01042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:16:57 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:16:57 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x0, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:16:57 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040)}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) [ 2515.228756] loop0: detected capacity change from 0 to 40 06:16:57 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:16:57 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) 06:16:57 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, 0x0, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:16:57 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, 0xffffffffffffffff, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2515.257646] loop2: detected capacity change from 0 to 40 [ 2515.303569] syz-executor.5: attempt to access beyond end of device [ 2515.303569] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2515.304661] buffer_io_error: 87 callbacks suppressed [ 2515.304671] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 2515.306513] loop4: detected capacity change from 0 to 40 [ 2515.308133] syz-executor.0: attempt to access beyond end of device [ 2515.308133] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2515.309035] loop1: detected capacity change from 0 to 40 [ 2515.309658] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2515.310155] loop7: detected capacity change from 0 to 40 [ 2515.315849] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2515.316654] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2515.317147] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2515.317632] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 2515.318149] blk_print_req_error: 38 callbacks suppressed [ 2515.318158] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 5 prio class 2 [ 2515.319775] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2515.320156] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2515.320756] Buffer I/O error on dev sr0, logical block 0, async page read [ 2515.322562] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2515.322945] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2515.323555] Buffer I/O error on dev sr0, logical block 1, async page read [ 2515.324518] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2515.324915] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2515.325519] Buffer I/O error on dev sr0, logical block 2, async page read [ 2515.326243] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2515.326732] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2515.327425] Buffer I/O error on dev sr0, logical block 3, async page read [ 2515.328205] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2515.328625] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2515.329309] Buffer I/O error on dev sr0, logical block 4, async page read [ 2515.330163] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2515.330602] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2515.331189] Buffer I/O error on dev sr0, logical block 5, async page read [ 2515.331976] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2515.332389] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2515.332988] Buffer I/O error on dev sr0, logical block 6, async page read [ 2515.333765] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2515.334154] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2515.334771] Buffer I/O error on dev sr0, logical block 7, async page read [ 2515.335678] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2515.336069] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2515.337238] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2515.337898] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2515.338559] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2515.339156] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2515.339846] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2515.343079] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2515.343984] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2515.348459] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2515.380385] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2515.390314] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 06:16:57 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) r1 = openat(r0, 0x0, 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2515.400932] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2515.404818] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2515.410150] loop5: detected capacity change from 0 to 40 [ 2515.410980] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2515.413045] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2515.416644] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2515.469970] syz-executor.2: attempt to access beyond end of device [ 2515.469970] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2515.506617] syz-executor.5: attempt to access beyond end of device [ 2515.506617] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 06:16:58 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040)}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) [ 2515.524673] syz-executor.7: attempt to access beyond end of device [ 2515.524673] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2515.530997] syz-executor.1: attempt to access beyond end of device [ 2515.530997] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 06:16:58 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x0, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:16:58 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x0, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2515.596565] syz-executor.4: attempt to access beyond end of device [ 2515.596565] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2515.639676] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2515.640330] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2515.640795] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2515.641243] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 2515.643597] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2515.648920] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2515.650182] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2515.651882] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2515.653133] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2515.654623] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2515.655842] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2515.657113] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2515.659756] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2515.661031] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2515.662362] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2515.663626] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2515.664856] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2515.666179] loop0: detected capacity change from 0 to 40 [ 2515.670800] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2515.672553] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 06:16:58 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2515.673967] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 06:16:58 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:16:58 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x0, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2515.739784] loop2: detected capacity change from 0 to 40 [ 2515.788682] loop7: detected capacity change from 0 to 40 [ 2515.790933] loop1: detected capacity change from 0 to 40 06:16:58 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:16:58 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) [ 2515.853996] syz-executor.0: attempt to access beyond end of device [ 2515.853996] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2515.923465] syz-executor.7: attempt to access beyond end of device [ 2515.923465] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2515.924739] syz-executor.1: attempt to access beyond end of device [ 2515.924739] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2515.985227] loop4: detected capacity change from 0 to 40 [ 2516.146723] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2516.147373] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2516.147802] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2516.148219] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 2516.153832] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2516.166814] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2516.171680] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2516.179807] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2516.182666] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2516.185895] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2516.190715] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2516.191976] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2516.193626] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2516.215294] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2516.217523] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2516.219090] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2516.221059] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2516.228543] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2516.712575] syz-executor.5 (10417) used greatest stack depth: 22512 bytes left [ 2531.910045] loop0: detected capacity change from 0 to 40 [ 2531.921214] loop5: detected capacity change from 0 to 40 [ 2531.922414] loop1: detected capacity change from 0 to 40 06:17:14 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:17:14 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:17:14 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x0, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:17:14 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x0, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) 06:17:14 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x0, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:17:14 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:17:14 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x0, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:17:14 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2531.935993] loop2: detected capacity change from 0 to 40 [ 2531.999687] loop7: detected capacity change from 0 to 40 [ 2532.038224] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2532.039494] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2532.040396] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2532.041207] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 2532.042140] blk_print_req_error: 47 callbacks suppressed [ 2532.042158] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 2532.054604] bio_check_eod: 2 callbacks suppressed [ 2532.054619] syz-executor.1: attempt to access beyond end of device [ 2532.054619] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2532.055944] buffer_io_error: 58 callbacks suppressed [ 2532.055955] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 2532.074873] syz-executor.5: attempt to access beyond end of device [ 2532.074873] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2532.075821] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 2532.092902] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2532.094080] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2532.094943] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2532.095770] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 2532.096692] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 8 prio class 2 [ 2532.097732] Buffer I/O error on dev sr0, logical block 0, async page read [ 2532.098606] Buffer I/O error on dev sr0, logical block 1, async page read [ 2532.099464] Buffer I/O error on dev sr0, logical block 2, async page read [ 2532.100321] Buffer I/O error on dev sr0, logical block 3, async page read [ 2532.101169] Buffer I/O error on dev sr0, logical block 4, async page read [ 2532.102036] Buffer I/O error on dev sr0, logical block 5, async page read [ 2532.102904] Buffer I/O error on dev sr0, logical block 6, async page read [ 2532.103766] Buffer I/O error on dev sr0, logical block 7, async page read [ 2532.134557] syz-executor.0: attempt to access beyond end of device [ 2532.134557] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2532.138987] syz-executor.2: attempt to access beyond end of device [ 2532.138987] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2532.159042] syz-executor.7: attempt to access beyond end of device [ 2532.159042] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 06:17:14 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:17:14 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x0, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) 06:17:14 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2532.247088] loop1: detected capacity change from 0 to 40 06:17:14 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x0, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:17:14 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x0, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:17:14 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2532.306030] syz-executor.1: attempt to access beyond end of device [ 2532.306030] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 06:17:14 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2532.383783] loop2: detected capacity change from 0 to 40 [ 2532.406144] loop5: detected capacity change from 0 to 40 06:17:15 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2532.444069] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2532.445330] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2532.446232] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2532.447144] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 2532.448122] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 2532.450005] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2532.450741] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2532.452130] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2532.452885] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2532.453247] loop7: detected capacity change from 0 to 40 [ 2532.454709] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2532.454749] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2532.456681] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2532.457481] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2532.466761] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2532.467409] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2532.477795] loop1: detected capacity change from 0 to 40 [ 2532.498171] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2532.498929] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2532.500011] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2532.500953] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 2532.502754] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2532.503980] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2532.505220] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2532.506783] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2532.508164] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2532.509580] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2532.510804] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2532.512030] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2532.558759] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2532.560063] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2532.560947] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2532.562023] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 2532.586211] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2532.591584] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2532.600651] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2532.606244] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2532.607114] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2532.614746] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2532.622925] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2532.626126] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2532.638957] syz-executor.2: attempt to access beyond end of device [ 2532.638957] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2532.645175] syz-executor.7: attempt to access beyond end of device [ 2532.645175] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 06:17:15 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) [ 2532.685531] syz-executor.1: attempt to access beyond end of device [ 2532.685531] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 06:17:15 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0x0) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2532.758555] syz-executor.5: attempt to access beyond end of device [ 2532.758555] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 06:17:15 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) 06:17:15 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:17:15 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) r1 = openat(r0, 0x0, 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2532.866934] loop4: detected capacity change from 0 to 40 [ 2532.899231] loop1: detected capacity change from 0 to 40 [ 2532.912110] loop2: detected capacity change from 0 to 40 [ 2532.914063] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2532.914216] loop7: detected capacity change from 0 to 40 [ 2532.915333] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2532.916821] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2532.917741] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 2532.920575] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2532.921472] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2532.922778] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2532.924011] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2532.925168] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2532.928641] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2532.931951] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2532.934633] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2532.937141] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2532.941760] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2532.950313] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2532.951298] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2532.952170] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2532.953111] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2532.954499] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2532.957004] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2532.959624] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2532.966982] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2532.970717] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2532.972588] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2532.973534] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2532.979701] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2532.980947] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2532.982982] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2532.984037] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2532.985851] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2532.990576] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2532.992178] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2532.998141] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2533.000964] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2533.003250] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2533.011729] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 06:17:31 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:17:31 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:17:31 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, 0x0, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) 06:17:31 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:17:31 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:17:31 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:17:31 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) 06:17:31 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0x0) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2549.056114] loop5: detected capacity change from 0 to 40 [ 2549.060030] loop0: detected capacity change from 0 to 40 [ 2549.080585] loop7: detected capacity change from 0 to 40 [ 2549.087167] loop1: detected capacity change from 0 to 40 [ 2549.089079] loop2: detected capacity change from 0 to 40 [ 2549.149353] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2549.150670] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2549.151594] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2549.152498] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 2549.153573] blk_print_req_error: 50 callbacks suppressed [ 2549.153593] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 16 prio class 2 [ 2549.163459] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2549.164381] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2549.165560] buffer_io_error: 76 callbacks suppressed [ 2549.165578] Buffer I/O error on dev sr0, logical block 0, async page read [ 2549.167494] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2549.168534] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 7 prio class 2 [ 2549.169748] Buffer I/O error on dev sr0, logical block 1, async page read [ 2549.170714] Buffer I/O error on dev sr0, logical block 2, async page read [ 2549.171711] Buffer I/O error on dev sr0, logical block 3, async page read [ 2549.172676] Buffer I/O error on dev sr0, logical block 4, async page read [ 2549.173679] Buffer I/O error on dev sr0, logical block 5, async page read [ 2549.174654] Buffer I/O error on dev sr0, logical block 6, async page read [ 2549.175623] Buffer I/O error on dev sr0, logical block 7, async page read [ 2549.242923] bio_check_eod: 4 callbacks suppressed [ 2549.242948] syz-executor.7: attempt to access beyond end of device [ 2549.242948] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2549.245512] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 2549.310217] syz-executor.0: attempt