] dump_stack_lvl+0x8b/0xb3 [ 2124.173635] should_fail.cold+0x5/0xa [ 2124.174167] strncpy_from_user+0x34/0x3e0 [ 2124.174737] getname_flags.part.0+0x95/0x4f0 [ 2124.175357] getname_flags+0x9a/0xe0 [ 2124.175880] user_path_at_empty+0x2b/0x60 [ 2124.176474] do_sys_truncate.part.0+0x86/0x140 [ 2124.177110] ? __pfx_do_sys_truncate.part.0+0x10/0x10 [ 2124.177805] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2124.178533] __x64_sys_truncate+0x69/0xa0 [ 2124.179096] do_syscall_64+0x3b/0x90 [ 2124.179587] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2124.180282] RIP: 0033:0x7f858b7e5b19 [ 2124.180766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2124.183061] RSP: 002b:00007f8588d5b188 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 2124.184061] RAX: ffffffffffffffda RBX: 00007f858b8f8f60 RCX: 00007f858b7e5b19 [ 2124.184968] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 2124.185887] RBP: 00007f8588d5b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2124.186818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2124.187737] R13: 00007ffcae3f941f R14: 00007f8588d5b300 R15: 0000000000022000 [ 2124.188679] 22:38:56 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x10020000, 0x0, 0x0}, 0x58) 22:38:56 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 45) 22:38:56 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f00000000c0)=0xfff) r2 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000240)="47741f7894978211dfd2160c563a6fac8482665f1a32c068190bd509706a0e60e107ef464879f7e49eb9f88a3ee99fcd4e8a8db8d56e2fd397dc6f9da5c0292e175c2347def974fdf67e708f37736b3e49931b778c9be6c293dacee66327fefbbc96668d5fcf84765dcb390b6e014521220cb0691c8dd8e1e19498137a48cf9afbf32621b4f358", 0x87, 0x1}, {&(0x7f0000000300)="f8e8e7caba7dc7c9c8201f527cba00b836da5da2e6be7955df0e28daa79e2e218f672332339979f2344d7e66bb03a1a57c7a62158adad84156f49b9b272edca52fad950423b7b96bc2e204bb0de761a1c9d66075fb21d79bed767a509625145cfcf5bfd4840a45ebae3f4d1fe8dd720da4243bf5e6bd099ee23c6fdf4264315ae0542a3862a858b706160ec43074c1e5acfa9ed71c9e97e545929ff077ead56f625e3a980060f109d5a6c41d050e97dba070861415e7de6c4005ddfdf65e5db7c8e507c2b8e20f714049e6f86175fbded8294fcb3f6840c67d7fbbf2db639dea56cd8d8605bd", 0xe6, 0x6e}, {&(0x7f0000000400)="0386ae77c60bc2bbcceefc6bd935cd122328fdad17cdb2e141745086fdb67d2d19da100e86b7254819da5331fd3297119d36ea13c14501a23105e4ab9b9ddc9df88f2bfc04e1cdc996db5af39b09caa65cd181ac79060e0bf5bc42263cfb75ee06ddc4dffc91ed3a929885407933f299ed0818b56dd5b72e5245f12ebf0daac36c559d668faf201759406f82936dea51d2b1a46f28eb3ae795e708bf9bc8037601c26e9574d75ad75a28ef521dda941488b1827a3ab05cd7c41c4a22af8cc6c09f954b10ad8eb2cacd84a2e41bed5759b8c08c382cb49360307d0120df028b62b93e105a273a4c79", 0xe8, 0x8}], 0x10004, &(0x7f0000000580)={[{@noacl}, {@data_ordered}], [{@smackfsroot={'smackfsroot', 0x3d, '#}*#\xb1--(-#^'}}, {@smackfsroot}, {@euid_lt={'euid<', 0xee00}}, {@fowner_lt={'fowner<', 0xee01}}]}) close(r2) 22:38:56 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40050}, 0x0, 0x2, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000003c0)={0x1000, &(0x7f0000000040), &(0x7f0000000200)=0x0, &(0x7f0000000240), {0x6}, &(0x7f0000000280)=""/112, 0x70, &(0x7f0000000300)=""/109, &(0x7f0000000380)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x5}, 0x58) r2 = epoll_create(0x4) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x81, 0x7, 0x0, 0x4, 0x0, 0x8, 0x12e, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x81, 0x4}, 0x1410, 0x80000000, 0x1ab, 0x0, 0x4, 0x5, 0x758, 0x0, 0x3, 0x0, 0xfffffffffffffff9}, r1, 0x15, r0, 0x1) r4 = epoll_create(0x4) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x1, 0x6, 0x40, 0x4, 0x0, 0x8000, 0x1014, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe5, 0x2, @perf_bp, 0x23ce, 0x4045fff, 0x1f, 0x7, 0x401, 0x0, 0x4, 0x0, 0x4, 0x0, 0x266}, 0x0, 0xe, r0, 0x8) ioctl$FIONCLEX(r4, 0x5450) 22:38:56 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 45) 22:38:56 executing program 6: mq_notify(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x3c, 0x2, @thr={&(0x7f0000000080)="6619ec27199c9a4ebdbd3265f754af0244a7dd1f192819adb32199f4cd574fadf079c3824f232d45030338c7927890a004c9cc30ee4027f771ab4f27b5a09c245af838ff8863f42d73448085e30f6fcbc1a74a16316af657183e0444d10170d2be305f228af0c614fc74ec7913852fe1b7345b2d0271ff1ab7adf0ca0e418b5c2ec81bc4936558b353654679907480ee8f5d3481c0face3ee6b4e1a89cc9b98dcd04733d656025d8f5d42970c74397361df244329428d3531098c44aa20360ca078217d433caf4a06820166b1476e046d5c3018b4c523024713e8e4f55ef0aa328009564f5a8a61e5b32", &(0x7f0000000180)="236500760099e97e19b611e8967517fab9c179c6d339dc945b34"}}) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000000200)={{}, "08c34620e55b46a5ca19c6838a90dc66d8739d83b392da2889df047e49e94ad3d080f287c2791eb6395e042c1a347149a9737e4c8b8c61f944195d1b2a840ce930045310270a794309ceb61092a4711910866284d1aab18de689eacc7269ba73ba47279d1d5e22ea112314abd65d9ccac335c514feaf2e553c606eb68421fcce1f9d906949bd763f2d223ae6e356f79059d0f840a806e2d6686e2b69b169fd6546a190e53b4cea928c082fa6ee062de106acfca197d9cfb0abaffe39200679079d4b3e39885fc2e00ed610bc266f4c1429e3400429aa7a8ef03b275dcb1530c5357d569eb87615de7f767553ea04c024e748493f5cd7d8b706fb4cd8743bda394fbe59e99b146aede605c3c6ae82e26d66fecec902e45522dd57d846b03af1c08d88d4c50accc017ef486737bbdd8916d4267d437ed3b529cc3d623389ae376fffb1a96836f2a64d215db6f769e7423e4e285903126bb1566222f6cfbd45c50b0dddddb131c223751036ac1811766df33a4dbfb83e2227ef1a00633ba34809ecf179d5613859a76754c5c363e4f8667c5303ac00350b65c0565f8c313efb94fcd42bd16813673742f8f25ef17daddde9df5a26c0c6f38146bf8f7a2ec1a5b31dac14ed88fdc6a2eb753e1557ec746cc0812ec0be2818bcf662ced1dffb0c232dbcc6adfa91f7aeeecb569b4d36c1ea5a35fdc1edd5d6695910139f49a6fa9d856f894ba909635af08c3ac64078dc5cf1a464353a3071d86c793358f3eb1fc071bcbceed86c2be4ea86d2007f650c6cfa74a8ac3ac681cd59016d621d48a474ff2ecfe03fbd44a7ee06609997b691fc28849236e9dd4de0e1d4905099d053c14a0294493e5f58117b7028a581609aac9d7eab6191430ceaad5414b5f6015b4a3e732dd582315dd8614d1f2c7e701591b35f6fc561ed9953ec80b1e0ede7f0e19781a713d40aae4e6e8e0c6f1fd5b014a58237b0a213c4f51ecbe3bed15b3721983107f7441ee9dd9269d43b508c5d7077537229ec372c1bde4be3f59978e8428c5e1197097c9e58ea199cb5b436f29c7dfdb507560174cd175cf7bf4db6332731fcc6e2fd3abf69f66240ba8e4fd3dba4316b2be383d91305a08a73e747f2e4fa3ce39ebe99f251e64289f07e633733ea54fdc01883e7b9d525ae30cc9596d2a278ca4764b1db604dd076c04c2209c85b47780e3c1795fcade952380dd290cb4ce7de7cd2fe473bc7e79757