to access beyond end of device [ 2549.310217] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2549.312253] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2549.336883] syz-executor.1: attempt to access beyond end of device [ 2549.336883] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2549.348229] syz-executor.5: attempt to access beyond end of device [ 2549.348229] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2549.352083] syz-executor.2: attempt to access beyond end of device [ 2549.352083] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 06:17:32 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:17:32 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x0, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:17:32 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:17:32 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2549.507601] loop0: detected capacity change from 0 to 40 06:17:32 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) r1 = openat(r0, 0x0, 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2549.644883] syz-executor.0: attempt to access beyond end of device [ 2549.644883] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2549.673726] loop7: detected capacity change from 0 to 40 [ 2549.737191] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2549.738715] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2549.739890] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2549.741167] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 2549.742408] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 31 prio class 2 [ 2549.753087] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2549.754068] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2549.755543] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2549.756464] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 7 prio class 2 [ 2549.758592] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2549.759384] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2549.760872] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2549.761841] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2549.763900] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2549.764684] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2549.766256] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2549.767053] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2549.768608] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2549.769890] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2549.771147] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2549.772622] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2549.773933] syz-executor.7: attempt to access beyond end of device [ 2549.773933] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2549.822348] loop2: detected capacity change from 0 to 40 [ 2549.929027] syz-executor.2: attempt to access beyond end of device [ 2549.929027] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 06:17:51 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:17:51 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xa015000) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:17:51 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:17:51 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:17:51 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x0, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) 06:17:51 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:17:51 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:17:51 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0x0) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2569.123815] loop2: detected capacity change from 0 to 40 [ 2569.128778] loop4: detected capacity change from 0 to 40 [ 2569.129022] loop7: detected capacity change from 0 to 40 [ 2569.132128] loop1: detected capacity change from 0 to 40 [ 2569.177379] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2569.178657] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2569.179637] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2569.180531] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 2569.181519] blk_print_req_error: 4 callbacks suppressed [ 2569.181538] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 17 prio class 2 [ 2569.191063] loop5: detected capacity change from 0 to 40 [ 2569.197138] syz-executor.4: attempt to access beyond end of device [ 2569.197138] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2569.198390] buffer_io_error: 22 callbacks suppressed [ 2569.198400] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 2569.217504] syz-executor.2: attempt to access beyond end of device [ 2569.217504] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2569.218509] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2569.226939] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2569.227818] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2569.228446] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2569.229029] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 2569.229726] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 8 prio class 2 [ 2569.230455] Buffer I/O error on dev sr0, logical block 0, async page read [ 2569.231058] Buffer I/O error on dev sr0, logical block 1, async page read [ 2569.231676] Buffer I/O error on dev sr0, logical block 2, async page read [ 2569.232290] Buffer I/O error on dev sr0, logical block 3, async page read [ 2569.232890] Buffer I/O error on dev sr0, logical block 4, async page read [ 2569.233501] Buffer I/O error on dev sr0, logical block 5, async page read [ 2569.234113] Buffer I/O error on dev sr0, logical block 6, async page read [ 2569.234729] Buffer I/O error on dev sr0, logical block 7, async page read 06:17:51 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:17:51 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) [ 2569.328100] syz-executor.7: attempt to access beyond end of device [ 2569.328100] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2569.329911] syz-executor.1: attempt to access beyond end of device [ 2569.329911] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 06:17:51 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2569.362058] syz-executor.5: attempt to access beyond end of device [ 2569.362058] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 06:17:52 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xa015000) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:17:52 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x0, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2569.430906] loop2: detected capacity change from 0 to 40 [ 2569.452722] loop4: detected capacity change from 0 to 40 [ 2569.454766] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2569.455712] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2569.456414] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2569.457036] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 2569.457942] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 31 prio class 2 06:17:52 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2569.485856] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2569.486583] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2569.487699] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2569.488391] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2569.489321] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2569.489883] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 6 prio class 2 [ 2569.491184] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2569.492085] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2569.492771] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2569.493142] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2569.493860] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2569.494233] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2569.495217] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2569.495620] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2569.496931] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2569.497486] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2569.497969] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2569.498495] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2569.499075] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2569.499606] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2569.500124] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2569.500643] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2569.501152] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2569.501743] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2569.502235] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2569.502767] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2569.503427] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2569.509713] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2569.512283] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2569.512795] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2569.513771] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2569.522141] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2569.526897] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2569.530793] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2569.533476] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2569.535426] loop1: detected capacity change from 0 to 40 [ 2569.537544] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2569.541086] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2569.545776] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2569.547845] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2569.552610] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2569.560192] syz-executor.2: attempt to access beyond end of device [ 2569.560192] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2569.573926] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 06:17:52 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(0x0, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) [ 2569.612667] loop7: detected capacity change from 0 to 40 06:17:52 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) [ 2569.663516] syz-executor.4: attempt to access beyond end of device [ 2569.663516] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2569.723113] syz-executor.1: attempt to access beyond end of device [ 2569.723113] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2569.746810] syz-executor.7: attempt to access beyond end of device [ 2569.746810] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2569.785092] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2569.786495] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2569.787493] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2569.788411] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 2569.791596] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2569.792443] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2569.794938] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2569.796102] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2569.797235] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2569.798562] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2569.799661] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2569.803596] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2569.804673] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2569.826028] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2583.194107] loop7: detected capacity change from 0 to 40 [ 2583.209923] loop5: detected capacity change from 0 to 40 06:18:05 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, 0x0, 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:18:05 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x0, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:18:05 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:18:05 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:18:05 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:18:05 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x0, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) 06:18:05 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:18:05 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, 0x0, 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2583.224405] loop2: detected capacity change from 0 to 40 [ 2583.297584] loop1: detected capacity change from 0 to 40 [ 2583.310703] syz-executor.7: attempt to access beyond end of device [ 2583.310703] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2583.311771] buffer_io_error: 63 callbacks suppressed [ 2583.311781] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 2583.329070] syz-executor.5: attempt to access beyond end of device [ 2583.329070] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2583.330037] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 2583.345196] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2583.346439] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2583.347347] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2583.348157] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 2583.349102] blk_print_req_error: 38 callbacks suppressed [ 2583.349120] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 2583.351618] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2583.352008] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2583.352597] Buffer I/O error on dev sr0, logical block 0, async page read [ 2583.353467] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2583.353842] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2583.354427] Buffer I/O error on dev sr0, logical block 1, async page read [ 2583.355184] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2583.355805] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2583.356438] Buffer I/O error on dev sr0, logical block 2, async page read [ 2583.358375] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2583.359367] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2583.360661] Buffer I/O error on dev sr0, logical block 3, async page read [ 2583.362342] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2583.363313] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2583.364609] Buffer I/O error on dev sr0, logical block 4, async page read [ 2583.366223] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2583.367005] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2583.368049] Buffer I/O error on dev sr0, logical block 5, async page read [ 2583.369334] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2583.370090] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2583.371174] Buffer I/O error on dev sr0, logical block 6, async page read [ 2583.373885] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2583.374658] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2583.374859] syz-executor.2: attempt to access beyond end of device [ 2583.374859] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2583.375675] Buffer I/O error on dev sr0, logical block 7, async page read [ 2583.376252] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2583.378829] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2583.380307] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2583.381793] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2583.410676] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2583.431105] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2583.432474] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2583.433562] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2583.434545] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 01 00 00 01 00 [ 2583.438022] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2583.453729] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2583.455245] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2583.456901] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2583.459663] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2583.462545] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2583.515155] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2583.516731] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 06:18:06 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, 0x0, 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:18:06 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2583.591488] syz-executor.1: attempt to access beyond end of device [ 2583.591488] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 06:18:06 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:18:06 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) 06:18:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x0, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2583.744317] loop5: detected capacity change from 0 to 40 [ 2583.929550] loop2: detected capacity change from 0 to 40 06:18:06 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xa015000) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2584.026031] loop1: detected capacity change from 0 to 40 [ 2584.259659] loop4: detected capacity change from 0 to 40 06:18:06 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2584.301715] syz-executor.2: attempt to access beyond end of device [ 2584.301715] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 06:18:06 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:18:06 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, 0x0, 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) [ 2584.359152] syz-executor.1: attempt to access beyond end of device [ 2584.359152] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 06:18:07 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x0, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2584.566200] loop0: detected capacity change from 0 to 40 [ 2584.607977] syz-executor.4: attempt to access beyond end of device [ 2584.607977] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2584.649331] loop7: detected capacity change from 0 to 40 [ 2584.761980] syz-executor.0: attempt to access beyond end of device [ 2584.761980] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2584.780745] syz-executor.7: attempt to access beyond end of device [ 2584.780745] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 06:18:23 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:18:23 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:18:23 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:18:23 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x0, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:18:23 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:18:23 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) 06:18:23 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:18:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x0, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2601.079880] loop2: detected capacity change from 0 to 40 [ 2601.087372] loop0: detected capacity change from 0 to 40 [ 2601.089302] loop5: detected capacity change from 0 to 40 [ 2601.155852] loop4: detected capacity change from 0 to 40 [ 2601.158239] loop7: detected capacity change from 0 to 40 [ 2601.159889] loop1: detected capacity change from 0 to 40 [ 2601.290635] syz-executor.0: attempt to access beyond end of device [ 2601.290635] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2601.292495] buffer_io_error: 23 callbacks suppressed [ 2601.292512] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 2601.313983] syz-executor.2: attempt to access beyond end of device [ 2601.313983] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2601.315714] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2601.445803] syz-executor.1: attempt to access beyond end of device [ 2601.445803] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2601.447694] Buffer I/O error on dev loop1, logical block 10, lost async page write 06:18:24 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) [ 2601.493068] syz-executor.7: attempt to access beyond end of device [ 2601.493068] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2601.494925] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 2601.499700] syz-executor.4: attempt to access beyond end of device [ 2601.499700] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2601.501840] Buffer I/O error on dev loop4, logical block 10, lost async page write 06:18:24 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x0, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) 06:18:24 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() tgkill(0x0, r0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r1, 0xd, 0xffffffffffffffff, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r2, 0x0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r0, 0x5, &(0x7f0000000000)=0x3) 06:18:24 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x0, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2601.686730] loop1: detected capacity change from 0 to 40 [ 2601.800532] loop2: detected capacity change from 0 to 40 06:18:24 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x0, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:18:24 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x0, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2601.865572] syz-executor.1: attempt to access beyond end of device [ 2601.865572] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2601.867538] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 2601.916960] loop7: detected capacity change from 0 to 40 06:18:24 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() tgkill(0x0, r0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r1, 0xd, 0xffffffffffffffff, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r2, 0x0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r0, 0x5, &(0x7f0000000000)=0x3) [ 2602.030556] syz-executor.7: attempt to access beyond end of device [ 2602.030556] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2602.032218] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 2602.081990] loop4: detected capacity change from 0 to 40 [ 2602.142111] syz-executor.2: attempt to access beyond end of device [ 2602.142111] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2602.144500] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2602.236512] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2602.238158] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2602.239078] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2602.239921] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 2602.240873] blk_print_req_error: 12 callbacks suppressed [ 2602.240891] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 31 prio class 2 [ 2602.244544] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2602.246021] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2602.247089] Buffer I/O error on dev sr0, logical block 0, async page read [ 2602.249055] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2602.250756] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2602.251845] Buffer I/O error on dev sr0, logical block 1, async page read [ 2602.252849] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2602.253615] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 6 prio class 2 [ 2602.256887] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2602.257773] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2602.260062] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2602.260810] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2602.262326] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2602.263036] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2602.264988] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2602.265803] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2602.267601] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2602.268389] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2602.273673] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2602.274482] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2602.275932] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2602.277718] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2602.279073] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2602.283174] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2602.286289] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2602.290143] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2602.295864] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2602.297078] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2602.299567] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2602.300819] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2602.303760] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2602.306187] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2602.307623] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2602.309062] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2602.310964] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2602.313355] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2602.318030] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2602.319878] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2602.346085] syz-executor.4: attempt to access beyond end of device [ 2602.346085] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2615.770369] loop2: detected capacity change from 0 to 40 06:18:38 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, 0x0, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r2, 0x0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:18:38 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, 0x0, 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) 06:18:38 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:18:38 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:18:38 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x0, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) 06:18:38 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:18:38 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, 0x0, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r2, 0x0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:18:38 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2615.807405] loop7: detected capacity change from 0 to 40 [ 2615.827201] loop0: detected capacity change from 0 to 40 [ 2615.865196] syz-executor.2: attempt to access beyond end of device [ 2615.865196] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2615.866075] buffer_io_error: 31 callbacks suppressed [ 2615.866085] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2615.871860] loop1: detected capacity change from 0 to 40 [ 2615.878743] syz-executor.7: attempt to access beyond end of device [ 2615.878743] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2615.879741] Buffer I/O error on dev loop7, logical block 10, lost async page write 06:18:38 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:18:38 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2615.997107] syz-executor.0: attempt to access beyond end of device [ 2615.997107] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2615.998396] Buffer I/O error on dev loop0, logical block 10, lost async page write 06:18:38 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, 0x0, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r2, 0x0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:18:38 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) [ 2616.085920] syz-executor.1: attempt to access beyond end of device [ 2616.085920] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2616.087053] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 2616.099405] loop2: detected capacity change from 0 to 40 [ 2616.108313] loop7: detected capacity change from 0 to 40 [ 2616.124202] FAT-fs (loop2): bogus number of FAT sectors [ 2616.124598] FAT-fs (loop2): Can't find a valid FAT filesystem 06:18:38 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:18:38 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, 0x0, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r2, 0x0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:18:38 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x0, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2616.206044] loop5: detected capacity change from 0 to 40 [ 2616.228295] FAT-fs (loop5): invalid media value (0x00) [ 2616.229025] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2616.267048] syz-executor.7: attempt to access beyond end of device [ 2616.267048] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2616.268377] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 2616.362411] loop1: detected capacity change from 0 to 40 [ 2616.418676] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2616.420106] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2616.421104] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2616.422062] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 2616.423253] blk_print_req_error: 18 callbacks suppressed [ 2616.424046] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 2616.426236] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2616.427392] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2616.428537] Buffer I/O error on dev sr0, logical block 0, async page read [ 2616.429615] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2616.430626] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 5 prio class 2 [ 2616.431739] Buffer I/O error on dev sr0, logical block 1, async page read [ 2616.432770] Buffer I/O error on dev sr0, logical block 2, async page read [ 2616.433732] Buffer I/O error on dev sr0, logical block 3, async page read [ 2616.434709] Buffer I/O error on dev sr0, logical block 4, async page read [ 2616.435817] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2616.436745] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 2616.440515] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2616.440919] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2616.443030] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2616.443465] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2616.444460] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2616.444853] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2616.449358] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2616.449735] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2616.450544] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2616.450917] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2616.481991] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2616.482466] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2616.498888] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2616.499983] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2616.556176] syz-executor.1: attempt to access beyond end of device [ 2616.556176] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 06:18:53 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:18:53 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:18:53 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:18:53 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:18:53 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, 0x0, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r2, 0x0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:18:53 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x0, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) 06:18:53 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, 0x0, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r2, 0x0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:18:53 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, 0x0, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r2, 0x0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) [ 2631.262753] loop2: detected capacity change from 0 to 40 [ 2631.265718] loop1: detected capacity change from 0 to 40 [ 2631.307598] syz-executor.2: attempt to access beyond end of device [ 2631.307598] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2631.308667] buffer_io_error: 12 callbacks suppressed [ 2631.308677] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 2631.321225] loop7: detected capacity change from 0 to 40 06:18:54 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:18:54 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:18:54 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) [ 2631.399739] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2631.400837] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2631.401346] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2631.401804] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 2631.402331] blk_print_req_error: 2 callbacks suppressed [ 2631.402358] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 16 prio class 2 [ 2631.404777] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2631.405581] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2631.406692] Buffer I/O error on dev sr0, logical block 0, async page read [ 2631.408036] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2631.408836] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2631.410398] Buffer I/O error on dev sr0, logical block 1, async page read [ 2631.414727] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2631.415936] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2631.417082] Buffer I/O error on dev sr0, logical block 2, async page read [ 2631.421142] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2631.422023] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2631.423160] Buffer I/O error on dev sr0, logical block 3, async page read [ 2631.424621] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2631.425381] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2631.426643] Buffer I/O error on dev sr0, logical block 4, async page read [ 2631.427955] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2631.428773] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2631.430025] Buffer I/O error on dev sr0, logical block 5, async page read [ 2631.431574] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2631.432395] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2631.433556] Buffer I/O error on dev sr0, logical block 6, async page read [ 2631.438359] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2631.439110] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2631.440243] Buffer I/O error on dev sr0, logical block 7, async page read [ 2631.457618] syz-executor.1: attempt to access beyond end of device [ 2631.457618] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2631.458728] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 2631.479819] syz-executor.7: attempt to access beyond end of device [ 2631.479819] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 06:18:54 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, 0x0, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r2, 0x0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:18:54 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0x0, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:18:54 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2631.542618] loop2: detected capacity change from 0 to 40 [ 2631.577851] loop4: detected capacity change from 0 to 40 06:18:54 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, 0x0, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r2, 0x0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:18:54 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x0, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:18:54 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x0, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2631.676129] loop1: detected capacity change from 0 to 40 [ 2631.690770] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2631.691679] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2631.692150] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2631.692634] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 2631.693317] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 2631.695863] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2631.697117] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2631.698633] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2631.700016] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2631.701389] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2631.705926] loop7: detected capacity change from 0 to 40 06:18:54 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) [ 2631.712667] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2631.713941] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2631.715886] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2631.717235] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2631.723307] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2631.727221] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2631.728551] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2631.732948] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2631.733625] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2631.734633] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2631.735594] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2631.806084] syz-executor.4: attempt to access beyond end of device [ 2631.806084] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2631.843471] syz-executor.1: attempt to access beyond end of device [ 2631.843471] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2631.883434] syz-executor.7: attempt to access beyond end of device [ 2631.883434] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 06:19:08 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2645.961273] loop4: detected capacity change from 0 to 40 [ 2645.973750] loop1: detected capacity change from 0 to 40 [ 2645.978060] FAT-fs (loop4): invalid media value (0x00) [ 2645.978460] FAT-fs (loop4): Can't find a valid FAT filesystem 06:19:08 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:19:08 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x0, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:19:08 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:19:08 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:19:08 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x0, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) 06:19:08 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) 06:19:08 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0x0, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) [ 2645.997148] loop5: detected capacity change from 0 to 40 [ 2645.999948] loop7: detected capacity change from 0 to 40 [ 2646.020513] FAT-fs (loop5): invalid media value (0x00) [ 2646.020937] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2646.030739] loop2: detected capacity change from 0 to 40 [ 2646.035932] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2646.036689] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2646.037230] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2646.037830] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 2646.038352] blk_print_req_error: 16 callbacks suppressed [ 2646.038362] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 19 prio class 2 [ 2646.065792] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2646.066726] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2646.067367] buffer_io_error: 20 callbacks suppressed [ 2646.067377] Buffer I/O error on dev sr0, logical block 0, async page read [ 2646.068575] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2646.068955] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2646.069649] Buffer I/O error on dev sr0, logical block 1, async page read [ 2646.071846] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2646.072331] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2646.072970] Buffer I/O error on dev sr0, logical block 2, async page read [ 2646.073785] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2646.074157] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2646.074775] Buffer I/O error on dev sr0, logical block 3, async page read [ 2646.075564] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2646.075971] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2646.076665] Buffer I/O error on dev sr0, logical block 4, async page read [ 2646.077597] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2646.077987] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2646.078600] Buffer I/O error on dev sr0, logical block 5, async page read [ 2646.080239] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2646.080649] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2646.081223] Buffer I/O error on dev sr0, logical block 6, async page read [ 2646.082119] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2646.082542] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2646.083120] Buffer I/O error on dev sr0, logical block 7, async page read [ 2646.109305] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2646.109677] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2646.110487] Buffer I/O error on dev sr0, logical block 0, async page read [ 2646.111194] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2646.111604] Buffer I/O error on dev sr0, logical block 1, async page read [ 2646.112552] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2646.113497] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2646.115542] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2646.117233] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2646.118503] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2646.119781] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2646.148879] syz-executor.2: attempt to access beyond end of device [ 2646.148879] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2646.222585] syz-executor.1: attempt to access beyond end of device [ 2646.222585] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2646.227873] syz-executor.7: attempt to access beyond end of device [ 2646.227873] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 06:19:08 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x0, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:19:08 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:19:08 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) 06:19:08 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x0, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) 06:19:08 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x0, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2646.411067] loop0: detected capacity change from 0 to 40 [ 2646.430766] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2646.431593] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2646.432071] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2646.432562] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 2646.455393] loop1: detected capacity change from 0 to 40 [ 2646.477245] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2646.477951] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2646.478547] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2646.479066] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 2646.501812] syz-executor.1: attempt to access beyond end of device [ 2646.501812] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2646.541013] loop7: detected capacity change from 0 to 40 06:19:09 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:19:09 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x0, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2646.650957] loop1: detected capacity change from 0 to 40 [ 2646.674956] syz-executor.0: attempt to access beyond end of device [ 2646.674956] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2646.718125] syz-executor.7: attempt to access beyond end of device [ 2646.718125] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2646.811579] syz-executor.1: attempt to access beyond end of device [ 2646.811579] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 06:19:22 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:19:22 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x0, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:19:22 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x0, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:19:22 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:19:22 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:19:22 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x0, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:19:22 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x0, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) 06:19:22 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2659.979454] loop7: detected capacity change from 0 to 40 [ 2659.982589] loop5: detected capacity