fe1bb3c12849d05d4c23b47beed3496f56bb525a3a2653706c5d0423d9f6bb4b70d48b721e65f0715355e686a59eb053b52ca784916509d8fb5393e7744a37a94ad52a2f2fbfdaab2540bc05b19185dc2d659abc22835fe9e264373a055478fcd048c92a5be5f0bf366646d8f893cc10df99964961f029d36245df9370a30f46d992df65968f0b12cc14e15fae49a5cef3afcbee71a9cf1e1abd38b6c50abbe83dfb931d068b2386a9f0bb052986dc6e7b3303f188b81ff428a925c58844b5e25f5bb3b26528fda2c7d655e9b3b51469eb8a8764f0b101f7520f32d5842bc1fb668d7ff1079f39b81c3b1a35716070c06746bf8f37e59322189f718688e7b093b1ea2f8170b01d18ad43d6b4b4fb3f8b421edc247ee537a9ca77079f02c1d4c9d563284ccee3d28d36ed2b5e254658d99414498aa1ed452f2e97fcd58d0537470a4729cf09239bf2b5493475bb049bd07a9e977531c309190a7e513876da37063dc711383acde4f12dee4fe48e19096ffe2b92079e88ba72f1933ea72618bf4b80f42b4aa9d1b68ac1fc98cc142284fd2ec97376e73da2df1d7a6350eebbb8c4a3a4c47071a8597231dfb25782a9c88c44751c2c4f0e8267a593ce4e6ffdc12cfbd9a37a45fae20b2c54c503106b394f5b489e3f1177bf071e652e4002506ac89fde270462a6b858f8c6dc49327ceb0eb19ab5b0edce8237f2dca41097b11bfe0f3b2263c1a31076a5f1b37726135a97daa4cf2abe534fdbb1a095bdf73eebbdef7951c6797ba54f2cb231dcc5b1f2a05e6c35cac4992a373e124d782f9b07a4fb9edda5d119fc8146c493aabfe03e451a9a1275b7e79f6df0fd85fb5d535b99ec2d60c0be0221553cbffa400bbf4a8dc28f214c5e8e3e504f311229da4a657a44899eb06c8efa0ec8d81ae346d76b75772878bcafb2a9b1dd55e30c164bcbcfd258f8a336c1e9c81fd97f15e17397e6293e60e7f3d1913bd66819b8abfba599d40da0781140ceb9cdeb6cc7e13b0da0c69223056b6ece44500ce735a720b212e13aae34cf1c8a8b1b00c5dd8aa81e5e786acd99ae32c4d315317da253ee65280945b8bb3b11552c27aee2cd9773209632132caa1ce097391fcab73bbbdbf5baf28e573452bcf516b1078949720ba7d64876de42787b73f75f5e88b60886ac592ddd5d3d6afe5147735947bed99f5b6eebbb2d148b653b1421b84b1b916f73f030491c8226d4004db1c6b13af79ddf9eb8c952dea5f6aceccd435efc01e08920f1ebdcf02f311c753e7a9037703323f98f8d143f9eb2be28a5c4ada8e97d1e75bca1f882df4aa45ffb11ca9f11b11c456d6acd2a6740dbf3467011f5f0187ad5ad3b779bb5d7c2be2a264da8d2b56aa3c467153e00ccb3bf4d0c9293dfa1868d95f1dcccd721f88f40e9d8fc582c1de0dc55b1957272fba7067f50b398436dc2033dda3e4207a4f6b2c888ff4b1c7aa99d267107cabe78fabff6fc51ca58a01b70d68e72a5feecc48de5cec7a7f42a500390ce68ac12c3147ce0488c99ddd347b4707b41e830d36bbe3ba8ba32f3955ef3e28e4b0ced354424176adf6ff49e6ba90d1feeb79cdbe006d42f712fec064e95ff73dbd675afb2ed4783a978e25bce180a90cb5a4a46d89efe2024adf480e78c27b5a18a5a695b878bf3bfd378d71f976c32e6599b3305ed396e6c8828c33810cf16af697fb8945d810d28f26d4b0973cd2a8c2d899517b340b11db53aa63d64cf87d629f32811f03c5028f23730ae2d631782cdfbda7b9768efd96a4b16feb60ead8b7e80d3d6e423f5ee4723fbf038d5f8e7575b3a1a8086953126302996016324ce0fd4437b5ecc8134faf1b54fb73e9e8348987846e62cbede8dd7f967ae93dbf9e073423cd0751a76e759070c8ab1c59d84369edf1441bdd235b83c4cb181092973ad03e99d3bddfca8971c9fa4ac9ec95c611a5df206e401538f8bd07fd6b83bce4fd5fbabbd10eb4d24a7f9dcec34c697cb8c61ba7790f6b420b8a345f64c0846cd42a53726b429ab5a4daec5ea6520a0dba1dcb4cf4acc5f2fe6c2dac581bd4b95af55bd385500dbfc19f3822d513d836acc6a5b0fbb04c5d20b03d2c5accf83d975625b123db2fd3e5a982841bfb6074568668c8074c05b1631bf3c41a2b6348b2380404510d95688c0d29fae908dd623e0cfe8afc206a06369695a06ff5f27324e808b927c854aa105d6d278fedaa6d1936da1ab7453ea65957ab6cd7c9f50fb57c55279bf9d8014658e588a5fb21bd9028326a97273a2053ae3613b47370f80dda45e65f45515a27b3f8a8cc04b3117a3b6b1263b29192340bac516b46988d55cda54ef57af5af3abfca60d485d3abb1463e07985b8df7874aa8aaa55e0d85adf0841020329d388676d13c0373538193900e1e0e1e61d40b941915435710dd620c5f31faeb9c1fd9a90d0f9b339592676b62aeda984ede24aaef2f60927b2331cbab1dfb833e620a1230d62900619c9b114607c36eaa67e26e7bfdee2491071a0f0f17f4047393335c82b6e28fc51689110baaeb198011ac1d1a2b65dfa0d8fb83e50f5d8b573eb6cdc3784922ce8bd4a02c13cb031c0f0de6aa5594f27cecee383aaf2d3678a1a14c2dece4f499a2a76ef2d425229e896121b9c0616de33eeafe7a61b98b9969ef573b859239f92499b5e2af4971b853e397ca2af5acf1f74930182335a361acf73f8f86499fc01001b420612cee587545b5a8f820729d17df8e5d9fbef6d12e784ff5c4f48da177639f449fed439e20fd418ef1deaabe23c02d63bbfdc8a7d39e05eed301d92d2273312ccd82102494dce1a66883582882f2221733ad8f7a894db269b26bca0f33f94d73141d56c539fc4e6195a6ad6d35c6fe93a15a5e145f32cebd124fe8225b24d55c03c4c9f771ff50f8ead2c739101bd4e480faf8d941b0d43fef3f3e164daf9134d0bfa9d887fef3fa1e35415065e20a614feefad701b8806ab6510576d36356f041eb32f7dbcda5004808583d5beabb6343d1ba9b2a969b2c92c94ed0214bd97976922381dff075079b8b94bd2e1ca27f1a779e1bc8a140bf5a08901a1b3e134adf686459baf4a2ac57503e9f759c56ebbc5b04ef9ece2b3e5ef352202d4001e8e4b6e91724ccae63ba487585af51b98593e54e9db5d4f5fa5af681bc385f3b4fc77e8f6aebef4a674a299a6672e01880123877bf6f5497527afe6703d9d92029af9f3b86f1d3f66d1f00794fbd347d6d9356ba9f4bb0cd7a6518fa3f00c5c50c91cfbc222fe35bd3f06950c58457841746ef50e9d12afc60941e6869a07b7e83cf2939c6fdec90039071ba6158194abf3053fe1be29a2fda131e96edfb87281224be9962b960248e48daf21c80e2727ef4566ec62b28405bf2c7cd7eb66ce6565e6d61dc3737b0b692727a17dba520e8d6f1f96248adc3ed50ce5a2091ce48b63a1d83ad29bf4ba6445c857cf84368b27815d115fb07128f914be9d146e49f3b00def99e50c087fbafcce6911b1bba73a2604052f68bf83405f431aa2f553458df059d92814daf10e007e888f568775e757ad02c522b6ec0a0d9e9ba68371089ad0090fcf514fd9f82ed8b7ed35826bfe8966059ff41d9cb619ca1f0b35c791d5ae6e4db9c9d3fbf590fc72e0f3e2980fa6a778fc035c22ed5d9968348c58441a95713f5c6b2c164e3fc36eb5bc282b2314ea3c314b056527f5a80fe5aa58c5ecc8729380820fbc580c08bcca4ea1ad96c82c2e8a5882d36ce310d4d31663e7633ce5dd0c58c213b3eca00ed8a9b5177515736b38d1b679ff5c088b7c76cea01a870ca71514c97d212921eb0129c3f889534e49555aa29f20759c368e05f43baadab0dbcd390076a97e98945bc0247e31ccb6a1424ebed2ac4ee9d07dcf4952115c5f220537b8393cf9ab16fc6c1c44ed06d216643d1fcf929701203b718a356c6d9c49b10f4c7b610df796f46cf12ccd4b1e02fbb20535c82d51da8bee5311b66d1bd9526ada58403d71251426cd20cf299849aa082879ab5eacbff7d3a7df0ff89c5537f0a9d1c58704009736145967a2116735a5e153c634af010c47bfc32516cd5a5a71b1d7552f8aa3e22d8031fb5772674e8d5ab60ee8aff8c9269f6bca918b4f2dbf15c2da02ef681a4b57d856594a82efbc1ecc5499723b159091f10a09b2e34a02d1f0811b031e0c1022c2a55968cad1b8116bae0a9701a373abe54373e97adf57a3872dcf966444b52ce38110c6138d523fc0a3265584fb2a268a6507e97a15bd5a27f9d3f0668bd0ddd6c231f384ace1758d45219cb433e0f880e6c541a4b159f784155beed1a472fcb2b6ca7ffcf92338469020ab0c043e60a13abce4040e0431bf319697628c46968d38bb724b4212ee1bb88458131b686c5a112902c05e84fa367929e63b157f498f36bdfa6277edddb4df6322ab83083eaf2a71b1e1b8857ed9829eec9c368fb3be4c8b1c6c4e770d68f0204e96d8a9be55e069a52b3122894f460b5a90ebacbeaf12710a87528ae20320746b23f47290716ec798a7ee"}) r0 = epoll_create(0x391) fcntl$getflags(r0, 0x401) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000000)={0x1, 0x4, 0x6, {0x20}, 0x8, 0x6}) r1 = epoll_create(0x4) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000001240)={0x80002014}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001200)='/sys/module/snd_pcm', 0x0, 0x100) dup(r3) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000001280)={0x10}) 22:38:56 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x40000000, 0x0, 0x0}, 0x58) 22:38:56 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) (fail_nth: 4) [ 2139.997976] loop1: detected capacity change from 0 to 40 [ 2139.998801] loop7: detected capacity change from 0 to 40 [ 2140.011283] loop0: detected capacity change from 0 to 40 [ 2140.055525] FAULT_INJECTION: forcing a failure. [ 2140.055525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2140.057962] CPU: 1 PID: 9297 Comm: syz-executor.7 Not tainted 6.1.0-rc3-next-20221104 #1 [ 2140.059295] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2140.060648] Call Trace: [ 2140.061090] [ 2140.061481] dump_stack_lvl+0x8b/0xb3 [ 2140.062156] should_fail.cold+0x5/0xa [ 2140.062849] _copy_to_user+0x2a/0x140 [ 2140.063499] simple_read_from_buffer+0xcc/0x160 [ 2140.064300] proc_fail_nth_read+0x198/0x230 [ 2140.065041] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2140.065850] ? security_file_permission+0xb1/0xe0 [ 2140.066722] vfs_read+0x253/0x930 [ 2140.067256] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2140.067708] ? __pfx_vfs_read+0x10/0x10 [ 2140.068094] ? __fget_files+0x270/0x450 [ 2140.068496] ksys_read+0x127/0x250 [ 2140.068841] ? __pfx_ksys_read+0x10/0x10 [ 2140.069235] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2140.069719] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2140.070206] do_syscall_64+0x3b/0x90 [ 2140.070567] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2140.071047] RIP: 0033:0x7f858b79869c [ 2140.071394] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2140.072972] RSP: 002b:00007f8588d5b170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2140.073648] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f858b79869c [ 2140.074275] RDX: 000000000000000f RSI: 00007f8588d5b1e0 RDI: 0000000000000004 [ 2140.074924] RBP: 00007f8588d5b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2140.075552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2140.076186] R13: 00007ffcae3f941f R14: 00007f8588d5b300 R15: 0000000000022000 [ 2140.076842] [ 2140.140502] syz-executor.1: attempt to access beyond end of device [ 2140.140502] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2140.142344] Buffer I/O error on dev loop1, logical block 10, lost async page write 22:38:57 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x11000000, 0x0, 0x0}, 0x58) [ 2140.156037] syz-executor.0: attempt to access beyond end of device [ 2140.156037] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2140.157687] Buffer I/O error on dev loop0, logical block 10, lost async page write 22:38:57 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x4b790100, 0x0, 0x0}, 0x58) 22:38:57 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x0) 22:38:57 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x12020000, 0x0, 0x0}, 0x58) 22:38:57 executing program 6: r0 = epoll_create(0x391) lstat(&(0x7f00000019c0)='./file0\x00', &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001a80)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}}}, &(0x7f0000001b80)=0xe8) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001bc0)=0x0) r4 = perf_event_open(&(0x7f0000001c40)={0x3, 0x80, 0x0, 0x3f, 0x1f, 0x40, 0x0, 0x7ff, 0x4004, 0x6, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xe19, 0x0, @perf_bp={&(0x7f0000001c00), 0x6}, 0x2, 0xfe29, 0xff, 0x5, 0x1, 0x40, 0x72d, 0x0, 0xffffffff, 0x0, 0x5b}, 0x0, 0xc, 0xffffffffffffffff, 0x1) r5 = syz_open_dev$usbmon(&(0x7f0000001cc0), 0x100000000000000, 0x404061) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x400c2, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r6, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="f258", @ANYRES16=0x0], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x48000) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000400)={{{@in=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0xe8) lstat(&(0x7f0000000200)='./cgroup/cgroup.procs\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000140)='./cgroup/cgroup.procs/file0\x00', &(0x7f0000000180), 0x800, &(0x7f0000000580)={'trans=unix,', {[{@debug={'debug', 0x3d, 0x5}}, {@cachetag={'cachetag', 0x3d, '[\xd4\xfb,+\'#[$$'}}, {@uname={'uname', 0x3d, ',@}'}}, {@cache_none}], [{@uid_lt={'uid<', r7}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@uid_gt={'uid>', r8}}, {@hash}]}}) r9 = gettid() capset(&(0x7f0000000240)={0x20080522, r9}, &(0x7f0000000380)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001d00)={{{@in=@dev, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f0000001e00)=0xe8) fstat(r0, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000000000), 0xc, &(0x7f00000018c0)=[{&(0x7f0000000240)={0x1ec, 0x1f, 0x300, 0x70bd2b, 0x25dfdbfc, "", [@typed={0x4, 0x1f}, @generic="7ffdf82e932e5332a278cfb37e07f23c9c70a4229f06bd5a1cee7055a22c92697b7cd6c8fc094259d255b712c8cd5d9a13ea75ed55fd84296cf94867f6d45348cc53b150e82a92dbe169c4c007b0562d506581bc282eaa5d3bbd6e4161d85e6023eb0019615ec1a3b5c8902c233631b5", @typed={0x8, 0x83, 0x0, 0x0, @uid}, @generic="8f4486a0282c685b837642692c9874f51ae712967707cf7138b1c38f24c8f2286b8616d544f422beb7a6be9d14a6af669962f90f45bd250ab881dfbaf75ab8", @nested={0x11e, 0x83, 0x0, 0x1, [@generic="14a600097a37ee06f8cfe634b120685008e12472bd9a47dc4a2ef7db6190d9a2f4feb8a2c56856aa4c810ed37a006c24cf5101", @generic="878b83ef649d986bec039bb687383f507a55cffb160084180d97c56581e725c058c6515f160c782d7aeac64edee28d741eeeff49667da9271ddf9649f7e464273b9dcda7100e50a47c025d830efd77d212404d0063de313dc27a2260aa4cb49e7d32dfd1cb02ca9b666d914ebdf3325b72e1feb566b244ecb71bf599f01dff7415d134750c595c359aa296f2b8de1c364a76635a62c9301d36785fc477714e0af7784a7aec19146d79343ba451cbd0a36d01f02817e4dadfa7813f28df7b5a94b52c1621b1271179d44c1d10dd970d97bdcc96f4b9013c1dfe41d171c548dba51a6eba9474692d"]}]}, 0x1ec}, {&(0x7f0000000440)={0x60, 0x20, 0x2, 0x70bd29, 0x25dfdbfd, "", [@generic="1346f7552b7c797c9afef7ce55eb01b453660dc00ff1f7869db66a5dc840d8c1a1822f7cc4b772e032d72ed0c4f717a6d8fbee38a1cf9da685a35a9ead2d80a3c3165822fcbd6cde759037974d"]}, 