change from 0 to 40 [ 2659.991607] loop1: detected capacity change from 0 to 40 [ 2659.993550] FAT-fs (loop5): bogus number of reserved sectors [ 2659.993957] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2660.031153] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2660.031910] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2660.032553] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2660.033017] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 2660.033559] blk_print_req_error: 9 callbacks suppressed [ 2660.033569] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 9 prio class 2 [ 2660.081878] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2660.082589] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2660.083748] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2660.084212] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 2660.084765] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 8 prio class 2 [ 2660.085346] buffer_io_error: 21 callbacks suppressed [ 2660.085355] Buffer I/O error on dev sr0, logical block 0, async page read [ 2660.086127] Buffer I/O error on dev sr0, logical block 1, async page read [ 2660.086625] Buffer I/O error on dev sr0, logical block 2, async page read [ 2660.087106] Buffer I/O error on dev sr0, logical block 3, async page read [ 2660.087598] Buffer I/O error on dev sr0, logical block 4, async page read [ 2660.088076] Buffer I/O error on dev sr0, logical block 5, async page read [ 2660.088568] Buffer I/O error on dev sr0, logical block 6, async page read [ 2660.089052] Buffer I/O error on dev sr0, logical block 7, async page read [ 2660.125782] syz-executor.7: attempt to access beyond end of device [ 2660.125782] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2660.127059] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 2660.174641] syz-executor.1: attempt to access beyond end of device [ 2660.174641] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2660.175583] Buffer I/O error on dev loop1, logical block 10, lost async page write 06:19:22 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x0, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:19:22 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:19:22 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:19:22 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x0, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:19:22 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x0, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:19:22 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x0, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2660.370826] loop7: detected capacity change from 0 to 40 [ 2660.381426] loop0: detected capacity change from 0 to 40 [ 2660.406629] FAT-fs (loop0): bogus number of reserved sectors [ 2660.407047] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2660.421867] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2660.422520] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2660.422994] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2660.423479] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 2660.423962] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 2660.424762] loop1: detected capacity change from 0 to 40 [ 2660.465016] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2660.465690] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2660.466147] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2660.466617] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 2660.467115] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 8 prio class 2 06:19:23 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) [ 2660.549365] syz-executor.1: attempt to access beyond end of device [ 2660.549365] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2660.566196] syz-executor.7: attempt to access beyond end of device [ 2660.566196] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 06:19:23 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x0, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) [ 2660.711886] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2660.712598] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2660.713093] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2660.713687] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 2660.714329] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 2660.718348] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.718844] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2660.719575] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.719970] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 7 prio class 2 [ 2660.720964] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.721388] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2660.722184] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.722607] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2660.723547] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.723937] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2660.724793] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.725480] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.726111] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.726777] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.727464] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.728110] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.728812] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.729476] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.734242] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.734943] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.735596] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.736276] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.737557] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.738958] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.741008] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.742046] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.743296] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.767030] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.768033] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.771655] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.772632] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.773233] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.773963] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.774611] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.775227] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.775888] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.776545] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.777149] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.777805] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.779843] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.781217] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.783171] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.785002] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.786585] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.789081] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.790621] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.791909] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.793541] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.794777] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.796183] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.797642] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.799703] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.802791] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.804349] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.805614] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.807350] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.808763] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.810244] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.811776] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.813756] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.815016] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.816414] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.817873] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.819573] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.820893] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.822719] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.823986] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.825349] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.826680] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.827994] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.829391] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.830837] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.832114] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.835051] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.838794] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.844983] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.848856] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.855779] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.858191] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.859710] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.862067] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.863608] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.864887] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.867336] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.868652] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.869915] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.871618] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.874017] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.880211] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.884144] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.886354] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.891625] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.899010] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.911743] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.915614] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2661.218241] loop1: detected capacity change from 0 to 40 [ 2661.224141] loop4: detected capacity change from 0 to 40 06:19:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x0, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) 06:19:23 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) 06:19:23 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x0, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:19:23 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:19:23 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x0, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:19:23 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:19:23 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) [ 2661.310618] loop7: detected capacity change from 0 to 40 [ 2661.442014] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2661.443392] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2661.444325] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2661.445147] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 2661.459215] syz-executor.1: attempt to access beyond end of device [ 2661.459215] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 06:19:24 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2661.510377] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2661.511731] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2661.512708] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2661.513563] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 2661.516041] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2661.517761] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2661.570556] syz-executor.7: attempt to access beyond end of device [ 2661.570556] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2661.684539] loop4: detected capacity change from 0 to 40 [ 2661.699529] FAT-fs (loop4): bogus number of reserved sectors [ 2661.700966] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2675.717948] loop5: detected capacity change from 0 to 40 [ 2675.720866] loop7: detected capacity change from 0 to 40 [ 2675.732767] FAT-fs (loop5): bogus number of reserved sectors [ 2675.733164] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2675.736005] loop0: detected capacity change from 0 to 40 [ 2675.743096] loop4: detected capacity change from 0 to 40 [ 2675.756863] FAT-fs (loop0): bogus number of reserved sectors [ 2675.757334] FAT-fs (loop0): Can't find a valid FAT filesystem 06:19:38 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) 06:19:38 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:19:38 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:19:38 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x0, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) 06:19:38 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:19:38 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:19:38 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x0, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:19:38 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2675.828166] loop1: detected capacity change from 0 to 40 [ 2675.837842] loop2: detected capacity change from 0 to 40 [ 2675.842879] syz-executor.7: attempt to access beyond end of device [ 2675.842879] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2675.844738] buffer_io_error: 124 callbacks suppressed [ 2675.844758] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 2675.871133] FAT-fs (loop2): bogus number of reserved sectors [ 2675.872352] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2675.932197] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2675.932866] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2675.933366] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2675.933803] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 2675.934314] blk_print_req_error: 89 callbacks suppressed [ 2675.934325] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 28 prio class 2 [ 2675.936543] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2675.936941] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2675.937509] Buffer I/O error on dev sr0, logical block 0, async page read [ 2675.938041] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2675.938441] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 7 prio class 2 [ 2675.938990] Buffer I/O error on dev sr0, logical block 1, async page read [ 2675.939477] Buffer I/O error on dev sr0, logical block 2, async page read [ 2675.939954] Buffer I/O error on dev sr0, logical block 3, async page read [ 2675.940425] Buffer I/O error on dev sr0, logical block 4, async page read [ 2675.940878] Buffer I/O error on dev sr0, logical block 5, async page read [ 2675.941352] Buffer I/O error on dev sr0, logical block 6, async page read [ 2675.941816] Buffer I/O error on dev sr0, logical block 7, async page read [ 2675.979602] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2675.980416] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2675.981521] Buffer I/O error on dev sr0, logical block 0, async page read [ 2676.004821] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2676.005675] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2676.013561] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2676.014327] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2676.019934] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2676.020719] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2676.029239] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2676.030198] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2676.032021] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2676.033016] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2676.037675] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2676.038553] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 06:19:38 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x0, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2676.043795] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 06:19:38 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, 0x0) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) [ 2676.180346] loop7: detected capacity change from 0 to 40 [ 2676.182119] syz-executor.1: attempt to access beyond end of device [ 2676.182119] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 06:19:38 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x0, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2676.374844] loop1: detected capacity change from 0 to 40 [ 2676.415029] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2676.416240] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2676.417071] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2676.417825] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 2676.428690] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2676.434664] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2676.438971] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2676.440371] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2676.441778] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2676.443101] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2676.450810] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2676.451760] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2676.524132] syz-executor.7: attempt to access beyond end of device [ 2676.524132] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2676.582592] syz-executor.1: attempt to access beyond end of device [ 2676.582592] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 06:19:39 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x0, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:19:39 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) 06:19:39 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, 0x0) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) [ 2676.720861] loop7: detected capacity change from 0 to 40 [ 2676.757468] loop1: detected capacity change from 0 to 40 [ 2676.861868] syz-executor.1: attempt to access beyond end of device [ 2676.861868] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 06:19:39 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) 06:19:39 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, 0x0) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:19:39 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2676.981555] loop1: detected capacity change from 0 to 40 [ 2676.985743] syz-executor.7: attempt to access beyond end of device [ 2676.985743] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2677.013040] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2677.013999] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2677.014654] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2677.015305] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 2677.017609] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2677.018729] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2677.019816] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2677.021619] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2677.023631] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2677.025702] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2677.027824] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2677.030775] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2677.096899] loop0: detected capacity change from 0 to 40 [ 2677.111834] syz-executor.1: attempt to access beyond end of device [ 2677.111834] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2677.115334] FAT-fs (loop0): bogus number of reserved sectors [ 2677.116034] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2677.159357] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2677.160661] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2677.161348] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2677.161958] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 2677.163958] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2677.165184] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2677.166205] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2677.167716] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2677.169114] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2677.170532] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2677.171724] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2677.173184] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2677.176276] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2677.177601] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2677.178862] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2677.193703] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2677.207950] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2677.210951] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2677.213812] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2677.218295] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 06:19:56 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:19:56 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:19:56 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:19:56 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:19:56 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x0, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:19:56 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) 06:19:56 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, 0x0) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:19:56 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2693.810560] loop0: detected capacity change from 0 to 40 [ 2693.814888] loop1: detected capacity change from 0 to 40 [ 2693.815729] loop4: detected capacity change from 0 to 40 [ 2693.817182] loop5: detected capacity change from 0 to 40 [ 2693.819563] loop7: detected capacity change from 0 to 40 [ 2693.826025] FAT-fs (loop5): bogus number of reserved sectors [ 2693.826636] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2693.827377] FAT-fs (loop4): bogus number of reserved sectors [ 2693.827774] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2693.873211] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2693.874285] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2693.874747] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2693.875849] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 2693.876372] blk_print_req_error: 36 callbacks suppressed [ 2693.876383] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 21 prio class 2 [ 2693.927056] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2693.927766] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2693.928280] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2693.928720] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 2693.929207] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 8 prio class 2 [ 2693.929791] buffer_io_error: 45 callbacks suppressed [ 2693.929800] Buffer I/O error on dev sr0, logical block 0, async page read [ 2693.930601] Buffer I/O error on dev sr0, logical block 1, async page read [ 2693.931058] Buffer I/O error on dev sr0, logical block 2, async page read [ 2693.931538] Buffer I/O error on dev sr0, logical block 3, async page read [ 2693.931999] Buffer I/O error on dev sr0, logical block 4, async page read [ 2693.932478] Buffer I/O error on dev sr0, logical block 5, async page read [ 2693.932932] Buffer I/O error on dev sr0, logical block 6, async page read [ 2693.933402] Buffer I/O error on dev sr0, logical block 7, async page read [ 2693.956656] syz-executor.7: attempt to access beyond end of device [ 2693.956656] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2693.957629] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 2693.981692] syz-executor.1: attempt to access beyond end of device [ 2693.981692] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2693.982832] Buffer I/O error on dev loop1, logical block 10, lost async page write 06:19:56 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:19:56 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:19:56 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x0, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2694.142635] loop7: detected capacity change from 0 to 40 [ 2694.154218] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2694.154915] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2694.155469] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2694.155911] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 2694.156419] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 29 prio class 2 06:19:56 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2694.208336] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2694.209896] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2694.210850] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2694.211766] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 2694.212919] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 8 prio class 2 [ 2694.262722] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2694.263596] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2694.272110] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2694.273076] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2694.282358] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2694.283194] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2694.291137] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2694.292089] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2694.311943] loop1: detected capacity change from 0 to 40 [ 2694.315330] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2694.316164] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2694.321660] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2694.322455] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2694.325517] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2694.337036] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 06:19:57 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:19:57 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) [ 2694.447468] syz-executor.7: attempt to access beyond end of device [ 2694.447468] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2694.608986] loop2: detected capacity change from 0 to 40 [ 2694.642573] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2694.643768] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2694.644644] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2694.645487] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 2694.648293] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2694.649949] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2694.651718] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2694.652949] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2694.654330] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2694.656561] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2694.657829] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2694.657897] syz-executor.1: attempt to access beyond end of device [ 2694.657897] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2694.659043] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2694.661813] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2694.664202] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2694.667484] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2694.668863] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2694.670109] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2694.671846] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2694.677145] FAT-fs (loop2): bogus number of reserved sectors [ 2694.677186] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2694.677927] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2694.680922] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 06:19:57 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x0, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2694.867810] loop7: detected capacity change from 0 to 40 06:19:57 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2694.977989] loop1: detected capacity change from 0 to 40 [ 2695.077717] syz-executor.1: attempt to access beyond end of device [ 2695.077717] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2695.084648] syz-executor.7: attempt to access beyond end of device [ 2695.084648] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 06:20:12 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:20:12 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:20:12 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:20:12 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:20:12 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:20:12 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x0, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2709.719230] loop7: detected capacity change from 0 to 40 [ 2709.732231] loop5: detected capacity change from 0 to 40 [ 2709.741460] FAT-fs (loop0): bogus number of reserved sectors [ 2709.742552] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2709.752909] FAT-fs (loop5): bogus number of reserved sectors [ 2709.753775] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2709.758728] syz-executor.7: attempt to access beyond end of device [ 2709.758728] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2709.759819] buffer_io_error: 36 callbacks suppressed [ 2709.759830] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 2709.768378] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2709.769603] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2709.770517] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2709.771437] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 2709.772422] blk_print_req_error: 19 callbacks suppressed [ 2709.772441] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 06:20:12 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) 06:20:12 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:20:12 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x0, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2709.815448] loop1: detected capacity change from 0 to 40 [ 2709.819018] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2709.820294] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2709.821168] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2709.822022] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 2709.822962] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 8 prio class 2 [ 2709.823996] Buffer I/O error on dev sr0, logical block 0, async page read [ 2709.824883] Buffer I/O error on dev sr0, logical block 1, async page read [ 2709.825757] Buffer I/O error on dev sr0, logical block 2, async page read [ 2709.826665] Buffer I/O error on dev sr0, logical block 3, async page read [ 2709.827555] Buffer I/O error on dev sr0, logical block 4, async page read [ 2709.828047] loop7: detected capacity change from 0 to 40 [ 2709.828418] Buffer I/O error on dev sr0, logical block 5, async page read [ 2709.829685] Buffer I/O error on dev sr0, logical block 6, async page read [ 2709.830590] Buffer I/O error on dev sr0, logical block 7, async page read [ 2709.853566] loop4: detected capacity change from 0 to 40 [ 2709.865715] FAT-fs (loop4): bogus number of reserved sectors [ 2709.866139] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2709.881502] syz-executor.1: attempt to access beyond end of device [ 2709.881502] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2709.882619] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 2709.918765] syz-executor.7: attempt to access beyond end of device [ 2709.918765] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 06:20:12 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0x0, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) 06:20:12 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:20:12 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) [ 2710.011080] loop1: detected capacity change from 0 to 40 06:20:12 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x0, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2710.158379] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2710.159735] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2710.160660] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2710.161567] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 2710.162404] syz-executor.1: attempt to access beyond end of device [ 2710.162404] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2710.162555] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 30 prio class 2 [ 2710.165401] loop7: detected capacity change from 0 to 40 [ 2710.175748] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2710.176564] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2710.177839] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2710.178625] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 7 prio class 2 [ 2710.180110] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2710.180579] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2710.181788] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2710.182166] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2710.183054] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2710.183480] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2710.184588] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2710.185064] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2710.189800] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2710.190401] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2710.193868] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2710.194686] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2710.196507] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2710.197543] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2710.198438] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2710.199037] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2710.201687] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2710.202563] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2710.203141] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2710.204445] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2710.208154] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2710.213607] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2710.215059] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2710.216443] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2710.219016] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2710.220550] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2710.221821] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2710.225521] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2710.226305] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2710.240136] syz-executor.7: attempt to access beyond end of device [ 2710.240136] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 06:20:12 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:20:12 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0x0, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) 06:20:12 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x0, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2710.384883] loop1: detected capacity change from 0 to 40 [ 2710.435096] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2710.436449] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2710.437343] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2710.438158] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 2710.441123] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2710.442136] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2710.443320] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2710.444165] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2710.444900] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2710.446113] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2710.447894] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2710.448512] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2710.449622] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2710.454357] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2710.455204] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2710.456049] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2710.456965] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2710.462954] loop7: detected capacity change from 0 to 40 [ 2710.463206] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2710.482238] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2710.484665] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2710.486120] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2710.488637] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2710.612139] syz-executor.1: attempt to access beyond end of device [ 2710.612139] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2710.626663] syz-executor.7: attempt to access beyond end of device [ 2710.626663] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 06:20:28 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x0, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:20:28 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:20:28 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:20:28 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:20:28 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x0, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:20:28 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:20:28 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0x0, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) 06:20:28 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2725.729212] loop4: detected capacity change from 0 to 40 [ 2725.733644] loop7: detected capacity change from 0 to 40 [ 2725.743703] FAT-fs (loop4): bogus number of reserved sectors [ 2725.744557] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2725.750405] FAT-fs (loop2): bogus number of reserved sectors [ 2725.750990] loop5: detected capacity change from 0 to 40 [ 2725.751521] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2725.762911] loop1: detected capacity change from 0 to 40 [ 2725.788737] loop0: detected capacity change from 0 to 40 [ 2725.792217] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2725.793492] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2725.794351] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2725.795144] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 2725.796109] blk_print_req_error: 38 callbacks suppressed [ 2725.796127] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 17 prio class 2 [ 2725.801115] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2725.801983] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2725.803034] buffer_io_error: 61 callbacks suppressed [ 2725.803052] Buffer I/O error on dev sr0, logical block 0, async page read [ 2725.804685] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2725.805403] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 7 prio class 2 [ 2725.806413] Buffer I/O error on dev sr0, logical block 1, async page read [ 2725.807280] Buffer I/O error on dev sr0, logical block 2, async page read [ 2725.808119] Buffer I/O error on dev sr0, logical block 3, async page read [ 2725.808981] Buffer I/O error on dev sr0, logical block 4, async page read [ 2725.809849] Buffer I/O error on dev sr0, logical block 5, async page read [ 2725.810711] Buffer I/O error on dev sr0, logical block 6, async page read [ 2725.811589] Buffer I/O error on dev sr0, logical block 7, async page read [ 2725.813322] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2725.814166] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2725.814637] FAT-fs (loop0): bogus number of reserved sectors [ 2725.815185] Buffer I/O error on dev sr0, logical block 0, async page read [ 2725.815931] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2725.818866] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2725.819626] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2725.820690] Buffer I/O error on dev sr0, logical block 1, async page read [ 2725.825899] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2725.826654] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2725.830333] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2725.831023] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2725.856106] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2725.857170] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2725.860752] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2725.861614] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2725.864300] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2725.865065] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2725.872066] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2726.018089] syz-executor.7: attempt to access beyond end of device [ 2726.018089] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2726.088986] syz-executor.1: attempt to access beyond end of device [ 2726.088986] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 06:20:28 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c6"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) [ 2726.115653] syz-executor.5: attempt to access beyond end of device [ 2726.115653] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 06:20:28 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x0, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:20:28 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, 0xffffffffffffffff, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2726.318500] loop1: detected capacity change from 0 to 40 [ 2726.331998] loop7: detected capacity change from 0 to 40 [ 2726.389642] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2726.391134] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2726.392378] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2726.393461] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 2726.400218] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2726.401787] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2726.406701] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2726.412663] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2726.414653] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2726.416781] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2726.420791] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2726.425152] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2726.522038] syz-executor.7: attempt to access beyond end of device [ 2726.522038] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2726.587561] syz-executor.1: attempt to access beyond end of device [ 2726.587561] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 06:20:46 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:20:46 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:20:46 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:20:46 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c6"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:20:46 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:20:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, 0xffffffffffffffff, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) 06:20:46 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:20:46 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2743.789085] loop5: detected capacity change from 0 to 40 [ 2743.834144] FAT-fs (loop2): bogus number of reserved sectors [ 2743.834568] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2743.848574] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2743.849154] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2743.849624] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2743.850037] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 2743.850522] blk_print_req_error: 10 callbacks suppressed [ 2743.850531] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 17 prio class 2 [ 2743.851954] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2743.852537] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2743.853054] buffer_io_error: 19 callbacks suppressed [ 2743.853062] Buffer I/O error on dev sr0, logical block 0, async page read [ 2743.854049] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2743.854433] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2743.854950] Buffer I/O error on dev sr0, logical block 1, async page read [ 2743.855659] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2743.856019] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2743.856562] Buffer I/O error on dev sr0, logical block 2, async page read [ 