0x60}, {&(0x7f0000000500)={0x7c, 0x41, 0x4, 0x70bd26, 0x25dfdbfb, "", [@nested={0x20, 0x78, 0x0, 0x1, [@typed={0x14, 0x75, 0x0, 0x0, @ipv6=@loopback}, @typed={0x8, 0x67, 0x0, 0x0, @fd}]}, @typed={0x4, 0x94}, @nested={0x45, 0x85, 0x0, 0x1, [@generic="a70961d5446d5d12e86c6a31fb6958b4607333426d2af771e590d69ddb446cbf21225cc09441aafe093a3df5", @generic="329b44da65", @typed={0x8, 0x30, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0x95, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}]}]}, 0x7c}, {&(0x7f0000000580)={0x1248, 0x20, 0x20, 0x70bd27, 0x25dfdbfd, "", [@typed={0xc, 0x8a, 0x0, 0x0, @u64=0x1}, @nested={0x1c2, 0x3f, 0x0, 0x1, [@typed={0xfd, 0x6f, 0x0, 0x0, @binary="7f9b34e52025de12c35198c22881943e938d267be37f909f6f389438dec3f39c92d005a672ba44d18b944e06e520c5566092350f841cd55da05996689c47924f135e10bbdf555b4e530e2003fafe2d330e9b8f3218a7290da04daa6ecdf79ccd330925c8bbc4c765a4b343b10a5aa88dbf0ddeecf518f039074e30e7e17f022fde640dbda9cde4031cb05002c620143f9ecf8951409238f305226f5844346dd6a8f24bb0b1549a7ba540a9d9857e071970fd08d822ef14822e691951641b3b825e7f86089a9604ec03df86bd7bfe0ec8d7470c4bdbca3bb8d9d255a52e4355482afbbac0079ea1cbe9533d8a2483cb9c8626ae86c1cfddd21d"}, @generic="6b0b1f1f71754134bfe993d61afb3ff262c8d587359a738cebd2d2439049c537fe9c5bcdff3d8401c01b33f00719119a216d56c71c4d4ab6330a2c63ecac6bc41ff50ec0b5b347322d809c17034712d7cae661134995556125aed7e527426896a3590565012cf2b0e1b9b36b149b182956c6614e6622c6007dd11d2546886172d545266adde1bc6e53eb0ac33cdd63ec4f324a9fe715999ee426a9d83defac2f4cf09faa6d002bd2da51bf50eac23296acfa", @typed={0xc, 0x2d, 0x0, 0x0, @u64=0x7}]}, @generic="5c729416d683825f859336bef2b94b07c0fc5ee96f5d5b56427a88f869690b6f0be6b6e20c939bbb715b7ac63f952647a090a8f1364e914dcbb2c08368f61904d5677115e90d5ddcb780ca0240e029443535ae9977175d2d217f6ed792532f81db98f89d5b6b", @generic="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"]}, 0x1248}, {&(0x7f0000001800)={0xbc, 0x22, 0x4, 0x70bd25, 0x25dfdbff, "", [@nested={0xa9, 0x6e, 0x0, 0x1, [@generic="46c021360156afe3710cfba892ac9cd829d5acd50ec0118ef618c64aedac0364ddd79c2a1e231b52f4019966146a54c5c5a75be7a10c8c76a801c1bba2df5657c03c1c726f03c05ea2c9faf1fa1d8c8ad1b4c07a6d60b0c85d2fc503333c0d8ecc0d46e1a2974c7a3295047d0b558c728cdbc0e70f426e151c4c197f330d58abd36cd769059a96f144b67b430cbcd6f454988e91a9281e0eccb2b66be8fda78ea2766cd90b"]}]}, 0xbc}], 0x5, &(0x7f0000001ec0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r1}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r2}}}, @cred={{0x1c, 0x1, 0x2, {r3, 0xee00, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [r4, r0]}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r5, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r7, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r11, 0xee00}}}], 0x110, 0x20000044}, 0x4) fcntl$getflags(r0, 0x401) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x94, r12, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x6c, 0x3, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x64, 0x1, "4af1bb1f6e12b34437c89afb0f6d312e965210cf3eae91a00be13c64cf85e7efdacb8a2668ca2199efdf8183320a507a3c7f5e79dacc7d39753d4037aeb10c99886206c9792d28e774002d5305a9ab9cc2be55773bc892253badd7dd683d4396"}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4009010}, 0x4000844) [ 2140.359123] loop7: detected capacity change from 0 to 40 22:38:57 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 46) 22:38:57 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 46) 22:38:57 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x1fffefff, 0x0, 0x0}, 0x58) 22:38:57 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x5d010000, 0x0, 0x0}, 0x58) [ 2140.661597] loop0: detected capacity change from 0 to 40 [ 2140.662573] loop1: detected capacity change from 0 to 40 [ 2140.805218] syz-executor.0: attempt to access beyond end of device [ 2140.805218] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2140.807072] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2140.813454] syz-executor.1: attempt to access beyond end of device [ 2140.813454] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2140.815092] Buffer I/O error on dev loop1, logical block 10, lost async page write 22:39:13 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 47) 22:39:13 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x20402, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:39:13 executing program 6: r0 = epoll_create(0x391) fcntl$getflags(r0, 0x401) 22:39:13 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) ioctl$FIONCLEX(r0, 0x5450) 22:39:13 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x5f180000, 0x0, 0x0}, 0x58) 22:39:13 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x2) 22:39:13 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x1ffff000, 0x0, 0x0}, 0x58) 22:39:13 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 47) [ 2156.912777] loop0: detected capacity change from 0 to 40 [ 2156.943498] loop1: detected capacity change from 0 to 40 [ 2156.977652] loop7: detected capacity change from 0 to 40 22:39:13 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x20000000, 0x0, 0x0}, 0x58) 22:39:13 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 48) [ 2157.056114] syz-executor.1: attempt to access beyond end of device [ 2157.056114] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2157.056876] Buffer I/O error on dev loop1, logical block 10, lost async page write 22:39:13 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x5f790100, 0x0, 0x0}, 0x58) 22:39:13 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x40050}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) fcntl$setstatus(r0, 0x4, 0x3000) ioctl$FIONCLEX(r0, 0x5450) 22:39:13 executing program 6: r0 = epoll_create(0x391) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) r3 = epoll_create(0x4) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)) epoll_wait(r3, &(0x7f0000000000)=[{}], 0x1, 0x0) r5 = epoll_create(0x4) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000240)) epoll_wait(r5, &(0x7f0000000000)=[{}], 0x1, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000080)={r3, r5, 0x75}) fcntl$getflags(r0, 0x401) 22:39:14 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 48) 22:39:14 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x8) [ 2157.167645] loop0: detected capacity change from 0 to 40 [ 2157.172474] loop1: detected capacity change from 0 to 40 [ 2157.194852] syz-executor.1: attempt to access beyond end of device [ 2157.194852] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2157.195642] Buffer I/O error on dev loop1, logical block 10, lost async page write 22:39:14 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 49) [ 2157.266572] loop1: detected capacity change from 0 to 40 [ 2157.292316] syz-executor.1: attempt to access beyond end of device [ 2157.292316] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2157.293168] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 2157.319902] syz-executor.0: attempt to access beyond end of device [ 2157.319902] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2157.321874] Buffer I/O error on dev loop0, logical block 10, lost async page write 22:39:14 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x2c010000, 0x0, 0x0}, 0x58) [ 2157.388112] loop7: detected capacity change from 0 to 40 22:39:14 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 50) 22:39:14 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40050}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@filename='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r1 = epoll_create(0x4) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="0300000080000000262b66696c65bb99"]) r3 = epoll_create(0x4) ioctl$FIONCLEX(r3, 0x5450) 22:39:14 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x71110000, 0x0, 0x0}, 0x58) [ 2157.677326] loop1: detected capacity change from 0 to 40 [ 2157.741164] syz-executor.1: attempt to access beyond end of device [ 2157.741164] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2157.745471] Buffer I/O error on dev loop1, logical block 10, lost async page write 22:39:29 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r2, r1, 0x0, 0xfffffdef) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendfile(r0, r3, &(0x7f0000000040)=0x3, 0x9) 22:39:29 executing program 6: r0 = epoll_create(0xe71) fcntl$getflags(r0, 0x401) 22:39:29 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 51) 22:39:29 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x3f000000, 0x0, 0x0}, 0x58) 22:39:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 49) 22:39:29 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x30) 22:39:29 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x87110000, 0x0, 0x0}, 0x58) 22:39:29 executing program 5: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000040)=0x1e) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40050}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x4) ioctl$FIONCLEX(r1, 0x5450) [ 2172.832086] loop1: detected capacity change from 0 to 40 22:39:29 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40050}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@filename='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r1 = epoll_create(0x4) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="0300000080000000262b66696c65bb99"]) r3 = epoll_create(0x4) ioctl$FIONCLEX(r3, 0x5450) [ 2172.859601] loop7: detected capacity change from 0 to 40 [ 2172.876833] loop0: detected capacity change from 0 to 40 22:39:29 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x21000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp, 0x40050, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffd}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x4) r2 = fork() perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xee, 0x9, 0x80, 0x3, 0x0, 0x7101, 0x80a0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5a7, 0x0, @perf_bp={&(0x7f0000000040)}, 0x20, 0xfd1, 0x9c, 0x6, 0x0, 0xffff, 0x5, 0x0, 0x1, 0x0, 0x10001}, r2, 0x6, r0, 0xc) ioctl$FIONCLEX(r1, 0x5450) [ 2172.957250] syz-executor.0: attempt to access beyond end of device [ 2172.957250] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2172.958341] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2172.973983] syz-executor.1: attempt to access beyond end of device [ 2172.973983] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2172.974765] Buffer I/O error on dev loop1, logical block 10, lost async page write 22:39:29 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x3000) 22:39:29 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0xb1110000, 0x0, 0x0}, 0x58) [ 2173.077545] loop7: detected capacity change from 0 to 40 22:39:45 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x3) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:39:45 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x3000) 22:39:45 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 50) 22:39:45 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x40000000, 0x0, 0x0}, 0x58) 22:39:45 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 52) 22:39:45 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0xc5110000, 0x0, 0x0}, 0x58) 22:39:45 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x80000) 22:39:45 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40050}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) ioctl$FIONCLEX(r0, 0x5450) r1 = epoll_create(0x4) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x2000) [ 2188.842379] loop7: detected capacity change from 0 to 40 22:39:45 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x45010000, 0x0, 0x0}, 0x58) [ 2188.910608] loop0: detected capacity change from 0 to 40 [ 2188.922151] loop6: detected capacity change from 0 to 40 [ 2188.931496] loop1: detected capacity change from 0 to 40 [ 2188.993849] syz-executor.0: attempt to access beyond end of device [ 2188.993849] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2188.994954] Buffer I/O error on dev loop0, logical block 10, lost async page write 22:39:45 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0xe4ffffff, 0x0, 0x0}, 0x58) 22:39:45 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x1000000) [ 2189.020878] kworker/u4:4: attempt to access beyond end of device [ 2189.020878] loop7: rw=1, sector=124, nr_sectors = 4 limit=40 [ 2189.022098] Buffer I/O error on dev loop7, logical block 31, lost async page write [ 2189.032486] syz-executor.1: attempt to access beyond end of device [ 2189.032486] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2189.033311] Buffer I/O error on dev loop1, logical block 10, lost async page write 22:39:45 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x3000) 22:39:45 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40050}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x6, 