2743.857214] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2743.857617] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2743.858138] Buffer I/O error on dev sr0, logical block 3, async page read [ 2743.858794] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2743.859139] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2743.859677] Buffer I/O error on dev sr0, logical block 4, async page read [ 2743.860444] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2743.860792] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2743.861344] Buffer I/O error on dev sr0, logical block 5, async page read [ 2743.862817] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2743.863185] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2743.863724] Buffer I/O error on dev sr0, logical block 6, async page read [ 2743.864456] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2743.864805] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2743.865212] loop7: detected capacity change from 0 to 40 [ 2743.865338] Buffer I/O error on dev sr0, logical block 7, async page read [ 2743.867038] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2743.867423] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2743.868394] Buffer I/O error on dev sr0, logical block 0, async page read [ 2743.870026] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2743.870757] Buffer I/O error on dev sr0, logical block 1, async page read [ 2743.873179] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2743.875237] loop1: detected capacity change from 0 to 40 [ 2743.877505] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2743.885786] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2743.888239] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2743.889636] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2743.896974] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2743.898227] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2743.901032] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2743.909051] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2743.916278] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2743.969758] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2743.970957] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2743.971796] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2743.972607] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 01 00 00 01 00 [ 2743.975813] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2743.982893] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2743.984007] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2743.984869] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2743.986501] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2743.987688] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2743.991106] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2743.992001] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2743.992967] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2743.994298] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2743.995820] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2743.997220] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 06:20:46 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) [ 2744.000028] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2744.005120] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2744.009649] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2744.016778] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2744.018664] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2744.049510] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2744.060677] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2744.066707] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2744.071759] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2744.072903] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2744.075512] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2744.076550] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2744.081845] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2744.082917] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2744.114836] syz-executor.1: attempt to access beyond end of device [ 2744.114836] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2744.123858] syz-executor.7: attempt to access beyond end of device [ 2744.123858] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 06:20:46 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:20:46 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2744.465911] loop4: detected capacity change from 0 to 40 [ 2744.488550] loop7: detected capacity change from 0 to 40 [ 2744.592018] syz-executor.7: attempt to access beyond end of device [ 2744.592018] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2744.645170] syz-executor.4: attempt to access beyond end of device [ 2744.645170] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 06:21:02 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:21:02 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:21:02 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:21:02 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, 0xffffffffffffffff, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2759.665520] loop1: detected capacity change from 0 to 40 [ 2759.679967] loop7: detected capacity change from 0 to 40 [ 2759.704362] loop5: detected capacity change from 0 to 40 [ 2759.717058] FAT-fs (loop2): bogus number of reserved sectors [ 2759.717512] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2759.722018] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2759.722663] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2759.723105] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2759.723591] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 2759.724051] blk_print_req_error: 38 callbacks suppressed [ 2759.724062] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 30 prio class 2 [ 2759.733223] syz-executor.1: attempt to access beyond end of device [ 2759.733223] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2759.734159] buffer_io_error: 50 callbacks suppressed [ 2759.734169] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 2759.767983] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2759.768651] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2759.769097] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2759.769542] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 2759.770005] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 8 prio class 2 [ 2759.770528] Buffer I/O error on dev sr0, logical block 0, async page read [ 2759.770957] Buffer I/O error on dev sr0, logical block 1, async page read [ 2759.771399] Buffer I/O error on dev sr0, logical block 2, async page read [ 2759.771834] Buffer I/O error on dev sr0, logical block 3, async page read [ 2759.772293] Buffer I/O error on dev sr0, logical block 4, async page read [ 2759.772719] Buffer I/O error on dev sr0, logical block 5, async page read [ 2759.773143] Buffer I/O error on dev sr0, logical block 6, async page read [ 2759.773594] Buffer I/O error on dev sr0, logical block 7, async page read 06:21:02 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c6"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:21:02 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:21:02 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:21:02 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) [ 2759.793203] syz-executor.7: attempt to access beyond end of device [ 2759.793203] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2759.795087] Buffer I/O error on dev loop7, logical block 10, lost async page write 06:21:02 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) 06:21:02 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:21:02 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:21:02 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:21:02 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:21:02 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) [ 2760.156674] loop1: detected capacity change from 0 to 40 [ 2760.176079] loop7: detected capacity change from 0 to 40 [ 2760.181948] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2760.182608] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2760.183064] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2760.183576] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 2760.184109] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 2760.214164] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.214749] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2760.222631] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.222994] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2760.226805] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.227238] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2760.256442] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.256802] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2760.257757] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.258105] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2760.258896] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.259262] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2760.261274] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.261639] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2760.262619] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.263186] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.264084] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.264693] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.265446] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.265996] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.266614] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.267179] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.267830] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.268984] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.296870] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.298041] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.298910] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.299607] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.300488] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.301107] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.301714] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.304106] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.304728] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.305634] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.306511] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.307180] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.310871] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.311606] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.312169] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.312826] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.313575] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.316029] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.316688] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.317274] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.317867] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.318460] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.319019] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.319619] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.320179] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.320998] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.321606] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.322199] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.322890] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.323679] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.324482] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.326827] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.327498] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.328197] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.328926] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.329718] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.336631] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.337574] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.338158] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.338851] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.340043] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.342697] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.343314] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.344314] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.344889] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.345541] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.346148] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.346814] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.347581] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.348287] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.348886] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.349503] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.350186] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.350798] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.351484] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.352055] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.352702] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.353484] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.354121] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.355479] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.356138] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.356921] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.357585] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.358144] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.358729] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.359538] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.360115] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.360756] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.361574] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.362313] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.362910] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.363498] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.364120] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.364797] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.365483] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.366041] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.367033] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.367705] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.368612] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.369194] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.369846] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.370559] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.371104] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.371705] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.372291] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.372866] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.373478] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.374126] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.374737] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.375537] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.376104] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.376713] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.377508] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.378064] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.378681] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.379238] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.379862] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.380657] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.381312] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.381871] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.382470] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.383088] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.383705] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.384802] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.385481] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.386424] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.387089] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.387779] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.388579] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.389129] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.389770] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.390601] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.391156] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.391819] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.392467] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.393111] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.393722] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.394324] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.394993] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.395604] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.396455] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.397067] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.397687] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.398469] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.399190] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.399889] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.400539] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.401094] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.401697] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.402524] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.403155] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.403788] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.404466] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.405302] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.405876] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.406692] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.407308] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.407934] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.408679] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.409525] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.410150] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.410790] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.427463] syz-executor.7: attempt to access beyond end of device [ 2760.427463] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2760.447864] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.451159] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 06:21:03 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:21:03 executing program 6: chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2760.460987] syz-executor.1: attempt to access beyond end of device [ 2760.460987] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2760.463628] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.625977] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2760.626611] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2760.627196] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2760.627640] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 2760.628627] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.629679] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.630278] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.630926] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.631690] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.632436] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.634527] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.635159] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.635850] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.636627] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.637183] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.637924] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.638543] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.639176] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.641754] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.644063] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.644786] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.645499] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.646050] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.647138] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.647734] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.648567] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.649498] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.650053] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.650793] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.651460] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.652165] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.652778] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.655893] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.663626] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.665620] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.674188] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.687835] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.690625] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.706355] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.708648] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.710620] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.712655] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.723165] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2760.726852] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 06:21:16 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:21:16 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:21:16 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) 06:21:16 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) [ 2773.838694] loop7: detected capacity change from 0 to 40 [ 2773.856784] FAT-fs (loop2): bogus number of reserved sectors [ 2773.857204] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2773.864211] loop1: detected capacity change from 0 to 40 [ 2773.883965] loop5: detected capacity change from 0 to 40 06:21:16 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:21:16 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:21:16 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:21:16 executing program 4: chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2773.924011] syz-executor.7: attempt to access beyond end of device [ 2773.924011] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2773.926093] buffer_io_error: 210 callbacks suppressed [ 2773.926112] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 2774.061608] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2774.063046] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2774.064054] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2774.065096] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 2774.066217] blk_print_req_error: 196 callbacks suppressed [ 2774.066237] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 2774.088526] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2774.089524] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2774.091092] Buffer I/O error on dev sr0, logical block 0, async page read [ 2774.092413] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2774.093303] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 7 prio class 2 [ 2774.094566] Buffer I/O error on dev sr0, logical block 1, async page read [ 2774.095535] Buffer I/O error on dev sr0, logical block 2, async page read [ 2774.096575] Buffer I/O error on dev sr0, logical block 3, async page read [ 2774.097646] Buffer I/O error on dev sr0, logical block 4, async page read [ 2774.098705] Buffer I/O error on dev sr0, logical block 5, async page read [ 2774.099760] Buffer I/O error on dev sr0, logical block 6, async page read [ 2774.100823] Buffer I/O error on dev sr0, logical block 7, async page read [ 2774.201932] syz-executor.1: attempt to access beyond end of device [ 2774.201932] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 06:21:16 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2774.203756] Buffer I/O error on dev loop1, logical block 10, lost async page write 06:21:16 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:21:16 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) [ 2774.381840] loop7: detected capacity change from 0 to 40 06:21:17 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2774.473903] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2774.475215] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2774.476178] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2774.477071] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 2774.478062] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 2774.485905] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2774.486740] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2774.488024] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2774.488828] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 7 prio class 2 [ 2774.491972] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2774.492811] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2774.496018] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2774.497173] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2774.501958] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2774.502846] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2774.509095] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2774.509908] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2774.511618] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2774.512790] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2774.513979] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2774.515185] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2774.523948] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2774.526660] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2774.527854] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2774.531551] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2774.532839] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2774.534669] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2774.536981] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2774.538228] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2774.555448] loop1: detected capacity change from 0 to 40 [ 2774.562631] syz-executor.7: attempt to access beyond end of device [ 2774.562631] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2774.720174] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2774.721405] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2774.722364] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2774.723232] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 06:21:17 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0x0, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2774.737404] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2774.750802] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2774.754581] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2774.755826] syz-executor.1: attempt to access beyond end of device [ 2774.755826] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2774.759350] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2774.775675] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2774.782983] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2774.789690] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2774.792749] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 06:21:17 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2774.862075] loop7: detected capacity change from 0 to 40 [ 2774.979742] syz-executor.7: attempt to access beyond end of device [ 2774.979742] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2775.027926] loop0: detected capacity change from 0 to 40 [ 2775.046375] FAT-fs (loop0): bogus number of reserved sectors [ 2775.047177] FAT-fs (loop0): Can't find a valid FAT filesystem 06:21:35 executing program 2: chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:21:35 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:21:35 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) 06:21:35 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:21:35 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0x0, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:21:35 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:21:35 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) 06:21:35 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2792.591938] loop0: detected capacity change from 0 to 40 [ 2792.598065] loop7: detected capacity change from 0 to 40 [ 2792.601282] FAT-fs (loop0): bogus number of reserved sectors [ 2792.601781] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2792.604351] loop5: detected capacity change from 0 to 40 [ 2792.609505] FAT-fs (loop5): bogus number of reserved sectors [ 2792.610038] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2792.628165] loop4: detected capacity change from 0 to 40 [ 2792.674498] syz-executor.7: attempt to access beyond end of device [ 2792.674498] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2792.675725] buffer_io_error: 35 callbacks suppressed [ 2792.675736] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 2792.701638] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2792.703336] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2792.704541] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2792.705672] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 2792.706925] blk_print_req_error: 21 callbacks suppressed [ 2792.706947] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 17 prio class 2 [ 2792.710036] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2792.710743] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2792.711274] Buffer I/O error on dev sr0, logical block 0, async page read [ 2792.711942] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2792.712330] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2792.712858] Buffer I/O error on dev sr0, logical block 1, async page read [ 2792.713437] loop1: detected capacity change from 0 to 40 [ 2792.713592] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2792.714509] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2792.715014] Buffer I/O error on dev sr0, logical block 2, async page read [ 2792.716023] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2792.716420] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2792.716949] Buffer I/O error on dev sr0, logical block 3, async page read [ 2792.717643] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2792.717993] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2792.718535] Buffer I/O error on dev sr0, logical block 4, async page read [ 2792.721148] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2792.721545] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2792.722076] Buffer I/O error on dev sr0, logical block 5, async page read [ 2792.722748] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2792.723103] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2792.723648] Buffer I/O error on dev sr0, logical block 6, async page read [ 2792.725089] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2792.725483] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2792.726010] Buffer I/O error on dev sr0, logical block 7, async page read [ 2792.727949] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2792.728351] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2792.728871] Buffer I/O error on dev sr0, logical block 0, async page read [ 2792.731953] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2792.732687] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2792.733478] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2792.734046] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2792.736480] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2792.738808] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2792.748157] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2792.767376] syz-executor.1: attempt to access beyond end of device [ 2792.767376] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2792.820963] syz-executor.4: attempt to access beyond end of device [ 2792.820963] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 06:21:35 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0x0, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:21:35 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:21:35 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) 06:21:35 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:21:35 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2793.178699] loop7: detected capacity change from 0 to 40 [ 2793.226754] loop1: detected capacity change from 0 to 40 [ 2793.288376] loop4: detected capacity change from 0 to 40 [ 2793.357233] syz-executor.1: attempt to access beyond end of device [ 2793.357233] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2793.389117] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2793.390340] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2793.391180] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2793.392044] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 2793.394327] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2793.398587] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2793.400033] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2793.404175] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2793.406609] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2793.416666] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2793.418544] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2793.421040] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2793.433002] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2793.434580] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2793.468791] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2793.470568] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2793.493767] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2793.500341] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2793.506340] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2793.516540] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 06:21:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) 06:21:36 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) [ 2793.579745] syz-executor.7: attempt to access beyond end of device [ 2793.579745] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2793.597627] loop1: detected capacity change from 0 to 40 [ 2793.665634] syz-executor.4: attempt to access beyond end of device [ 2793.665634] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2793.674687] syz-executor.1: attempt to access beyond end of device [ 2793.674687] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 06:21:36 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aeff"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) [ 2793.912421] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2793.913633] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2793.914526] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2793.915371] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 2793.917130] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2793.918612] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2793.919743] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2793.923770] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2793.924906] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2793.926783] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2793.927885] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2793.929323] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2793.930875] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2793.931948] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2793.933067] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2793.934210] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2793.935581] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2793.936719] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2793.937855] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2793.940897] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2793.942191] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2793.946740] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2793.947836] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2793.949345] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2793.950940] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2793.952017] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2793.953224] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2793.954617] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 06:21:51 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aeff"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:21:51 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) 06:21:51 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:21:51 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:21:51 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:21:51 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) 06:21:51 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) 06:21:51 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, 0xffffffffffffffff, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2809.046780] loop1: detected capacity change from 0 to 40 [ 2809.050699] loop4: detected capacity change from 0 to 40 [ 2809.052654] loop0: detected capacity change from 0 to 40 [ 2809.055639] loop7: detected capacity change from 0 to 40 [ 2809.080046] FAT-fs (loop0): bogus number of reserved sectors [ 2809.080944] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2809.157003] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2809.158220] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2809.159110] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2809.159957] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 2809.160912] blk_print_req_error: 49 callbacks suppressed [ 2809.160932] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 30 prio class 2 [ 2809.201183] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.202338] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2809.203416] buffer_io_error: 53 callbacks suppressed [ 2809.203433] Buffer I/O error on dev sr0, logical block 0, async page read [ 2809.205099] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.205866] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 7 prio class 2 [ 2809.206917] Buffer I/O error on dev sr0, logical block 1, async page read [ 2809.207808] Buffer I/O error on dev sr0, logical block 2, async page read [ 2809.208711] Buffer I/O error on dev sr0, logical block 3, async page read [ 2809.209614] Buffer I/O error on dev sr0, logical block 4, async page read [ 2809.210499] Buffer I/O error on dev sr0, logical block 5, async page read [ 2809.211427] Buffer I/O error on dev sr0, logical block 6, async page read [ 2809.212307] Buffer I/O error on dev sr0, logical block 7, async page read [ 2809.213712] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.214447] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2809.215491] Buffer I/O error on dev sr0, logical block 0, async page read [ 2809.217558] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.218316] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2809.219390] Buffer I/O error on dev sr0, logical block 1, async page read [ 2809.220669] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.221445] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2809.223055] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.223972] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2809.225581] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.226454] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2809.227975] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.228842] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2809.230561] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.231322] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2809.232892] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.259786] syz-executor.7: attempt to access beyond end of device [ 2809.259786] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 06:21:51 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) [ 2809.377745] syz-executor.1: attempt to access beyond end of device [ 2809.377745] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 06:21:51 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, 0xffffffffffffffff, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2809.411590] syz-executor.4: attempt to access beyond end of device [ 2809.411590] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 06:21:52 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aeff"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:21:52 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) [ 2809.483625] loop7: detected capacity change from 0 to 40 [ 2809.531330] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2809.532640] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2809.533534] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2809.534383] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 2809.536153] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.541494] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.543474] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.544507] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.552451] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.555517] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.556171] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.556924] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.557778] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.560492] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.564976] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.614233] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 06:21:52 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) 06:21:52 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2809.629744] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.643719] syz-executor.7: attempt to access beyond end of device [ 2809.643719] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2809.644163] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.647484] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.651614] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.653037] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.653919] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.654606] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.655476] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.656115] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.656826] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.657509] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.658176] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.658937] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.681025] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.699936] loop1: detected capacity change from 0 to 40 [ 2809.702941] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.703712] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.704623] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.705298] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.705919] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.706791] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.707578] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.708678] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.720208] FAT-fs (loop4): bogus number of reserved sectors [ 2809.720737] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2809.732505] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.733499] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.734113] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.734792] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.735447] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.736082] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.736782] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.737438] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.738052] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.738804] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.739449] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.740084] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.740754] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.741446] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.742043] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.743538] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.756485] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 