0x34, 0x50, 0x1, 0x0, 0x85, 0x40008, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000000, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x1001, 0x3, 0x7, 0x0, 0x10001, 0x7, 0x8, 0x0, 0x6, 0x0, 0x4}, 0x0, 0x9, r0, 0x2) r1 = epoll_create(0x4) ioctl$FIONCLEX(r1, 0x5450) close(r1) 22:39:46 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x62180000, 0x0, 0x0}, 0x58) 22:39:46 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 51) 22:39:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 53) [ 2189.249122] loop6: detected capacity change from 0 to 40 [ 2189.278645] loop0: detected capacity change from 0 to 40 [ 2189.303768] loop1: detected capacity change from 0 to 40 [ 2189.367416] syz-executor.0: attempt to access beyond end of device [ 2189.367416] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2189.368392] Buffer I/O error on dev loop0, logical block 10, lost async page write 22:40:03 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x420d3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) r1 = epoll_create(0x8001) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x10}) ioctl$FIONCLEX(r0, 0x5450) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000040)={0xc0000000}) 22:40:03 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0xe4ffffff, 0x0, 0x0}, 0x58) 22:40:03 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x2000000) 22:40:03 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x3000) 22:40:03 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0xf2010000, 0x0, 0x0}, 0x58) 22:40:03 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(r0, &(0x7f0000000000)='./file0\x00', 0x28400, 0x30) r1 = epoll_create(0x4) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)) r3 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x1010c2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r4, r3, 0x0, 0xfffffdef) 22:40:03 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 52) 22:40:03 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 54) [ 2206.611253] loop1: detected capacity change from 0 to 40 [ 2206.617255] loop0: detected capacity change from 0 to 40 [ 2206.641448] syz-executor.1: attempt to access beyond end of device [ 2206.641448] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2206.642407] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 2206.671072] syz-executor.0: attempt to access beyond end of device [ 2206.671072] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2206.672210] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2206.672276] loop7: detected capacity change from 0 to 40 22:40:03 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x7, 0x400380) openat(r2, &(0x7f00000001c0)='./file1\x00', 0x0, 0x20) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) 22:40:03 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 55) [ 2206.715127] loop6: detected capacity change from 0 to 40 22:40:03 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 53) 22:40:03 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40050}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) ioctl$FIONCLEX(r0, 0x5450) dup(r0) 22:40:03 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0xff600000, 0x0, 0x0}, 0x58) [ 2206.812597] loop1: detected capacity change from 0 to 40 [ 2206.842234] loop0: detected capacity change from 0 to 40 22:40:03 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0xf4010000, 0x0, 0x0}, 0x58) [ 2206.971649] syz-executor.1: attempt to access beyond end of device [ 2206.971649] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2206.973636] Buffer I/O error on dev loop1, logical block 10, lost async page write 22:40:03 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) truncate(&(0x7f0000000180)='./file1\x00', 0x3000) [ 2206.993193] kworker/u4:8: attempt to access beyond end of device [ 2206.993193] loop7: rw=1, sector=124, nr_sectors = 4 limit=40 [ 2206.994840] Buffer I/O error on dev loop7, logical block 31, lost async page write 22:40:03 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x30000000) [ 2207.127358] loop7: detected capacity change from 0 to 40 [ 2207.162761] loop6: detected capacity change from 0 to 40 22:40:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 56) 22:40:20 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0xffefff1f, 0x0, 0x0}, 0x58) 22:40:20 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b9f63974bceac4800d4a875c5d3548a04000000", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYBLOB="49c01cb448753e0c68358043613d31e1848d241a44c3c559470e8493c5cb005d365e51d26bc69ce10395d2a909b81be630218052cc6171adb45d0ebab4e515a930a99a871020fd9dde6de4874ecd7b1e6b927c761d3833c2ad4d1b9028f1bdb3654468691f132bf8088b6a84be4cc16d38069d57a9313889e37fd94d080d8217570fae217e311c18b2f5933196215f1482b49d8c792ab5fc7a00aebcef19b7c0851bb731a8986365ae2e29a653d93d4a82fb113dee"]) chdir(&(0x7f0000000140)='./file0\x00') epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={[0x10000]}, 0x8) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x8c}}, './file0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f00000026c0)='./file0\x00', 0x4080, 0x62) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r2, &(0x7f0000002580)=[{&(0x7f0000000040)='X', 0x1}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000002300)="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", 0xfe}, {&(0x7f0000002400)="dd92fa5b5d4c6a2dbd519d1aefc1ecfb652fe3e53761d5052160af81bd2fc9172a6cf691e211ce3cfc87d59580930834bf910e7e7ed249d972210563ed7ebfba537a930c7bf9852cd316a68f6bdb99165444f4aee28cd4581a0071e13217832a74ab22d9f2fd3d29193f2403a81077f1b9eb08c338901dd6f1ba45d7604a781a23de46cc77274bb7236e7f73867b8decf65ed9984d7bdc10a4e9c89afcaf2545ef1700444199b24dd7d4acbba174d6508e1cd9d6eab5f2a0955f0054d05ae30a877cd19bbfa305376b9096b3148396d605702428e5a2043dbfce", 0xda}, {&(0x7f0000002500)="a723f4692e4b7e97ca64c60e3406e959aa93f9a3772ab3296db9444cc0ec62c1116e4c17e980edea1f7f118a7d3f5473450dfdcc5e90c6ca85bf0649cb447b29762d863b2d51ad8162daccb8e0158cf847584f288144342f256d65e84221b85f40f3b4f858f3", 0x66}], 0x5, 0x561d, 0x40) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) bind(r2, &(0x7f0000002600)=@ieee802154={0x24, @none={0x0, 0x3}}, 0x80) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r2, r1, 0x0, 0xfff7fdef) 22:40:20 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') truncate(&(0x7f0000000180)='./file1\x00', 0x3000) 22:40:20 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0xf6010000, 0x0, 0x0}, 0x58) 22:40:20 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 54) 22:40:20 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x8cffffff) 22:40:20 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40050}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x4) r2 = epoll_create(0x4) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)) fsmount(r3, 0x0, 0x0) sendfile(r1, r0, &(0x7f0000000100)=0x7, 0x4) readahead(r0, 0xee, 0xd) ioctl$FIONCLEX(r1, 0x5450) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x160) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x9, 0x0, 0x81, 0x3, 0x0, 0x8, 0x80204, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0x3, 0xfae5}, 0x40, 0x0, 0x86, 0x6, 0x9, 0x20002, 0x7, 0x0, 0xb0, 0x0, 0x7ff}, 0xffffffffffffffff, 0x3, r0, 0xa) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1) [ 2224.133794] loop6: detected capacity change from 0 to 40 [ 2224.140439] loop1: detected capacity change from 0 to 40 [ 2224.152092] loop7: detected capacity change from 0 to 40 [ 2224.155345] loop0: detected capacity change from 0 to 40 22:40:21 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0xffff0300, 0x0, 0x0}, 0x58) [ 2224.238280] syz-executor.1: attempt to access beyond end of device [ 2224.238280] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2224.239878] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 2224.269234] syz-executor.0: attempt to access beyond end of device [ 2224.269234] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2224.270770] Buffer I/O error on dev loop0, logical block 10, lost async page write 22:40:21 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') truncate(&(0x7f0000000180)='./file1\x00', 0x3000) 22:40:21 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0xf8010000, 0x0, 0x0}, 0x58) 22:40:21 executing program 5: perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x4, 0x0, 0x40, 0x9e, 0x0, 0x800, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_bp, 0x9110, 0x56bf, 0x2, 0x2, 0x4, 0x1, 0x40, 0x0, 0x800, 0x0, 0x6}, 0x0, 0x7, r1, 0x2) r2 = epoll_create(0x4) ioctl$FIONCLEX(r2, 0x5450) 22:40:21 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0xf6ffffff) 22:40:21 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 57) 22:40:21 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) move_mount(r1, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x70) r2 = epoll_create(0x4) listxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)=""/147, 0x93) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)) r4 = epoll_create(0x4) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) getpeername(r3, &(0x7f0000000240)=@rc={0x1f, @none}, &(0x7f00000000c0)=0x80) 22:40:21 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000180)='./file1\x00', 0x101) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 55) [ 2224.433967] loop6: detected capacity change from 0 to 40 [ 2224.481799] loop7: detected capacity change from 0 to 40 22:40:21 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0xffff1f00, 0x0, 0x0}, 0x58) [ 2224.497861] loop1: detected capacity change from 0 to 40 22:40:21 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0xfa010000, 0x0, 0x0}, 0x58) [ 2224.598103] loop0: detected capacity change from 0 to 40 [ 2224.608219] syz-executor.1: attempt to access beyond end of device [ 2224.608219] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2224.611079] Buffer I/O error on dev loop1, logical block 10, lost async page write 22:40:21 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40050}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x4) ioctl$FIONCLEX(r1, 0x5450) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x20, 0x1f, 0x1, 0x9, 0x0, 0x0, 0x80000, 0xa, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_bp, 0x2123, 0x9, 0xb42, 0x8, 0xffffffffffffffe1, 0x3, 0x9, 0x0, 0x3, 0x0, 0xfffffffffffffff7}, 0x0, 0xc, r0, 0x2) 22:40:21 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') truncate(&(0x7f0000000180)='./file1\x00', 0x3000) [ 2224.818819] syz-executor.0: attempt to access beyond end of device [ 2224.818819] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2224.821303] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2224.966028] loop6: detected capacity change from 0 to 40 [ 2225.752487] ================================================================== [ 2225.752990] BUG: KASAN: use-after-free in __lock_acquire+0x42c9/0x5e70 [ 2225.753400] Read of size 8 at addr ffff88800d1ad278 by task syz-executor/9564 [ 2225.753881] [ 2225.754002] CPU: 1 PID: 9564 Comm: syz-executor Not tainted 6.1.0-rc3-next-20221104 #1 [ 2225.754523] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2225.755058] Call Trace: [ 2225.755233] [ 2225.755394] dump_stack_lvl+0x8b/0xb3 [ 2225.755673] print_report+0x175/0x478 [ 2225.755945] ? __lock_acquire+0x42c9/0x5e70 [ 2225.756240] kasan_report+0xbb/0x1c0 [ 2225.756506] ? __lock_acquire+0x42c9/0x5e70 [ 2225.756808] __lock_acquire+0x42c9/0x5e70 [ 2225.757097] ? __pfx_mark_lock.part.0+0x10/0x10 [ 2225.757415] ? finish_task_switch.isra.0+0x22d/0x8a0 [ 2225.757756] ? __pfx___lock_acquire+0x10/0x10 [ 2225.758060] ? __switch_to+0x5bf/0xf20 [ 2225.758341] lock_acquire+0x1a2/0x530 [ 2225.758601] ? kmemleak_scan+0x1a0/0x1600 [ 2225.758893] ? __pfx_lock_acquire+0x10/0x10 [ 2225.759189] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2225.759520] ? trace_rcu_dyntick+0x1a7/0x250 [ 2225.759830] ? ct_nmi_exit+0x119/0x1c0 [ 2225.760109] _raw_spin_lock_irq+0x32/0x50 [ 2225.760393] ? kmemleak_scan+0x1a0/0x1600 [ 2225.760681] kmemleak_scan+0x1a0/0x1600 [ 2225.760962] ? __pfx_kmemleak_scan+0x10/0x10 [ 2225.761272] ? strncpy_from_user+0x204/0x3e0 [ 2225.761579] kmemleak_write+0x570/0x680 [ 2225.761866] ? __pfx_kmemleak_write+0x10/0x10 [ 2225.762183] ? debugfs_file_get+0x1ce/0x450 [ 2225.762486] ? __pfx_debugfs_file_get+0x10/0x10 [ 2225.762814] full_proxy_write+0x11d/0x190 [ 2225.764352] vfs_write+0x2cb/0xd90 [ 2225.766108] ? __pfx_full_proxy_write+0x10/0x10 [ 2225.767219] ? __pfx_vfs_write+0x10/0x10 [ 2225.767502] ? lock_release+0x3b2/0x750 [ 2225.767784] ? syscall_enter_from_user_mode+0x18/0x50 [ 2225.768134] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2225.768499] ? __fget_light+0x212/0x280 [ 2225.768785] ksys_write+0x127/0x250 [ 2225.769043] ? __pfx_ksys_write+0x10/0x10 [ 