06:21:52 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:21:52 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:21:52 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, 0xffffffffffffffff, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2809.870780] loop2: detected capacity change from 0 to 40 [ 2809.919514] loop5: detected capacity change from 0 to 40 [ 2809.923908] loop7: detected capacity change from 0 to 40 [ 2810.029847] syz-executor.1: attempt to access beyond end of device [ 2810.029847] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2810.033956] syz-executor.2: attempt to access beyond end of device [ 2810.033956] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 06:21:52 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffb"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:21:52 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2810.062865] syz-executor.7: attempt to access beyond end of device [ 2810.062865] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 06:21:52 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:21:52 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2810.125815] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2810.126567] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2810.127027] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2810.127495] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 2810.128575] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2810.129509] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2810.130496] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2810.131077] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2810.132687] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2810.133568] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2810.134290] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2810.134890] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2810.135969] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2810.136647] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2810.137466] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2810.138062] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2810.138899] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2810.139558] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2810.140516] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2810.141522] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2810.142223] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2810.143028] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2810.143658] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2810.145105] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2810.146564] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2810.147458] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2810.148090] loop0: detected capacity change from 0 to 40 [ 2810.148464] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 06:21:52 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2810.151152] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2810.153138] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2810.155951] FAT-fs (loop0): bogus number of reserved sectors [ 2810.156624] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2810.165011] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2810.179217] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2810.182744] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2810.187237] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2810.193901] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2810.195464] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2810.199977] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 06:21:52 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2810.274707] loop1: detected capacity change from 0 to 40 06:21:52 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffb"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) [ 2810.351021] loop2: detected capacity change from 0 to 40 [ 2810.428689] loop7: detected capacity change from 0 to 40 06:21:53 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) [ 2810.533171] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2810.534638] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2810.535614] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2810.536803] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 2810.539074] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2810.540632] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2810.542043] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2810.543612] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2810.545220] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2810.547827] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2810.549188] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2810.551768] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2810.554909] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2810.556324] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2810.557867] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2810.559405] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2810.560895] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2810.562318] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2810.563636] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2810.565616] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 06:21:53 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffb"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) [ 2810.642810] syz-executor.7: attempt to access beyond end of device [ 2810.642810] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2810.661985] syz-executor.2: attempt to access beyond end of device [ 2810.661985] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2810.752669] syz-executor.1: attempt to access beyond end of device [ 2810.752669] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 06:21:53 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:21:53 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2810.870792] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2810.872020] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2810.872974] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2810.873825] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 2810.875910] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2810.880580] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2810.889606] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2810.890730] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2810.892663] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2810.893988] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2810.895631] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2810.905821] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2811.014155] loop7: detected capacity change from 0 to 40 06:22:10 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000040)="e4301363dcc0b8a8", 0x8}, {&(0x7f0000000380)="d49e3925c4a51888ac1dc70c14a63114279d1a1dbf06e068bd1e3ce44d17070ebeb28357f3ee0af26720ee8b2d35d8bed3d53b057d4d698300d602ef017f51d0fc99f53d08d3eb40d8b232c0ab663ad3620b8e5e68d147b3810a2c20b4b1dca4e0eb4da754623f72d8d3587bebe1d505d7510f1d75e83185706496732e1d08ded2d28de2f22898715ed33433a8c5f8c8477a5275ea90e16d300abfa9c1d4058efbf82ab311f4a81bbcbc628be52fa9dfd2c00234f4dae91256a8428f812cb221b50a", 0xc2}, {&(0x7f0000000480)="f3888d91e598e8f2d3f4ebce2b7deed5ac7f1a4eb3f47920093404c063ceea9b6e682b9ac2c16bf529b471b2cf1b17b74e57d2e3daaf606b2bfd619a00db0bde1d643b66c7a152732a0a02cf206589138ef630ab73f8664fbc4ed702bf11b107848c4a67fb01f8326294d5c257668ffa2b129c234e4175dbd9ce", 0x7a}, {&(0x7f0000000500)="47bf6a40e5e3dd9b871effb62064b6ffee505b9805f7254cd7344dec9c770b297d685f4f64ce07e8c5e4c1cf1365623f459e37a5d5246b34faa4682c42a22e1da0cb8bab9c326fe43ba6551f5bc9eb7d688ac57d20b6a804fd7e75394aa942eec51ac204aa4ae231ca0f27edc583571b88edd67c0e08bf95d199cb19b1209415e416ce65b92c4eba1c35f989a9cbf5ca9dce73826fe87c6808f209ff9d47985f5498f324ee35e0f1bea8e37e31b9ca9ff0bf376f5304d1d47876555c47710076a5163192ea841dbe7704ea40586fcfe058a0", 0xd2}, {&(0x7f0000000600)="90a3a1361e33a96bc1fa5e0077f544cc8b41f2440f0b87799a0c456ee9c4d78828c5edce1d1939573dbf7abf6e29caf664947382f8e15905302f8bd24fa49a5349bf9d5430662278f402ef24b2f67321b215ec58ecda7f01c31526473c6f40b722ec44cd13fcc8ded218e697398d42983d455abf27da40eb16786a231e18f42e9d0972d43c25a6", 0x87}, {&(0x7f00000006c0)="e0bb715db0bef869dac4a9e5af0dacb4d04d2dec0ab72c550e517fc00391a66ea4c3dd5016efe7db1711bc7ba01e8871a3325affffeb2990e52e4a5301687b9d83ad8ff70cf3cdbbb19bb1b802c8e5c2ead43e28d5911e3fa09b7f7ce90c2cb2f45202", 0x63}, {&(0x7f0000000740)="10c1345f5da6fe3c193103ab99f11ba5412d604df8319d620e7a9106d393ee4b18753b8929f228943aec784cd524755e1a3e356c64183f8b3afedb2f09572d0322ea8659c446ceab090cda9176bd809dd93e44d3ee24debaa0300a97b06d08d6b91161f0c75a7024481568793841eca4cc250e53a8a92957038226d84fc0fb8b1f1dee3dff76909ea029", 0x8a}], 0x7, 0xc9ed, 0x9, 0x10) sendfile(r2, r0, 0x0, 0xfffffdef) 06:22:10 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:22:10 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x9) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:22:10 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:22:10 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:22:10 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) 06:22:10 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() tgkill(0x0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x55, 0x1f, 0x40, 0x7b, 0x0, 0x6, 0x100, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x40, 0x0, 0x3, 0x4, 0x7fff, 0xffffffff, 0xf25, 0x0, 0xffffffff, 0x0, 0xffffffffb22cf358}, r2, 0xd, r0, 0xa) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x40, 0x1f, 0x6, 0x0, 0xa34, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x40}, 0x40, 0xec, 0xffffffc3, 0x0, 0x8, 0x80, 0x8, 0x0, 0x7, 0x0, 0x80000001}, r1, 0xffffff7fffffffff, 0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="0100ffff000000002e2f66696c65300044c68da6af750057faec6e3c778e91aefffbf9"]) syz_io_uring_setup(0x41e4, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0xfffffffc, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x240b154a4ff726fe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x1}}, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3) 06:22:10 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2401, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)=']{\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r0, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4, 0x5, 0x3f, 0x0, 0x100000001, 0x81080, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x13439f45}, 0x43441, 0x9, 0x400, 0x0, 0x6, 0x101, 0x3, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xc, r3, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0xfffffffffffffe8c}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 2827.659648] loop4: detected capacity change from 0 to 40 [ 2827.677107] loop1: detected capacity change from 0 to 40 [ 2827.682812] loop2: detected capacity change from 0 to 40 [ 2827.685210] loop5: detected capacity change from 0 to 40 [ 2827.688599] loop7: detected capacity change from 0 to 40 [ 2827.735738] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2827.736977] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2827.738081] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2827.738968] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 2827.739928] blk_print_req_error: 112 callbacks suppressed [ 2827.739946] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 23 prio class 2 [ 2827.794346] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2827.795851] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2827.796766] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2827.797746] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 2827.798799] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 8 prio class 2 [ 2827.800005] buffer_io_error: 129 callbacks suppressed [ 2827.800022] Buffer I/O error on dev sr0, logical block 0, async page read [ 2827.801583] Buffer I/O error on dev sr0, logical block 1, async page read [ 2827.802572] Buffer I/O error on dev sr0, logical block 2, async page read [ 2827.803464] Buffer I/O error on dev sr0, logical block 3, async page read [ 2827.804359] Buffer I/O error on dev sr0, logical block 4, async page read [ 2827.805289] Buffer I/O error on dev sr0, logical block 5, async page read [ 2827.806298] Buffer I/O error on dev sr0, logical block 6, async page read [ 2827.807191] Buffer I/O error on dev sr0, logical block 7, async page read [ 2827.851118] bio_check_eod: 1 callbacks suppressed [ 2827.851142] syz-executor.1: attempt to access beyond end of device [ 2827.851142] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2827.853502] Buffer I/O error on dev loop1, logical block 10, lost async page write [ 2827.872485] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2827.873316] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2827.874526] Buffer I/O error on dev sr0, logical block 0, async page read [ 2827.875531] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2827.876224] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 7 prio class 2 [ 2827.914722] syz-executor.5: attempt to access beyond end of device [ 2827.914722] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2827.929894] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2827.931148] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2827.932024] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2827.932845] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 2827.933759] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 8 prio class 2 [ 2827.941510] syz-executor.4: attempt to access beyond end of device [ 2827.941510] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2827.950093] syz-executor.7: attempt to access beyond end of device [ 2827.950093] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 2829.229227] ================================================================== [ 2829.229985] BUG: KASAN: use-after-free in __lock_acquire+0x42c9/0x5e70 [ 2829.230634] Read of size 8 at addr ffff888016cf2608 by task syz-executor/11312 [ 2829.231319] [ 2829.231491] CPU: 1 PID: 11312 Comm: syz-executor Not tainted 6.1.0-rc5-next-20221114 #1 [ 2829.232256] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2829.233051] Call Trace: [ 2829.233308] [ 2829.233538] dump_stack_lvl+0x8f/0xb7 [ 2829.233920] print_report+0x175/0x478 [ 2829.234306] ? __lock_acquire+0x42c9/0x5e70 [ 2829.234725] kasan_report+0xbf/0x1c0 [ 2829.235102] ? __lock_acquire+0x42c9/0x5e70 [ 2829.235534] __lock_acquire+0x42c9/0x5e70 [ 2829.235949] ? __pfx_mark_lock.part.0+0x10/0x10 [ 2829.236403] ? finish_task_switch.isra.0+0x22d/0x8a0 [ 2829.236905] ? __pfx___lock_acquire+0x10/0x10 [ 2829.237345] ? __switch_to+0x5c3/0xf30 [ 2829.237749] lock_acquire+0x1a6/0x530 [ 2829.238134] ? kmemleak_scan+0x1a0/0x1600 [ 2829.238550] ? __pfx_lock_acquire+0x10/0x10 [ 2829.238969] ? rcu_read_lock_sched_held+0x42/0x80 [ 2829.239447] ? trace_rcu_dyntick+0x1a7/0x250 [ 2829.239896] ? ct_nmi_exit+0x11d/0x1c0 [ 2829.240295] _raw_spin_lock_irq+0x36/0x50 [ 2829.240712] ? kmemleak_scan+0x1a0/0x1600 [ 2829.241133] kmemleak_scan+0x1a0/0x1600 [ 2829.241533] ? __pfx_kmemleak_scan+0x10/0x10 [ 2829.244038] ? strncpy_from_user+0x107/0x500 [ 2829.245764] kmemleak_write+0x574/0x680 [ 2829.246148] ? __pfx_kmemleak_write+0x10/0x10 [ 2829.246586] ? debugfs_file_get+0x1d2/0x450 [ 2829.247002] ? __pfx_debugfs_file_get+0x10/0x10 [ 2829.247460] full_proxy_write+0x121/0x190 [ 2829.247865] vfs_write+0x358/0xe40 [ 2829.248224] ? __pfx_full_proxy_write+0x10/0x10 [ 2829.248685] ? __pfx_vfs_write+0x10/0x10 [ 2829.249107] ? lock_release+0x3b6/0x750 [ 2829.249497] ? syscall_enter_from_user_mode+0x1c/0x50 [ 2829.250008] ? perf_trace_preemptirq_template+0xa6/0x420 [ 2829.250533] ? __fget_light+0x212/0x280 [ 2829.250941] ksys_write+0x12b/0x260 [ 2829.251309] ? __pfx_ksys_write+0x10/0x10 [ 2829.251717] ? rcu_read_lock_sched_held+0x42/0x80 [ 2829.252187] do_syscall_64+0x3f/0x90 [ 2829.252561] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2829.253088] RIP: 0033:0x7fe71ba7b5c3 [ 2829.253451] Code: 16 00 00 00 eb ae 90 b8 6e 00 00 00 eb a6 e8 44 ef 04 00 0f 1f 40 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 55 c3 0f 1f 40 00 48 83 ec 28 48 89 54 24 18 [ 2829.255150] RSP: 002b:00007ffce75e0d98 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2829.255866] RAX: ffffffffffffffda RBX: 00007ffce75e13d8 RCX: 00007fe71ba7b5c3 [ 2829.256529] RDX: 0000000000000004 RSI: 00007fe71bb31ed9 RDI: 0000000000000003 [ 2829.257277] RBP: 0000000000000002 R08: 0000000000000b0c R09: 00007ffce75f9080 [ 2829.258051] R10: 00007ffce75f9090 R11: 0000000000000246 R12: 00000000fffffff6 [ 2829.258826] R13: 00007ffce75e2ef1 R14: 0000000000000000 R15: 00000000002b2907 [ 2829.259610] [ 2829.259874] [ 2829.260074] Allocated by task 11311: [ 2829.260487] kasan_save_stack+0x22/0x50 [ 2829.260969] kasan_set_track+0x25/0x30 [ 2829.261422] __kasan_slab_alloc+0x5c/0x70 [ 2829.261877] kmem_cache_alloc+0x1e0/0x410 [ 2829.262280] __create_object+0x3d/0xc00 [ 2829.262656] kmem_cache_alloc+0x272/0x410 [ 2829.263059] __alloc_file+0x21/0x240 [ 2829.263434] alloc_empty_file+0x71/0x170 [ 2829.263831] path_openat+0xd4/0x29b0 [ 2829.264188] do_filp_open+0x1ba/0x410 [ 2829.264556] do_sys_openat2+0x171/0x4c0 [ 2829.264962] __x64_sys_openat+0x143/0x200 [ 2829.265370] do_syscall_64+0x3f/0x90 [ 2829.265728] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2829.266229] [ 2829.266394] Freed by task 19: [ 2829.266693] kasan_save_stack+0x22/0x50 [ 2829.267092] kasan_set_track+0x25/0x30 [ 2829.267482] kasan_save_free_info+0x2e/0x50 [ 2829.267894] __kasan_slab_free+0x10a/0x190 [ 2829.268292] kmem_cache_free+0xfb/0x610 [ 2829.268678] rcu_core+0x7e2/0x2090 [ 2829.269049] __do_softirq+0x1c7/0x8f9 [ 2829.269416] [ 2829.269582] Last potentially related work creation: [ 2829.270032] kasan_save_stack+0x22/0x50 [ 2829.270422] __kasan_record_aux_stack+0x95/0xb0 [ 2829.270866] __call_rcu_common.constprop.0+0x6a/0xa40 [ 2829.271355] kmem_cache_free+0xc1/0x610 [ 2829.271742] rcu_core+0x7e2/0x2090 [ 2829.272096] __do_softirq+0x1c7/0x8f9 [ 2829.272468] [ 2829.272634] Second to last potentially related work creation: [ 2829.273170] kasan_save_stack+0x22/0x50 [ 2829.273562] __kasan_record_aux_stack+0x95/0xb0 [ 2829.274004] __call_rcu_common.constprop.0+0x6a/0xa40 [ 2829.274496] kmem_cache_free+0xc1/0x610 [ 2829.274882] fsnotify_mark_destroy_workfn+0x205/0x320 [ 2829.275369] process_one_work+0xa17/0x16a0 [ 2829.275774] worker_thread+0x63b/0x1260 [ 2829.276154] kthread+0x2f1/0x3a0 [ 2829.276479] ret_from_fork+0x2c/0x50 [ 2829.276846] [ 2829.277018] The buggy address belongs to the object at ffff888016cf25f0 [ 2829.277018] which belongs to the cache kmemleak_object of size 240 [ 2829.278168] The buggy address is located 24 bytes inside of [ 2829.278168] 240-byte region [ffff888016cf25f0, ffff888016cf26e0) [ 2829.279212] [ 2829.279378] The buggy address belongs to the physical page: [ 2829.279886] page:000000006fda4ff1 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x16cf2 [ 2829.280716] flags: 0x100000000000200(slab|node=0|zone=1) [ 2829.281238] raw: 0100000000000200 ffff88800844f780 ffffea0001069380 dead000000000004 [ 2829.281948] raw: 0000000000000000 00000000000d000d 00000001ffffffff 0000000000000000 [ 2829.282645] page dumped because: kasan: bad access detected [ 2829.283148] [ 2829.283310] Memory state around the buggy address: [ 2829.283747] ffff888016cf2500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2829.284397] ffff888016cf2580: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fa fb [ 2829.285060] >ffff888016cf2600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2829.285709] ^ [ 2829.286047] ffff888016cf2680: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 2829.286698] ffff888016cf2700: fc fc fc fc 00 00 00 00 00 00 00 00 00 00 00 00 [ 2829.287349] ================================================================== [ 2829.287992] Disabling lock debugging due to kernel taint VM DIAGNOSIS: 06:22:12 Registers: info registers vcpu 0 RAX=ffffffff843fbf30 RBX=ffffffff85432940 RCX=ffffffff843dc932 RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000000 RBP=0000000000000000 RSP=ffffffff85407e20 R8 =0000000000000001 R9 =ffff88806ce34cc3 R10=ffffed100d9c6998 R11=0000000000000001 R12=fffffbfff0a86528 R13=ffffffff85d0f190 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff843fbf3f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe605aba8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe605aba6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffce75f9080 CR3=0000000016fb6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff4ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000ff0000000000000000000000 XMM01=636f6c63006b61656c6d656d6b2f6775 XMM02=0000000000ffffffff00000000000000 XMM03=0000ff00000000000000000000000000 XMM04=ffffffffffffffffffff000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff82477ba0 RDI=ffffffff87dc29e0 RBP=ffffffff87dc29a0 RSP=ffff888043b5f1f0 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000002710 R13=0000000000000020 R14=fffffbfff0fb858c R15=dffffc0000000000 RIP=ffffffff82477bf5 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555557387400 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe7bcac0f000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe7bcac0d000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555bc28ea182 CR3=0000000016fb6000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff4ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=000000070000000d0000555bc4663230 XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=00373d524f4a414d0036333737313037 XMM05=535500393633383d4d554e5145530038 XMM06=59545645440037706f6f6c2f7665642f XMM07=48544e5953006b636f6c623d4d455453 XMM08=49006d756e203c2069000a313a56000a XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000