2225.769326] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2225.769679] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2225.770032] do_syscall_64+0x3b/0x90 [ 2225.770285] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2225.770640] RIP: 0033:0x7ff257d855c3 [ 2225.770897] Code: 16 00 00 00 eb ae 90 b8 6e 00 00 00 eb a6 e8 44 ef 04 00 0f 1f 40 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 55 c3 0f 1f 40 00 48 83 ec 28 48 89 54 24 18 [ 2225.772087] RSP: 002b:00007fff3ccdf728 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2225.772582] RAX: ffffffffffffffda RBX: 00007fff3ccdfd68 RCX: 00007ff257d855c3 [ 2225.773156] RDX: 0000000000000004 RSI: 00007ff257e3bed9 RDI: 0000000000000003 [ 2225.773752] RBP: 0000000000000002 R08: 00000000000008b1 R09: 00007fff3cdcf080 [ 2225.774354] R10: 00007fff3cdcf090 R11: 0000000000000246 R12: 00000000fffffff6 [ 2225.774954] R13: 00007fff3cce0ef1 R14: 0000000000000000 R15: 000000000021f495 [ 2225.775563] [ 2225.775779] [ 2225.775934] Allocated by task 9515: [ 2225.776244] kasan_save_stack+0x1e/0x40 [ 2225.776604] kasan_set_track+0x21/0x30 [ 2225.776960] __kasan_slab_alloc+0x58/0x70 [ 2225.777328] kmem_cache_alloc+0x1a9/0x3e0 [ 2225.777691] __create_object+0x3d/0xc00 [ 2225.778049] __kmem_cache_alloc_node+0x22f/0x3d0 [ 2225.778463] __kmalloc_node_track_caller+0x3d/0xb0 [ 2225.778905] kmemdup+0x28/0x60 [ 2225.779200] shmem_symlink+0x180/0x690 [ 2225.779543] vfs_symlink+0x364/0x5b0 [ 2225.779902] do_symlinkat+0x12f/0x270 [ 2225.780233] __x64_sys_symlink+0x75/0x90 [ 2225.780583] do_syscall_64+0x3b/0x90 [ 2225.780860] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2225.781186] [ 2225.781297] Freed by task 13: [ 2225.781491] kasan_save_stack+0x1e/0x40 [ 2225.781746] kasan_set_track+0x21/0x30 [ 2225.781998] kasan_save_free_info+0x2a/0x50 [ 2225.782269] __kasan_slab_free+0x106/0x190 [ 2225.782538] kmem_cache_free+0xf7/0x610 [ 2225.782791] rcu_core+0x7e2/0x2080 [ 2225.783023] __do_softirq+0x1c3/0x8f5 [ 2225.783265] [ 2225.783375] Last potentially related work creation: [ 2225.783680] kasan_save_stack+0x1e/0x40 [ 2225.783936] __kasan_record_aux_stack+0x95/0xb0 [ 2225.784227] __call_rcu_common.constprop.0+0x6a/0xa40 [ 2225.784546] __kmem_cache_free+0x91/0x400 [ 2225.784813] shmem_free_in_core_inode+0x8b/0xa0 [ 2225.785103] i_callback+0x42/0x70 [ 2225.785332] rcu_core+0x7e2/0x2080 [ 2225.785561] __do_softirq+0x1c3/0x8f5 [ 2225.785802] [ 2225.785911] Second to last potentially related work creation: [ 2225.786261] kasan_save_stack+0x1e/0x40 [ 2225.786514] __kasan_record_aux_stack+0x95/0xb0 [ 2225.786804] __call_rcu_common.constprop.0+0x6a/0xa40 [ 2225.787124] __kmem_cache_free+0x91/0x400 [ 2225.787386] skb_release_data+0x6d8/0x810 [ 2225.787658] kfree_skb_reason+0x136/0x3e0 [ 2225.787925] ieee80211_iface_work+0x34f/0xc80 [ 2225.788209] process_one_work+0xa17/0x16a0 [ 2225.788474] worker_thread+0x637/0x1260 [ 2225.788724] kthread+0x2ed/0x3a0 [ 2225.788950] ret_from_fork+0x2c/0x50 [ 2225.789191] [ 2225.789304] The buggy address belongs to the object at ffff88800d1ad260 [ 2225.789304] which belongs to the cache kmemleak_object of size 240 [ 2225.790070] The buggy address is located 24 bytes inside of [ 2225.790070] 240-byte region [ffff88800d1ad260, ffff88800d1ad350) [ 2225.790772] [ 2225.790899] The buggy address belongs to the physical page: [ 2225.791302] page:0000000067a3c1e8 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xd1ad [ 2225.791965] flags: 0x100000000000200(slab|node=0|zone=1) [ 2225.792356] raw: 0100000000000200 ffff88800804f780 dead000000000100 dead000000000122 [ 2225.792907] raw: 0000000000000000 00000000000d000d 00000001ffffffff 0000000000000000 [ 2225.793447] page dumped because: kasan: bad access detected [ 2225.793850] [ 2225.793977] Memory state around the buggy address: [ 2225.794326] ffff88800d1ad100: fc fc fc fc fc fc 00 00 00 00 00 00 00 00 00 00 [ 2225.794836] ffff88800d1ad180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2225.795288] >ffff88800d1ad200: 00 00 00 00 fc fc fc fc fc fc fc fc fa fb fb fb [ 2225.795726] ^ [ 2225.796155] ffff88800d1ad280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2225.796593] ffff88800d1ad300: fb fb fb fb fb fb fb fb fb fb fc fc fc fc fc fc [ 2225.797037] ================================================================== [ 2225.797466] Disabling lock debugging due to kernel taint VM DIAGNOSIS: 22:40:22 Registers: info registers vcpu 0 RAX=0000000080000001 RBX=0000000000000001 RCX=1ffffffff0ef36e0 RDX=0000000000000000 RSI=ffffffff817b618f RDI=0000000000000001 RBP=ffff88801662f7d8 RSP=ffff88801662f6e8 R8 =ffffffff85ef6dfa R9 =ffffffff85ef6dfe R10=ffffed1002cc5efd R11=ffff88801662f7c0 R12=ffff88801662f848 R13=0000000000000000 R14=ffff88801662f780 R15=ffff88801f649130 RIP=ffffffff81218a3a RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fdc6dd8f8c0 00000000 00000000 GS =0000 ffff88806d000000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe2a4558e000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe2a4558c000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000560bd4d67f70 CR3=0000000018e7e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=ff0000000000ff00000000ff000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=ffffffffffff00000000000000000000 XMM06=00000000000065616124242f6867632f XMM07=00000000000000000000000000000000 XMM08=2064616572206f742064656c69614600 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000000005d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff824509c1 RDI=ffffffff87ba19a0 RBP=ffffffff87ba1960 RSP=ffff88804275f248 R8 =0000000000000001 R9 =000000000000000a R10=000000000000005d R11=0000000000000001 R12=000000000000005d R13=ffffffff87ba1960 R14=0000000000000010 R15=ffffffff824509b0 RIP=ffffffff82450a19 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555556977400 00000000 00000000 GS =0000 ffff88806d100000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe6bd8ffc000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe6bd8ffa000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fdc6e1e1330 CR3=00000000154e2000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff000000000000ff00000000000000 XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=000000353d524f4e494d00373d524f4a XMM05=3d5145534b534944006b7369643d4550 XMM06=3d454d414e56454400303d444955555f XMM07=59534255530035706f6f6c2f6b636f6c XMM08=49006d756e203c2069000a313a56000a XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000